Context Navigation

CMS.pm @ 1378

Visit:

Revision 1378, 117.8 kB (checked in by takayama, 22 months ago)

Fixed BugId:67669
* Fixed a performance issue.

Changed to dialog based author selection instead of combo box.

Property svn:keywords set to Author Date Id Revision

Line
1	# Movable Type (r) Open Source (C) 2001-2008 Six Apart, Ltd.
2	# This program is distributed under the terms of the
3	# GNU General Public License, version 2.
4	#
5	# $Id$
6
7	package MT::App::CMS;
8
9	use strict;
10	use base qw( MT::App );
11
12	use MT::Util qw( format_ts epoch2ts perl_sha1_digest_hex perl_sha1_digest
13	remove_html );
14
15	use constant LISTING_DATE_FORMAT => '%b %e, %Y';
16	use constant LISTING_DATETIME_FORMAT => '%b %e, %Y';
17	use constant LISTING_TIMESTAMP_FORMAT => "%Y-%m-%d %I:%M:%S%p";
18	use constant NEW_PHASE => 1;
19
20	sub id { 'cms' }
21
22	sub init {
23	my $app = shift;
24	$app->SUPER::init(@_) or return;
25	$app->{state_params} = [
26	'_type', 'id', 'tab', 'offset',
27	'filter', 'filter_val', 'blog_id', 'is_power_edit',
28	'filter_key', 'type'
29	];
30	$app->{template_dir} = 'cms';
31	$app->{plugin_template_path} = '';
32	$app->{is_admin} = 1;
33	$app->{default_mode} = 'dashboard';
34	$app;
35	}
36
37	sub core_methods {
38	my $app = shift;
39	my $pkg = '$Core::MT::CMS::';
40	return {
41	'tools' => "${pkg}Tools::system_check",
42	'dashboard' => "${pkg}Dashboard::dashboard",
43	'menu' => '${pkg}Dashboard::dashboard',
44	'admin' => '${pkg}Dashboard::dashboard',
45
46	## Generic handlers
47	'save' => "${pkg}Common::save",
48	'edit' => "${pkg}Common::edit",
49	'view' => "${pkg}Common::edit",
50	'list' => "${pkg}Common::list",
51	'delete' => "${pkg}Common::delete",
52	'search_replace' => "${pkg}Search::search_replace",
53
54	## Edit methods
55	'edit_role' => "${pkg}User::edit_role",
56
57	## Listing methods
58	'list_ping' => "${pkg}TrackBack::list",
59	'list_entry' => "${pkg}Entry::list",
60	'list_template' => "${pkg}Template::list",
61	'list_page' => "${pkg}Page::list",
62	'list_comment' => {
63	handler => "${pkg}Comment::list",
64	permission => 'view_feedback',
65	},
66	'list_member' => "${pkg}User::list_member",
67	'list_user' => "${pkg}User::list",
68	'list_author' => "${pkg}User::list",
69	'list_commenter' => "${pkg}Comment::list_commenter",
70	'list_asset' => "${pkg}Asset::list",
71	'list_blog' => "${pkg}Blog::list",
72	'list_category' => "${pkg}Category::list",
73	'list_tag' => "${pkg}Tag::list",
74	'list_association' => "${pkg}User::list_association",
75	'list_role' => "${pkg}User::list_role",
76
77	'asset_insert' => "${pkg}Asset::insert",
78	'asset_userpic' => "${pkg}User::asset_userpic",
79	'save_commenter_perm' => "${pkg}Comment::save_commenter_perm",
80	'trust_commenter' => "${pkg}Comment::trust_commenter",
81	'ban_commenter' => "${pkg}Comment::ban_commenter",
82	'approve_item' => "${pkg}Comment::approve_item",
83	'unapprove_item' => "${pkg}Comment::unapprove_item",
84	'preview_entry' => "${pkg}Entry::preview",
85
86	## Blog configuration screens
87	'cfg_archives' => "${pkg}Blog::cfg_archives",
88	'cfg_prefs' => "${pkg}Blog::cfg_prefs",
89	'cfg_plugins' => "${pkg}Plugin::cfg_plugins",
90	'cfg_comments' => "${pkg}Comment::cfg_comments",
91	'cfg_trackbacks' => "${pkg}TrackBack::cfg_trackbacks",
92	'cfg_registration' => "${pkg}Comment::cfg_registration",
93	'cfg_spam' => "${pkg}Comment::cfg_spam",
94	'cfg_entry' => "${pkg}Entry::cfg_entry",
95	'cfg_web_services' => "${pkg}Blog::cfg_web_services",
96
97	## Save
98	'save_cat' => "${pkg}Category::save",
99	'save_entries' => "${pkg}Entry::save_entries",
100	'save_pages' => "${pkg}Page::save",
101	'save_entry' => "${pkg}Entry::save",
102	'save_role' => "${pkg}User::save_role",
103
104	## List actions
105	'enable_object' => "${pkg}User::enable",
