小改怡情，大改伤身，强改灰飞烟灭

app/controllers/forums_controller.rb

@@ -1,12 +1,29 @@
 class ForumsController < ApplicationController
+  
+  
+  
   # GET /forums
   # GET /forums.json
   def index
-    @forums = Forum.all
+    # @forums = Forum.all
 
     respond_to do |format|
-      format.html # index.html.erb
+      format.html {
-      format.json { render json: @forums }
+        scope = Forum
+        unless params[:closed]
+          scope = scope.active
+        end
+        @forums = scope.visible.order('lft').all
+      }
+      format.api  {
+        @offset, @limit = api_offset_and_limit
+        @project_count = Forum.visible.count
+        @projects = Forum.visible.offset(@offset).limit(@limit).order('lft').all
+      }
+      format.atom {
+        projects = Forum.visible.order('created_on DESC').limit(Setting.feeds_limit.to_i).all
+        render_feed(projects, :title => "#{Setting.app_title}: #{l(:label_project_latest)}")
+      }
     end
   end
 
@@ -15,9 +32,30 @@ class ForumsController < ApplicationController
   def show
     @forum = Forum.find(params[:id])
 
+    # # try to redirect to the requested menu item
+    # if params[:jump] && redirect_to_project_menu_item(@project, params[:jump])
+      # return
+    # end
+
+    @users_by_role = @forum.users_by_role
+    # @subprojects = @project.children.visible.all
+    # @news = @project.news.limit(5).includes(:author, :project).reorder("#{News.table_name}.created_on DESC").all
+    # @trackers = @project.rolled_up_trackers
+
+    # cond = @project.project_condition(Setting.display_subprojects_issues?)
+
+    # @open_issues_by_tracker = Issue.visible.open.where(cond).count(:group => :tracker)
+    # @total_issues_by_tracker = Issue.visible.where(cond).count(:group => :tracker)
+
+    # if User.current.allowed_to?(:view_time_entries, @project)
+      # @total_hours = TimeEntry.visible.sum(:hours, :include => :project, :conditions => cond).to_f
+    # end
+
+    @key = User.current.rss_key
+
     respond_to do |format|
-      format.html # show.html.erb
+      format.html
-      format.json { render json: @forum }
+      format.api
     end
   end
 
@@ -26,6 +64,11 @@ class ForumsController < ApplicationController
   def new
     @forum = Forum.new
 
+    # @issue_custom_fields = IssueCustomField.sorted.all
+    # @trackers = Tracker.sorted.all
+    # @project = Project.new
+    @forum.safe_attributes = params[:forum]
+    
     respond_to do |format|
       format.html # new.html.erb
       format.json { render json: @forum }
@@ -40,15 +83,37 @@ class ForumsController < ApplicationController
   # POST /forums
   # POST /forums.json
   def create
-    @forum = Forum.new(params[:forum])
+    # @forum = Forum.new(params[:forum])
 
-    respond_to do |format|
+    # @issue_custom_fields = IssueCustomField.sorted.all
-      if @forum.save
+    # @trackers = Tracker.sorted.all
-        format.html { redirect_to @forum, notice: 'Forum was successfully created.' }
+    @forum = Forum.new
-        format.json { render json: @forum, status: :created, location: @forum }
+    @project.safe_attributes = params[:project]
-      else
+
-        format.html { render action: "new" }
+    if @forum.save
-        format.json { render json: @forum.errors, status: :unprocessable_entity }
+      # @project.set_allowed_parent!(params[:project]['parent_id']) if params[:project].has_key?('parent_id')
+      # Add current user as a project member if he is not admin
+      unless User.current.admin?