106	'disable_object' => "${pkg}User::disable",
107	'list_action' => "${pkg}Tools::do_list_action",
108	'empty_junk' => "${pkg}Comment::empty_junk",
109	'handle_junk' => "${pkg}Comment::handle_junk",
110	'not_junk' => "${pkg}Comment::not_junk",
111
112	'ping' => "${pkg}Entry::send_pings",
113	'rebuild_phase' => "${pkg}Blog::rebuild_phase",
114	'rebuild' => "${pkg}Blog::rebuild_pages",
115	'rebuild_new_phase' => "${pkg}Blog::rebuild_new_phase",
116	'start_rebuild' => "${pkg}Blog::start_rebuild_pages",
117	'rebuild_confirm' => "${pkg}Blog::rebuild_confirm",
118	'entry_notify' => "${pkg}AddressBook::entry_notify",
119	'send_notify' => "${pkg}AddressBook::send_notify",
120	'start_upload' => "${pkg}Asset::start_upload",
121	'upload_file' => "${pkg}Asset::upload_file",
122	'upload_userpic' => "${pkg}User::upload_userpic",
123	'complete_insert' => "${pkg}Asset::complete_insert",
124	'complete_upload' => "${pkg}Asset::complete_upload",
125	'start_upload_entry' => "${pkg}Asset::start_upload_entry",
126	'logout' => {
127	code => \&logout,
128	requires_login => 0,
129	},
130	'start_recover' => {
131	code => "${pkg}Tools::start_recover",
132	requires_login => 0,
133	},
134	'recover' => {
135	code => "${pkg}Tools::recover_password",
136	requires_login => 0,
137	},
138
139	'view_log' => "${pkg}Log::view",
140	'list_log' => "${pkg}Log::view",
141	'reset_log' => "${pkg}Log::reset",
142	'export_log' => "${pkg}Log::export",
143	'export_notification' => "${pkg}AddressBook::export",
144	'start_import' => "${pkg}Import::start_import",
145	'start_export' => "${pkg}Export::start_export",
146	'export' => "${pkg}Export::export",
147	'import' => "${pkg}Import::do_import",
148	'pinged_urls' => "${pkg}Entry::pinged_urls",
149	'save_entry_prefs' => "${pkg}Entry::save_entry_prefs",
150	'save_favorite_blogs' => "${pkg}Blog::save_favorite_blogs",
151	'reg_file' => "${pkg}Tools::reg_file",
152	'reg_bm_js' => {
153	code => "${pkg}Tools::reg_bm_js",
154	requires_login => 0,
155	},
156	'folder_add' => "${pkg}Category::category_add",
157	'category_add' => "${pkg}Category::category_add",
158	'category_do_add' => "${pkg}Category::category_do_add",
159	'cc_return' => "${pkg}Blog::cc_return",
160	'reset_blog_templates' => "${pkg}Template::reset_blog_templates",
161	'handshake' => "${pkg}Blog::handshake",
162	'itemset_action' => "${pkg}Tools::do_list_action",
163	'page_action' => "${pkg}Tools::do_page_action",
164	'cfg_system' => "${pkg}Tools::cfg_system_general",
165	'cfg_system_users' => "${pkg}User::cfg_system_users",
166	'cfg_system_feedback' => "${pkg}Comment::cfg_system_feedback",
167	'save_plugin_config' => "${pkg}Plugin::save_config",
168	'reset_plugin_config' => "${pkg}Plugin::reset_config",
169	'save_cfg_system_feedback' => "${pkg}Comment::save_cfg_system_feedback",
170	'save_cfg_system_general' => "${pkg}Tools::save_cfg_system_general",
171	'save_cfg_system_users' => "${pkg}User::save_cfg_system_users",
172	'update_welcome_message' => "${pkg}Blog::update_welcome_message",
173	'upgrade' => {
174	code => "${pkg}Tools::upgrade",
175	requires_login => 0,
176	},
177	'plugin_control' => "${pkg}Plugin::plugin_control",
178	'recover_profile_password' => "${pkg}User::recover_profile_password",
179	'rename_tag' => "${pkg}Tag::rename_tag",
180	'remove_user_assoc' => "${pkg}User::remove_user_assoc",
181	'revoke_role' => "${pkg}User::revoke_role",
182	'grant_role' => "${pkg}User::grant_role",
183	'start_backup' => "${pkg}Tools::start_backup",
184	'start_restore' => "${pkg}Tools::start_restore",
185	'backup' => "${pkg}Tools::backup",
186	'backup_download' => "${pkg}Tools::backup_download",
187	'restore' => "${pkg}Tools::restore",
188	'restore_premature_cancel' => "${pkg}Tools::restore_premature_cancel",
189	'adjust_sitepath' => "${pkg}Tools::adjust_sitepath",
190	'system_check' => "${pkg}Tools::system_check",
191	'dialog_refresh_templates' => "${pkg}Template::dialog_refresh_templates",
192	'refresh_all_templates' => "${pkg}Template::refresh_all_templates",
193
194	## Comment Replies
195	reply => "${pkg}Comment::reply",
196	do_reply => "${pkg}Comment::do_reply",
197	reply_preview => "${pkg}Comment::reply_preview",
198
199	## Dialogs
200	'dialog_restore_upload' => "${pkg}Tools::dialog_restore_upload",
201	'dialog_adjust_sitepath' => "${pkg}Tools::dialog_adjust_sitepath",
202	'dialog_post_comment' => "${pkg}Comment::dialog_post_comment",
203	'dialog_select_weblog' => "${pkg}Blog::dialog_select_weblog",
204	'dialog_select_sysadmin' => "${pkg}User::dialog_select_sysadmin",
205	'dialog_grant_role' => "${pkg}User::dialog_grant_role",
206	'dialog_select_author' => "${pkg}User::dialog_select_author",
207
208	## AJAX handlers
209	'delete_map' => "${pkg}Template::delete_map",
210	'add_map' => "${pkg}Template::add_map",
211	'js_tag_check' => "${pkg}Tag::js_tag_check",
212	'js_tag_list' => "${pkg}Tag::js_tag_list",
213	'convert_to_html' => "${pkg}Tools::convert_to_html",
214	'update_list_prefs' => "${pkg}Tools::update_list_prefs",
215	'js_add_category' => "${pkg}Category::js_add_category",
216	'remove_userpic' => "${pkg}User::remove_userpic",
217
218	# declared in MT::App
219	'update_widget_prefs' => sub { return shift->update_widget_prefs(@_) },
220
221	'js_recent_entries_for_tag' => "${pkg}Tag::js_recent_entries_for_tag",
222
223	## DEPRECATED ##
224	'list_pings' => "${pkg}TrackBack::list",
225	'list_entries' => "${pkg}Entry::list",
226	'list_pages' => "${pkg}Page::list",
227	'list_comments' => {
228	handler => "${pkg}Comment::list",
229	permission => 'view_feedback',
230	},
231	'list_authors' => "${pkg}User::list",
232	'list_assets' => "${pkg}Asset::list",
233	'list_cat' => "${pkg}Category::list",
234	'list_blogs' => "${pkg}Blog::list",
235	'list_associations' => "${pkg}User::list_association",
236	'list_roles' => "${pkg}User::list_role",
237	};
238	}
239
240	sub core_widgets {
241	my $app = shift;
242	my $pkg = '$Core::MT::CMS::';
243	return {
244	new_install => {
245	template => 'widget/new_install.tmpl',
246	set => 'main', # forces this widget to the main group
247	singular => 1,
248	},
249	new_user => {
250	template => 'widget/new_user.tmpl',
251	set => 'main', # forces this widget to the main group
252	singular => 1,
253	},
254	new_version => {
255	template => 'widget/new_version.tmpl',
256	set => 'main',
257	singular => 1,
258	handler => "${pkg}Dashboard::new_version_widget",
259	},
260	this_is_you => {
261	label => 'This is You',
262	template => 'widget/this_is_you.tmpl',
263	handler => "${pkg}Dashboard::this_is_you_widget",
264	set => 'sidebar',
265	singular => 1,
266	},
267	mt_shortcuts => {
268	label => 'Handy Shortcuts',
269	template => 'widget/mt_shortcuts.tmpl',
270	singular => 1,
271	set => 'sidebar',
272	},
273	mt_news => {
274	label => 'Movable Type News',
275	template => 'widget/mt_news.tmpl',
276	handler => "${pkg}Dashboard::mt_news_widget",
277	singular => 1,
278	set => 'sidebar',
279	},
280	blog_stats => {
281	label => 'Blog Stats',
282	template => 'widget/blog_stats.tmpl',
283	handler => "${pkg}Dashboard::mt_blog_stats_widget",
284	singular => 1,
285	set => 'main',
286	},
287	};
288	}
289
290	sub core_blog_stats_tabs {
291	my $app = shift;
292	my $pkg = '$Core::MT::CMS::';
293	return {
294	entry => {
295	label => 'Entries',
296	template => 'widget/blog_stats_entry.tmpl',
297	handler => "${pkg}Dashboard::mt_blog_stats_widget_entry_tab",
298	stats => "${pkg}Dashboard::generate_dashboard_stats_entry_tab",
299	},
300	comment => {
301	label => 'Comments',