+        r = Role.givable.find_by_id(Setting.new_project_user_role_id.to_i) || Role.givable.first
+        m = Member.new(:user => User.current, :roles => [r])
+        @forum.members << m
+      end
+      respond_to do |format|
+        format.html {
+          flash[:notice] = l(:notice_successful_create)
+          # if params[:continue]
+            # attrs = {:parent_id => @forum.parent_id}.reject {|k,v| v.nil?}
+            # redirect_to new_project_path(attrs)
+          # else
+            redirect_to settings_project_path(@forum)
+          # end
+        }
+        format.api  { render :action => 'show', :status => :created, :location => url_for(:controller => 'forums', :action => 'show', :id => @forum.id) }
+      end
+    else
+      respond_to do |format|
+        format.html { render :action => 'new' }
+        format.api  { render_validation_errors(@forum) }
       end
     end
   end
@@ -58,13 +123,23 @@ class ForumsController < ApplicationController
   def update
     @forum = Forum.find(params[:id])
 
-    respond_to do |format|
+    @forum.safe_attributes = params[:project]
-      if @forum.update_attributes(params[:forum])
+    if @forum.save
-        format.html { redirect_to @forum, notice: 'Forum was successfully updated.' }
+      # @project.set_allowed_parent!(params[:project]['parent_id']) if params[:project].has_key?('parent_id')
-        format.json { head :no_content }
+      respond_to do |format|
-      else
+        format.html {
-        format.html { render action: "edit" }
+          flash[:notice] = l(:notice_successful_update)
-        format.json { render json: @forum.errors, status: :unprocessable_entity }
+          redirect_to settings_project_path(@forum)
+        }
+        format.api  { render_api_ok }
+      end
+    else
+      respond_to do |format|
+        format.html {
+          settings
+          render :action => 'settings'
+        }
+        format.api  { render_validation_errors(@forum) }
       end
     end
   end
@@ -73,11 +148,17 @@ class ForumsController < ApplicationController
   # DELETE /forums/1.json
   def destroy
     @forum = Forum.find(params[:id])
-    @forum.destroy
+    # @forum.destroy
-
+    
-    respond_to do |format|
+    @project_to_destroy = @forum
-      format.html { redirect_to forums_url }
+    if api_request? || params[:confirm]
-      format.json { head :no_content }
+      @project_to_destroy.destroy
+      respond_to do |format|
+        format.html { redirect_to admin_projects_path }
+        format.api  { render_api_ok }
+      end
     end
+    # hide project in layout
+    @project = nil
   end
 end

app/models/forum.rb

@@ -1,3 +1,648 @@
 class Forum < ActiveRecord::Base
   # attr_accessible :title, :body
+  include Redmine::SafeAttributes
+
+  # Project statuses
+  STATUS_ACTIVE     = 1
+  STATUS_CLOSED     = 5
+  STATUS_ARCHIVED   = 9
+
+  # Maximum length for project identifiers
+  IDENTIFIER_MAX_LENGTH = 100
+
+  # Specific overidden Activities
+ 
+  has_many :members, :include => [:principal, :roles], :conditions => "#{Principal.table_name}.type='User' AND #{Principal.table_name}.status=#{Principal::STATUS_ACTIVE}"
+  has_many :memberships, :class_name => 'Member'
+  has_many :member_principals, :class_name => 'Member',
+                               :include => :principal,
+                               :conditions => "#{Principal.table_name}.type='Group' OR (#{Principal.table_name}.type='User' AND #{Principal.table_name}.status=#{Principal::STATUS_ACTIVE})"
+  has_many :users, :through => :members
+  has_many :principals, :through => :member_principals, :source => :principal
+
+  has_many :enabled_modules, :dependent => :delete_all
+  
+  
+  
+  has_many :boards, :dependent => :destroy, :order => "position ASC"
+  # Custom field for the project issues
+  # has_and_belongs_to_many :issue_custom_fields,
+                          # :class_name => 'IssueCustomField',
+                          # :order => "#{CustomField.table_name}.position",
+                          # :join_table => "#{table_name_prefix}custom_fields_projects#{table_name_suffix}",
+                          # :association_foreign_key => 'custom_field_id'
+
+  acts_as_nested_set :order => 'name', :dependent => :destroy
+  acts_as_attachable :view_permission => :view_files,
+                     :delete_permission => :manage_files
+
+  acts_as_customizable
+  acts_as_searchable :columns => ['name', 'identifier', 'description'], :project_key => 'id', :permission => nil
+  acts_as_event :title => Proc.new {|o| "#{l(:label_project)}: #{o.name}"},
+                :url => Proc.new {|o| {:controller => 'projects', :action => 'show', :id => o}},
+                :author => nil
+
+  attr_protected :status
+
+  validates_presence_of :name, :identifier
+  validates_uniqueness_of :identifier
+  validates_associated :repository, :wiki
+  validates_length_of :name, :maximum => 255
+  validates_length_of :homepage, :maximum => 255
+  validates_length_of :identifier, :in => 1..IDENTIFIER_MAX_LENGTH
+  # donwcase letters, digits, dashes but not digits only
+  validates_format_of :identifier, :with => /\A(?!\d+$)[a-z0-9\-_]*\z/, :if => Proc.new { |p| p.identifier_changed? }
+  # reserved words
+  validates_exclusion_of :identifier, :in => %w( new )
+
+  # after_save :update_position_under_parent, :if => Proc.new {|project| project.name_changed?}
+  # after_save :update_inherited_members, :if => Proc.new {|project| project.inherit_members_changed?}
+  before_destroy :delete_all_members
+
+  # TODO: 可能要加表 这部分用于改变项目的模块
+  scope :has_module, lambda {|mod|
+    where("#{Project.table_name}.id IN (SELECT em.project_id FROM #{EnabledModule.table_name} em WHERE em.name=?)", mod.to_s)
+  }
+  scope :active, lambda { where(:status => STATUS_ACTIVE) }
+  scope :status, lambda {|arg| where(arg.blank? ? nil : {:status => arg.to_i}) }
+  scope :all_public, lambda { where(:is_public => true) }
+  scope :visible, lambda {|*args| where(Project.visible_condition(args.shift || User.current, *args)) }
+  scope :allowed_to, lambda {|*args| 
+    user = User.current
+    permission = nil
+    if args.first.is_a?(Symbol)
+      permission = args.shift
+    else
+      user = args.shift
+      permission = args.shift
+    end
+    where(Project.allowed_to_condition(user, permission, *args))
+  }
+  scope :like, lambda {|arg|
+    if arg.blank?
+      where(nil)
+    else
+      pattern = "%#{arg.to_s.strip.downcase}%"
+      where("LOWER(identifier) LIKE :p OR LOWER(name) LIKE :p", :p => pattern)
+    end
+  }
+
+  def initialize(attributes=nil, *args)
+    super
+
+    initialized = (attributes || {}).stringify_keys
+    if !initialized.key?('identifier') && Setting.sequential_project_identifiers?
+      self.identifier = Project.next_identifier
+    end
+    if !initialized.key?('is_public')
+      self.is_public = Setting.default_projects_public?
+    end
+    if !initialized.key?('enabled_module_names')
+      self.enabled_module_names = Setting.default_projects_modules
+    end
+  end
+
+  def identifier=(identifier)
+    super unless identifier_frozen?
+  end
+
+  def identifier_frozen?
+    errors[:identifier].blank? && !(new_record? || identifier.blank?)
+  end
+
+  # returns latest created projects
+  # non public projects will be returned only if user is a member of those
+  def self.latest(user=nil, count=5)
+    visible(user).limit(count).order("created_on DESC").all
+  end
+
+  # Returns true if the project is visible to +user+ or to the current user.
+  def visible?(user=User.current)
+    user.allowed_to?(:view_project, self)
+  end
+
+  # Returns a SQL conditions string used to find all projects visible by the specified user.
+  #
+  # Examples:
+  #   Project.visible_condition(admin)        => "projects.status = 1"
+  #   Project.visible_condition(normal_user)  => "((projects.status = 1) AND (projects.is_public = 1 OR projects.id IN (1,3,4)))"
+  #   Project.visible_condition(anonymous)    => "((projects.status = 1) AND (projects.is_public = 1))"
+  def self.visible_condition(user, options={})
+    allowed_to_condition(user, :view_project, options)
+  end
+
+  # Returns a SQL conditions string used to find all projects for which +user+ has the given +permission+
+  #
+  # Valid options:
+  # * :project => limit the condition to project
+  # * :with_subprojects => limit the condition to project and its subprojects
+  # * :member => limit the condition to the user projects
+  def self.allowed_to_condition(user, permission, options={})
+    perm = Redmine::AccessControl.permission(permission)
+    base_statement = (perm && perm.read? ? "#{Project.table_name}.status <> #{Project::STATUS_ARCHIVED}" : "#{Project.table_name}.status = #{Project::STATUS_ACTIVE}")
+    if perm && perm.project_module
+      # If the permission belongs to a project module, make sure the module is enabled
+      base_statement << " AND #{Project.table_name}.id IN (SELECT em.project_id FROM #{EnabledModule.table_name} em WHERE em.name='#{perm.project_module}')"
+    end
+    if options[:project]
+      project_statement = "#{Project.table_name}.id = #{options[:project].id}"
+      project_statement << " OR (#{Project.table_name}.lft > #{options[:project].lft} AND #{Project.table_name}.rgt < #{options[:project].rgt})" if options[:with_subprojects]
+      base_statement = "(#{project_statement}) AND (#{base_statement})"
+    end
+
+    if user.admin?