302	template => 'widget/blog_stats_comment.tmpl',
303	handler => "${pkg}Dashboard::mt_blog_stats_widget_comment_tab",
304	stats => "${pkg}Dashboard::generate_dashboard_stats_comment_tab",
305	},
306	tag_cloud => {
307	label => 'Tag Cloud',
308	template => 'widget/blog_stats_tag_cloud.tmpl',
309	},
310	};
311	}
312
313	sub core_page_actions {
314	return {
315	list_templates => {
316	refresh_all_blog_templates => {
317	label => "Refresh Blog Templates",
318	dialog => 'dialog_refresh_templates',
319	condition => sub {
320	MT->app->blog,
321	},
322	order => 1000,
323	},
324	refresh_global_templates => {
325	label => "Refresh Global Templates",
326	handler => '$Core::MT::CMS::Template::refresh_all_templates',
327	condition => sub {
328	! MT->app->blog,
329	},
330	order => 1000,
331	continue_prompt => MT->translate('This action will restore your global templates to factory settings without creating a backup. Click OK to continue or Cancel to abort.'),
332	},
333	},
334	};
335	}
336
337	sub init_plugins {
338	my $app = shift;
339
340	# This has to be done prior to plugin initialization since we
341	# may have plugins that register themselves using some of the
342	# older callback names. The callback aliases are declared
343	# in init_core_callbacks.
344	$app->init_core_callbacks();
345	$app->SUPER::init_plugins(@_);
346	}
347
348	sub init_request {
349	my $app = shift;
350	$app->SUPER::init_request(@_);
351	$app->set_no_cache;
352	$app->{requires_login} = 1
353	unless exists $app->{requires_login}; # by default, we require login
354
355	my $mode = $app->mode;
356
357	# Global 'blog_id' parameter check; if we get something
358	# other than an integer, die
359	if (my $blog_id = $app->param('blog_id')) {
360	if ($blog_id ne int($blog_id)) {
361	die $app->translate("Invalid request");
362	}
363	}
364
365	unless (defined $app->{upgrade_required}) {
366	$app->{upgrade_required} = 0;
367	if ( ( $mode ne 'logout' )
368	&& ( $mode ne 'start_recover' )
369	&& ( $mode ne 'recover' )
370	&& ( $mode ne 'upgrade' ) )
371	{
372	my $schema = $app->config('SchemaVersion');
373	my $version = $app->config('MTVersion');
374	if ( !$schema \|\| ( $schema < $app->schema_version )
375	\|\| ( ( !$version \|\| ( $version < $app->version_number ) )
376	&& $app->config->NotifyUpgrade ) ) {
377	$app->{upgrade_required} = 1;
378	}
379	else {
380	foreach my $plugin (@MT::Components) {
381	if ( $plugin->needs_upgrade ) {
382	$app->{upgrade_required} = 1;
383	last;
384	}
385	}
386	}
387	}
388	}
389
390	if ($app->{upgrade_required}) {
391	$app->{requires_login} = 0;
392	$app->mode('upgrade');
393	}
394	}
395
396	sub core_list_actions {
397	my $app = shift;
398	my $pkg = '$Core::MT::CMS::';
399	return {
400	'entry' => {
401	'set_published' => {
402	label => "Publish Entries",
403	order => 100,
404	code => "${pkg}Entry::publish_entries",
405	permission => 'edit_all_posts,publish_post',
406	condition => sub {
407	return 0 if $app->mode eq 'view';
408	return $app->blog && $app->blog->site_path ? 1 : 0;
409	}
410	},
411	'set_draft' => {
412	label => "Unpublish Entries",
413	order => 200,
414	code => "${pkg}Entry::draft_entries",
415	permission => 'edit_all_posts,publish_post',
416	condition => sub {
417	return 0 if $app->mode eq 'view';
418	return $app->blog && $app->blog->site_path ? 1 : 0;
419	}
420	},
421	'add_tags' => {
422	label => "Add Tags...",
423	order => 300,
424	code => "${pkg}Tag::add_tags_to_entries",
425	input => 1,
426	input_label => 'Tags to add to selected entries',
427	permission => 'edit_all_posts',
428	condition => sub {
429	return $app->mode ne 'view';
430	}
431	},
432	'remove_tags' => {
433	label => "Remove Tags...",
434	order => 400,
435	code => "${pkg}Tag::remove_tags_from_entries",
436	input => 1,
437	input_label => 'Tags to remove from selected entries',