+      base_statement
+    else
+      statement_by_role = {}
+      unless options[:member]
+        role = user.logged? ? Role.non_member : Role.anonymous
+        if role.allowed_to?(permission)
+          statement_by_role[role] = "#{Project.table_name}.is_public = #{connection.quoted_true}"
+        end
+      end
+      if user.logged?
+        user.projects_by_role.each do |role, projects|
+          if role.allowed_to?(permission) && projects.any?
+            statement_by_role[role] = "#{Project.table_name}.id IN (#{projects.collect(&:id).join(',')})"
+          end
+        end
+      end
+      if statement_by_role.empty?
+        "1=0"
+      else
+        if block_given?
+          statement_by_role.each do |role, statement|
+            if s = yield(role, user)
+              statement_by_role[role] = "(#{statement} AND (#{s}))"
+            end
+          end
+        end
+        "((#{base_statement}) AND (#{statement_by_role.values.join(' OR ')}))"
+      end
+    end
+  end
+
+  # Returns the Systemwide and project specific activities
+  def activities(include_inactive=false)
+    if include_inactive
+      return all_activities
+    else
+      return active_activities
+    end
+  end
+  
+
+  # Returns a :conditions SQL string that can be used to find the issues associated with this project.
+  #
+  # Examples:
+  #   project.project_condition(true)  => "(projects.id = 1 OR (projects.lft > 1 AND projects.rgt < 10))"
+  #   project.project_condition(false) => "projects.id = 1"
+  def project_condition(with_subprojects)
+    cond = "#{Project.table_name}.id = #{id}"
+    cond = "(#{cond} OR (#{Project.table_name}.lft > #{lft} AND #{Project.table_name}.rgt < #{rgt}))" if with_subprojects
+    cond
+  end
+
+  def self.find(*args)
+    if args.first && args.first.is_a?(String) && !args.first.match(/^\d*$/)
+      project = find_by_identifier(*args)
+      raise ActiveRecord::RecordNotFound, "Couldn't find Project with identifier=#{args.first}" if project.nil?
+      project
+    else
+      super
+    end
+  end
+
+  def self.find_by_param(*args)
+    self.find(*args)
+  end
+
+  alias :base_reload :reload
+  def reload(*args)
+    @shared_versions = nil
+    @rolled_up_versions = nil
+    @rolled_up_trackers = nil
+    @all_issue_custom_fields = nil
+    @all_time_entry_custom_fields = nil
+    @to_param = nil
+    @allowed_parents = nil
+    @allowed_permissions = nil
+    @actions_allowed = nil
+    @start_date = nil
+    @due_date = nil
+    base_reload(*args)
+  end
+
+  def to_param
+    # id is used for projects with a numeric identifier (compatibility)
+    @to_param ||= (identifier.to_s =~ %r{^\d*$} ? id.to_s : identifier)
+  end
+
+  def active?
+    self.status == STATUS_ACTIVE
+  end
+
+  def archived?
+    self.status == STATUS_ARCHIVED
+  end
+
+  # Archives the project and its descendants
+  def archive
+    # Check that there is no issue of a non descendant project that is assigned
+    # to one of the project or descendant versions
+    v_ids = self_and_descendants.collect {|p| p.version_ids}.flatten
+    if v_ids.any? &&
+      Issue.
+        includes(:project).
+        where("#{Project.table_name}.lft < ? OR #{Project.table_name}.rgt > ?", lft, rgt).
+        where("#{Issue.table_name}.fixed_version_id IN (?)", v_ids).
+        exists?
+      return false
+    end
+    Project.transaction do
+      archive!
+    end
+    true
+  end
+
+  # Unarchives the project
+  # All its ancestors must be active
+  def unarchive
+    return false if ancestors.detect {|a| !a.active?}
+    update_attribute :status, STATUS_ACTIVE
+  end
+
+  def close
+    self_and_descendants.status(STATUS_ACTIVE).update_all :status => STATUS_CLOSED
+  end
+
+  def reopen
+    self_and_descendants.status(STATUS_CLOSED).update_all :status => STATUS_ACTIVE
+  end
+
+  # Recalculates all lft and rgt values based on project names
+  # Unlike Project.rebuild!, these values are recalculated even if the tree "looks" valid
+  # Used in BuildProjectsTree migration
+  def self.rebuild_tree!
+    transaction do
+      update_all "lft = NULL, rgt = NULL"
+      rebuild!(false)
+    end
+  end
+
+  # Returns an array of the trackers used by the project and its active sub projects
+  def rolled_up_trackers
+    @rolled_up_trackers ||=
+      Tracker.
+        joins(:projects).
+        joins("JOIN #{EnabledModule.table_name} ON #{EnabledModule.table_name}.project_id = #{Project.table_name}.id AND #{EnabledModule.table_name}.name = 'issue_tracking'").
+        select("DISTINCT #{Tracker.table_name}.*").
+        where("#{Project.table_name}.lft >= ? AND #{Project.table_name}.rgt <= ? AND #{Project.table_name}.status <> #{STATUS_ARCHIVED}", lft, rgt).
+        sorted.
+        all
+  end
+
+  # Returns a hash of project users grouped by role
+  def users_by_role
+    members.includes(:user, :roles).all.inject({}) do |h, m|
+      m.roles.each do |r|
+        h[r] ||= []
+        h[r] << m.user
+      end
+      h
+    end
+  end
+
+  # Deletes all project's members
+  def delete_all_members
+    me, mr = Member.table_name, MemberRole.table_name
+    connection.delete("DELETE FROM #{mr} WHERE #{mr}.member_id IN (SELECT #{me}.id FROM #{me} WHERE #{me}.project_id = #{id})")
+    Member.delete_all(['project_id = ?', id])
+  end
+
+  # Users/groups issues can be assigned to
+  def assignable_users
+    assignable = Setting.issue_group_assignment? ? member_principals : members
+    assignable.select {|m| m.roles.detect {|role| role.assignable?}}.collect {|m| m.principal}.sort
+  end
+
+  # Returns the mail adresses of users that should be always notified on project events
+  def recipients
+    notified_users.collect {|user| user.mail}
+  end
+
+  # Returns the users that should be notified on project events
+  def notified_users
+    # TODO: User part should be extracted to User#notify_about?
+    members.select {|m| m.principal.present? && (m.mail_notification? || m.principal.mail_notification == 'all')}.collect {|m| m.principal}
+  end
+
+  def project
+    self
+  end
+
+  def <=>(project)
+    name.downcase <=> project.name.downcase
+  end
+
+  def to_s
+    name
+  end
+
+  # Returns a short description of the projects (first lines)
+  def short_description(length = 255)
+    description.gsub(/^(.{#{length}}[^\n\r]*).*$/m, '\1...').strip if description
+  end
+
+  def css_classes
+    s = 'project'
+    s << ' root' if root?
+    s << ' child' if child?
+    s << (leaf? ? ' leaf' : ' parent')
+    unless active?
+      if archived?
+        s << ' archived'
+      else
+        s << ' closed'
+      end
+    end
+    s
+  end
+
+  # The earliest start date of a project, based on it's issues and versions
+  def start_date
+    @start_date ||= [
+     issues.minimum('start_date'),
+     shared_versions.minimum('effective_date'),
+     Issue.fixed_version(shared_versions).minimum('start_date')
+    ].compact.min
+  end
+
+  # The latest due date of an issue or version
+  def due_date
+    @due_date ||= [
+     issues.maximum('due_date'),
+     shared_versions.maximum('effective_date'),
+     Issue.fixed_version(shared_versions).maximum('due_date')
+    ].compact.max
+  end
+
+  def overdue?
+    active? && !due_date.nil? && (due_date < Date.today)
+  end
+
+  # Return true if this project allows to do the specified action.
+  # action can be:
+  # * a parameter-like Hash (eg. :controller => 'projects', :action => 'edit')
+  # * a permission Symbol (eg. :edit_project)
+  def allows_to?(action)
+    if archived?