438	permission => 'edit_all_posts',
439	condition => sub {
440	return $app->mode ne 'view';
441	}
442	},
443	'open_batch_editor' => {
444	label => "Batch Edit Entries",
445	code => "${pkg}Entry::open_batch_editor",
446	order => 500,
447	condition => sub {
448	return 0 if $app->mode eq 'view';
449	$app->param('blog_id')
450	&& ( $app->user->is_superuser()
451	\|\| $app->permissions->can_edit_all_posts );
452	},
453	},
454	},
455	'page' => {
456	'set_published' => {
457	label => "Publish Pages",
458	order => 100,
459	code => "${pkg}Entry::publish_entries",
460	permission => 'manage_pages',
461	condition => sub {
462	return 0 if $app->mode eq 'view';
463	return $app->blog && $app->blog->site_path ? 1 : 0;
464	},
465	},
466	'set_draft' => {
467	label => "Unpublish Pages",
468	order => 200,
469	code => "${pkg}Entry::draft_entries",
470	permission => 'manage_pages',
471	condition => sub {
472	return 0 if $app->mode eq 'view';
473	return $app->blog && $app->blog->site_path ? 1 : 0;
474	},
475	},
476	'add_tags' => {
477	label => "Add Tags...",
478	order => 300,
479	code => "${pkg}Tag::add_tags_to_entries",
480	input => 1,
481	input_label => 'Tags to add to selected pages',
482	permission => 'manage_pages',
483	condition => sub {
484	return $app->mode ne 'view';
485	},
486	},
487	'remove_tags' => {
488	label => "Remove Tags...",
489	order => 400,
490	code => "${pkg}Tag::remove_tags_from_entries",
491	input => 1,
492	input_label => 'Tags to remove from selected pages',
493	permission => 'manage_pages',
494	condition => sub {
495	return $app->mode ne 'view';
496	},
497	},
498	'open_batch_editor' => {
499	label => "Batch Edit Pages",
500	code => "${pkg}Entry::open_batch_editor",
501	order => 500,
502	condition => sub {
503	return 0 if $app->mode eq 'view';
504	$app->param('blog_id')
505	&& ( $app->user->is_superuser()
506	\|\| $app->permissions->can_manage_pages );
507	},
508	},
509	},
510	'asset' => {
511	'add_tags' => {
512	label => "Add Tags...",
513	order => 100,
514	code => "${pkg}Tag::add_tags_to_assets",
515	input => 1,
516	input_label => 'Tags to add to selected assets',
517	permission => 'edit_assets',
518	},
519	'remove_tags' => {
520	label => "Remove Tags...",
521	order => 200,
522	code => "${pkg}Tag::remove_tags_from_assets",
523	input => 1,
524	input_label => 'Tags to remove from selected assets',
525	permission => 'edit_assets',
526	},
527	},
528	'ping' => {
529	'unapprove_ping' => {
530	label => "Unpublish TrackBack(s)",
531	order => 100,
532	code => "${pkg}Comment::unapprove_item",
533	permission => 'manage_feedback,publish_post',
534	},
535	},
536	'comment' => {
537	'unapprove_comment' => {
538	label => "Unpublish Comment(s)",
539	order => 100,
540	code => "${pkg}Comment::unapprove_item",
541	permission => 'manage_feedback,publish_post',
542	condition => sub {
543	return 1;
544	},
545	},
546	'trust_commenter' => {
547	label => "Trust Commenter(s)",
548	order => 200,
549	code => "${pkg}Comment::trust_commenter_by_comment",
550	permission => 'manage_feedback',
551	},
552	'untrust_commenter' => {
553	label => "Untrust Commenter(s)",
554	order => 300,
555	code => "${pkg}Comment::untrust_commenter_by_comment",
556	permission => 'manage_feedback',
557	},
558	'ban_commenter' => {
559	label => "Ban Commenter(s)",
560	order => 400,
561	code => "${pkg}Comment::ban_commenter_by_comment",
562	permission => 'manage_feedback',
563	},
564	'unban_commenter' => {
565	label => "Unban Commenter(s)",
566	order => 500,
567	code => "${pkg}Comment::unban_commenter_by_comment",
568	permission => 'manage_feedback',
569	},
570	},
571	'commenter' => {
572	'untrust' => {
573	label => "Untrust Commenter(s)",
574	order => 100,
575	code => "{$pkg}Comment::untrust_commenter",