+      # No action allowed on archived projects
+      return false
+    end
+    unless active? || Redmine::AccessControl.read_action?(action)
+      # No write action allowed on closed projects
+      return false
+    end
+    # No action allowed on disabled modules
+    if action.is_a? Hash
+      allowed_actions.include? "#{action[:controller]}/#{action[:action]}"
+    else
+      allowed_permissions.include? action
+    end
+  end
+
+  def module_enabled?(module_name)
+    module_name = module_name.to_s
+    enabled_modules.detect {|m| m.name == module_name}
+  end
+
+  def enabled_module_names=(module_names)
+    if module_names && module_names.is_a?(Array)
+      module_names = module_names.collect(&:to_s).reject(&:blank?)
+      self.enabled_modules = module_names.collect {|name| enabled_modules.detect {|mod| mod.name == name} || EnabledModule.new(:name => name)}
+    else
+      enabled_modules.clear
+    end
+  end
+
+  # Returns an array of the enabled modules names
+  def enabled_module_names
+    enabled_modules.collect(&:name)
+  end
+
+  # Enable a specific module
+  #
+  # Examples:
+  #   project.enable_module!(:issue_tracking)
+  #   project.enable_module!("issue_tracking")
+  def enable_module!(name)
+    enabled_modules << EnabledModule.new(:name => name.to_s) unless module_enabled?(name)
+  end
+
+  # Disable a module if it exists
+  #
+  # Examples:
+  #   project.disable_module!(:issue_tracking)
+  #   project.disable_module!("issue_tracking")
+  #   project.disable_module!(project.enabled_modules.first)
+  def disable_module!(target)
+    target = enabled_modules.detect{|mod| target.to_s == mod.name} unless enabled_modules.include?(target)
+    target.destroy unless target.blank?
+  end
+
+  safe_attributes 'name',
+    'description',
+    'homepage',
+    'is_public',
+    'identifier',
+    'custom_field_values',
+    'custom_fields',
+    'tracker_ids',
+    'issue_custom_field_ids'
+
+  safe_attributes 'enabled_module_names',
+    :if => lambda {|project, user| project.new_record? || user.allowed_to?(:select_project_modules, project) }
+
+  safe_attributes 'inherit_members',
+    :if => lambda {|project, user| project.parent.nil? || project.parent.visible?(user)}
+
+
+  # Returns an auto-generated project identifier based on the last identifier used
+  def self.next_identifier
+    p = Project.order('id DESC').first
+    p.nil? ? nil : p.identifier.to_s.succ
+  end
+
+  # Copies and saves the Project instance based on the +project+.
+  # Duplicates the source project's:
+  # * Wiki
+  # * Versions
+  # * Categories
+  # * Issues
+  # * Members
+  # * Queries
+  #
+  # Accepts an +options+ argument to specify what to copy
+  #
+  # Examples:
+  #   project.copy(1)                                    # => copies everything
+  #   project.copy(1, :only => 'members')                # => copies members only
+  #   project.copy(1, :only => ['members', 'versions'])  # => copies members and versions
+  def copy(project, options={})
+    project = project.is_a?(Project) ? project : Project.find(project)
+
+    to_be_copied = %w(wiki versions issue_categories issues members queries boards)
+    to_be_copied = to_be_copied & options[:only].to_a unless options[:only].nil?
+
+    Project.transaction do
+      if save
+        reload
+        to_be_copied.each do |name|
+          send "copy_#{name}", project
+        end
+        Redmine::Hook.call_hook(:model_project_copy_before_save, :source_project => project, :destination_project => self)
+        save
+      end
+    end
+  end
+
+  # Returns a new unsaved Project instance with attributes copied from +project+
+  def self.copy_from(project)
+    project = project.is_a?(Project) ? project : Project.find(project)
+    # clear unique attributes
+    attributes = project.attributes.dup.except('id', 'name', 'identifier', 'status', 'parent_id', 'lft', 'rgt')
+    copy = Project.new(attributes)
+    copy.enabled_modules = project.enabled_modules
+    copy.trackers = project.trackers
+    copy.custom_values = project.custom_values.collect {|v| v.clone}
+    copy.issue_custom_fields = project.issue_custom_fields
+    copy
+  end
+
+  # Yields the given block for each project with its level in the tree
+  def self.project_tree(projects, &block)
+    ancestors = []
+    projects.sort_by(&:lft).each do |project|
+      while (ancestors.any? && !project.is_descendant_of?(ancestors.last))
+        ancestors.pop
+      end
+      yield project, ancestors.size
+      ancestors << project
+    end
+  end
+
+  private
+  # Copies members from +project+
+  def copy_members(project)
+    # Copy users first, then groups to handle members with inherited and given roles
+    members_to_copy = []
+    members_to_copy += project.memberships.select {|m| m.principal.is_a?(User)}
+    members_to_copy += project.memberships.select {|m| !m.principal.is_a?(User)}
+
+    members_to_copy.each do |member|
+      new_member = Member.new
+      new_member.attributes = member.attributes.dup.except("id", "project_id", "created_on")
+      # only copy non inherited roles
+      # inherited roles will be added when copying the group membership
+      role_ids = member.member_roles.reject(&:inherited?).collect(&:role_id)
+      next if role_ids.empty?