576	permission => 'manage_feedback',
577	},
578	'unban' => {
579	label => "Unban Commenter(s)",
580	order => 200,
581	code => "${pkg}Comment::unban_commenter",
582	permission => 'manage_feedback',
583	},
584	},
585	'author' => {
586	'recover_passwords' => {
587	label => "Recover Password(s)",
588	order => 100,
589	continue_prompt_handler => sub {
590	MT->translate("_WARNING_PASSWORD_RESET_MULTI");
591	},
592	code => "${pkg}Tools::recover_passwords",
593	condition => sub {
594	( $app->user->is_superuser()
595	&& MT::Auth->can_recover_password );
596	},
597	},
598	'delete_user' => {
599	label => "Delete",
600	order => 200,
601	continue_prompt_handler => sub {
602	$app->config->ExternalUserManagement
603	? MT->translate("_WARNING_DELETE_USER_EUM")
604	: MT->translate("_WARNING_DELETE_USER");
605	},
606	code => "${pkg}Common::delete",
607	condition => sub {
608	$app->user->is_superuser();
609	},
610	},
611	},
612	'blog' => {
613	refresh_blog_templates => {
614	label => "Refresh Template(s)",
615	code => sub {
616	my $app = MT->app;
617	$app->param('backup', 1);
618	$app->refresh_all_templates(@_)
619	},
620	},
621	},
622	'template' => {
623	refresh_tmpl_templates => {
624	label => "Refresh Template(s)",
625	handler => '$Core::MT::CMS::Template::refresh_individual_templates',
626	permission => 'edit_templates',
627	},
628	publish_index_templates => {
629	label => "Publish Template(s)",
630	handler => '$Core::MT::CMS::Blog::publish_index_templates',
631	permission => 'rebuild',
632	condition => sub {
633	my $app = MT->app;
634	my $tmpl_type = $app->param('filter_key');
635	return $app->mode eq 'itemset_action' ? 1
636	: !$app->blog ? 0
637	: !$tmpl_type ? 0
638	: $tmpl_type eq 'index_templates' ? 1
639	: 0
640	;
641	},
642	},
643	},
644	};
645	}
646
647	sub _entry_label {
648	my $app = MT->instance;
649	my $type = $app->param('type') \|\| 'entry';
650	$app->model($type)->class_label_plural;
651	}
652
653	sub core_list_filters {
654	my $app = shift;
655	return {
656	asset => sub {
657	require MT::CMS::Asset;
658	return MT::CMS::Asset::asset_list_filters($app, @_);
659	},
660	entry => {
661	published => {
662	label => sub {
663	$app->translate( 'Published [_1]', _entry_label );
664	},
665	order => 100,
666	handler => sub {
667	my ( $terms, $args ) = @_;
668	$terms->{status} = 2;
669	},
670	},
671	unpublished => {
672	label => sub {
673	$app->translate( 'Unpublished [_1]', _entry_label );
674	},
675	order => 200,
676	handler => sub {
677	my ( $terms, $args ) = @_;
678	$terms->{status} = 1;
679	},
680	},
681	scheduled => {
682	label => sub {
683	$app->translate( 'Scheduled [_1]', _entry_label );
684	},
685	order => 300,
686	handler => sub {
687	my ( $terms, $args ) = @_;
688	$terms->{status} = 4;
689	},
690	},
691	my_posts => {
692	label => sub {
693	$app->translate( 'My [_1]', _entry_label );
694	},
695	order => 400,
696	handler => sub {
697	my ( $terms, $args ) = @_;
698	$terms->{author_id} = $app->user->id;
699	},
700	},
701	received_comments_in_last_7_days => {
702	label => sub {
703	$app->translate( '[_1] with comments in the last 7 days',
704	_entry_label );
705	},
706	order => 500,
707	handler => sub {
708	my ( $terms, $args ) = @_;
709	my $ts = time - 10 * 24 * 60 * 60;
710	$ts = epoch2ts( MT->app->blog, $ts );
711	$args->{join} = MT::Comment->join_on(
712	'entry_id',
713	{
714	created_on => [ $ts, undef ],
715	junk_status => [ 0, 1 ]
716	},
717	{ range_incl => { created_on => 1 }, unique => 1 }
718	);
719	# Since we're selecting content from the mt_entry
720	# table, but we want to sort by the joined
721	# 'comment_created_on' column, we have to specify the
722	# sort column as a reference and a full field name,
723	# to prevent MT from adding a 'entry_' prefix to
724	# the column name.