+      new_member.role_ids = role_ids
+      new_member.project = self
+      self.members << new_member
+    end
+  end
+
+  # Copies boards from +project+
+  def copy_boards(project)
+    project.boards.each do |board|
+      new_board = Board.new
+      new_board.attributes = board.attributes.dup.except("id", "project_id", "topics_count", "messages_count", "last_message_id")
+      new_board.project = self
+      self.boards << new_board
+    end
+  end
+
+  def allowed_permissions
+    @allowed_permissions ||= begin
+      module_names = enabled_modules.all(:select => :name).collect {|m| m.name}
+      Redmine::AccessControl.modules_permissions(module_names).collect {|p| p.name}
+    end
+  end
+
+  def allowed_actions
+    @actions_allowed ||= allowed_permissions.inject([]) { |actions, permission| actions += Redmine::AccessControl.allowed_actions(permission) }.flatten
+  end
+
+  # Returns all the active Systemwide and project specific activities
+  def active_activities
+    overridden_activity_ids = self.time_entry_activities.collect(&:parent_id)
+
+    if overridden_activity_ids.empty?
+      return TimeEntryActivity.shared.active
+    else
+      return system_activities_and_project_overrides
+    end
+  end
+
+  # Returns all the Systemwide and project specific activities
+  # (inactive and active)
+  def all_activities
+    overridden_activity_ids = self.time_entry_activities.collect(&:parent_id)
+
+    if overridden_activity_ids.empty?
+      return TimeEntryActivity.shared
+    else
+      return system_activities_and_project_overrides(true)
+    end
+  end
+
+  # Returns the systemwide active activities merged with the project specific overrides
+  def system_activities_and_project_overrides(include_inactive=false)
+    if include_inactive
+      return TimeEntryActivity.shared.
+        where("id NOT IN (?)", self.time_entry_activities.collect(&:parent_id)).all +
+        self.time_entry_activities
+    else
+      return TimeEntryActivity.shared.active.
+        where("id NOT IN (?)", self.time_entry_activities.collect(&:parent_id)).all +
+        self.time_entry_activities.active
+    end
+  end
+
+  # Archives subprojects recursively
+  def archive!
+    children.each do |subproject|
+      subproject.send :archive!
+    end
+    update_attribute :status, STATUS_ARCHIVED
+  end
+
+  def update_position_under_parent
+    set_or_update_position_under(parent)
+  end
+
+  # Inserts/moves the project so that target's children or root projects stay alphabetically sorted
+  def set_or_update_position_under(target_parent)
+    parent_was = parent
+    sibs = (target_parent.nil? ? self.class.roots : target_parent.children)
+    to_be_inserted_before = sibs.sort_by {|c| c.name.to_s.downcase}.detect {|c| c.name.to_s.downcase > name.to_s.downcase }
+
+    if to_be_inserted_before
+      move_to_left_of(to_be_inserted_before)
+    elsif target_parent.nil?
+      if sibs.empty?
+        # move_to_root adds the project in first (ie. left) position
+        move_to_root
+      else
+        move_to_right_of(sibs.last) unless self == sibs.last
+      end
+    else
+      # move_to_child_of adds the project in last (ie.right) position
+      move_to_child_of(target_parent)
+    end
+    if parent_was != target_parent
+      after_parent_changed(parent_was)
+    end
+  end
 end