725	$args->{sort} = \'comment_created_on';
726	$args->{direction} = 'descend';
727	},
728	},
729	_by_date => {
730	label => sub {
731	my $app = MT->instance;
732	my $val = $app->param('filter_val');
733	my ( $from, $to ) = split /-/, $val;
734	$from = undef unless $from =~ m/^\d{8}$/;
735	$to = undef unless $to =~ m/^\d{8}$/;
736	my $format = '%x';
737	$from = format_ts(
738	$format, $from . '000000',
739	undef, MT->current_language
740	) if $from;
741	$to = format_ts(
742	$format, $to . '000000',
743	undef, MT->current_language
744	) if $to;
745	my $label = _entry_label;
746
747	if ( $from && $to ) {
748	return $app->translate(
749	'[_1] posted between [_2] and [_3]',
750	$label, $from, $to );
751	}
752	elsif ($from) {
753	return $app->translate( "[_1] posted since [_2]",
754	$label, $from );
755	}
756	elsif ($to) {
757	return $app->translate( "[_1] posted on or before [_2]",
758	$label, $to );
759	}
760	},
761	handler => sub {
762	my ( $terms, $args ) = @_;
763	my $val = $app->param('filter_val');
764	my ( $from, $to ) = split /-/, $val;
765	$from = undef unless $from =~ m/^\d{8}$/;
766	$from .= '000000';
767	$to = undef unless $to =~ m/^\d{8}$/;
768	$to .= '235959';
769	$terms->{authored_on} =
770	[ MT::Object::ts2db($from), MT::Object::ts2db($to) ];
771	$args->{range_incl}{authored_on} = 1;
772	},
773	},
774	},
775	ping => {
776	default => {
777	label => 'Non-spam TrackBacks',
778	order => 100,
779	handler => sub {
780	my ( $terms, $args ) = @_;
781	$terms->{junk_status} = [ 0, 1 ];
782	},
783	},
784	my_posts => {
785	label => 'TrackBacks on my entries',
786	order => 200,
787	handler => sub {
788	my ( $terms, $args ) = @_;
789	require MT::Entry;
790	my $app = MT->instance;
791	$terms->{junk_status} = [ 0, 1 ];
792	require MT::Trackback;
793	$args->{join} = MT::Trackback->join_on(
794	undef,
795	{
796	id => \'= tbping_tb_id',
797	},
798	{
799	join => MT::Entry->join_on(
800	undef,
801	{
802	id => \'= trackback_entry_id',
803	author_id => $app->user->id
804	}
805	)
806	},
807	);
808	},
809	},
810	published => {
811	label => 'Published TrackBacks',
812	order => 200,
813	handler => sub {
814	my ( $terms, $args ) = @_;
815	$terms->{visible} = 1;
816	},
817	},
818	unpublished => {
819	label => 'Unpublished TrackBacks',
820	order => 300,
821	handler => sub {
822	my ( $terms, $args ) = @_;
823	$terms->{junk_status} = [ 0, 1 ];
824	$terms->{visible} = 0;
825	},
826	},
827	spam => {
828	label => 'TrackBacks marked as Spam',
829	order => 400,
830	handler => sub {
831	my ( $terms, $args ) = @_;
832	$terms->{junk_status} = -1;
833	},
834	},
835	last_7_days => {
836	label => 'All TrackBacks in the last 7 days',
837	order => 700,
838	handler => sub {
839	my ( $terms, $args ) = @_;
840	my $ts = time - 7 * 24 * 60 * 60;
841	$ts = epoch2ts( MT->app->blog, $ts );
842	$terms->{created_on} = [ $ts, undef ];
843	$args->{range_incl}{created_on} = 1;
844	$terms->{junk_status} = [ 0, 1 ];
845	},
846	},
847	},
848	comment => {
849	default => {
850	label => 'Non-spam Comments',
851	order => 100,
852	handler => sub {
853	my ( $terms, $args ) = @_;
854	$terms->{junk_status} = [ 0, 1 ];
855	},
856	},
857	my_posts => {
858	label => 'Comments on my entries',
859	order => 200,
860	handler => sub {
861	my ( $terms, $args ) = @_;
862	require MT::Entry;
863	my $app = MT->instance;
864	$terms->{junk_status} = [ 0, 1 ];
865	# This join syntax employs a hack that allows us
866	# to do joins on abitrary columns. Typically,
867	# objectdriver joins are applied with the primary
868	# key column of the driving table (here,
869	# mt_comment.comment_id), but we actually want to
870	# join to the mt_entry table where the entry_id
871	# matches to mt_comment.comment_entry_id (not the
872	# primary key). So by specifying NO 'join' column
873	# (which is always compared with the primary key),
874	# we specify the actual join conditions in the
875	# terms. And using a reference for the
876	# 'comment_entry_id' column name, to pass that
877	# on directly to the SQL statement that is generated.
878	$args->{join} = MT::Entry->join_on(
879	undef,
880	{
881	id => \'= comment_entry_id',
882	author_id => $app->user->id
883	}
884	);
885	},
886	},
887	unpublished => {
888	label => 'Pending comments',
889	order => 300,
890	handler => sub {
891	my ( $terms, $args ) = @_;
892	$terms->{junk_status} = [ 0, 1 ];
893	$terms->{visible} = 0;
894	},
895	},
896	spam => {
897	label => 'Spam Comments',
898	order => 400,
899	handler => sub {
900	my ( $terms, $args ) = @_;
901	$terms->{junk_status} = -1;
902	},
903	},
904	published => {
905	label => 'Published comments',
906	order => 500,
907	handler => sub {
908	my ( $terms, $args ) = @_;
909	$terms->{visible} = 1;
910	},
911	},
912	# my_comments => {
913	# label => 'My comments',
914	# order => 600,
915	# handler => sub {
916	# my ( $terms, $args ) = @_;
917	# $terms->{commenter_id} = $app->user->id;
918	# },
919	# },
920	last_7_days => {
921	label => 'Comments in the last 7 days',
922	order => 700,
923	handler => sub {
924	my ( $terms, $args ) = @_;
925	my $ts = time - 7 * 24 * 60 * 60;
926	$ts = epoch2ts( MT->app->blog, $ts );
927	$terms->{created_on} = [ $ts, undef ];
928	$args->{range_incl}{created_on} = 1;
929	$terms->{junk_status} = [ 0, 1 ];
930	},
931	},
932	# last_24_hours => {
933	# label => 'All comments in the last 24 hours',
934	# order => 800,
935	# handler => sub {
936	# my ( $terms, $args ) = @_;
937	# my $ts = time - 24 * 60 * 60;
938	# $ts = epoch2ts( MT->app->blog, $ts );
939	# $terms->{created_on} = [ $ts, undef ];
940	# $args->{range_incl}{created_on} = 1;
941	# $terms->{junk_status} = [ 0, 1 ];
942	# },
943	# },
944	_comments_by_user => {
945	label => sub {
946	my $app = MT->app;
947	my $user_id = $app->param('filter_val');
948	my $user = MT::Author->load($user_id);
949	require MT::Author;
950	return $app->translate(
951	"All comments by [_1] '[_2]'",
952	(
953	$user->type == MT::Author::COMMENTER()
954	? $app->translate("Commenter")
955	: $app->translate("Author")
956	),
957	(
958	$user->nickname
959	? $user->nickname . ' (' . $user->name . ')'
960	: $user->name
961	)
962	);
963	},
964	handler => sub {
965	my ( $terms, $args ) = @_;
966	my $cmtr_id = int( MT->app->param('filter_val') );
967	$terms->{commenter_id} = $cmtr_id;
968	},
969	},
970	_comments_by_entry => {
971	label => sub {
972	my $entry_id = MT->app->param('filter_val');
973	my $entry = MT::Entry->load($entry_id);
974	return MT->translate( "All comments for [_1] '[_2]'",
975	$entry->class_label, $entry->title );
976	},
977	handler => sub {
978	my ( $terms, $args ) = @_;
979	my $entry_id = int( MT->app->param('filter_val') );
980	$terms->{entry_id} = $entry_id;
981	$terms->{junk_status} = [ 0, 1 ];
982	},
983	},
984	_by_date => {
985	label => sub {
986	my $app = MT->instance;
987	my $val = $app->param('filter_val');
988	my ( $from, $to ) = split /-/, $val;
989	$from = undef unless $from =~ m/^\d{8}$/;
990	$to = undef unless $to =~ m/^\d{8}$/;
991	my $format = '%x';
992	$from = format_ts(
993	$format, $from . '000000',
994	undef, MT->current_language
995	) if $from;
996	$to = format_ts(
997	$format, $to . '000000',
998	undef, MT->current_language
999	) if $to;
1000
1001	if ( $from && $to ) {
1002	return $app->translate(
1003	'Comments posted between [_1] and [_2]',
1004	$from, $to );
1005	}
1006	elsif ($from) {
1007	return $app->translate( "Comments posted since [_1]",
1008	$from );
1009	}
1010	elsif ($to) {
1011	return $app->translate(
1012	"Comments posted on or before [_1]", $to );
1013	}
1014	},
1015	handler => sub {
1016	my ( $terms, $args ) = @_;
1017	my $val = $app->param('filter_val');
1018	my ( $from, $to ) = split /-/, $val;
1019	$from = undef unless $from =~ m/^\d{8}$/;
1020	$from .= '000000';
1021	$to = undef unless $to =~ m/^\d{8}$/;
1022	$to .= '235959';
1023	$terms->{junk_status} = [ 0, 1 ];
1024	$terms->{created_on} =
1025	[ MT::Object::ts2db($from), MT::Object::ts2db($to) ];
1026	$args->{range_incl}{created_on} = 1;
1027	},
1028	},
1029	},
1030	template => {
1031	index_templates => {
1032	label => "Index Templates",
1033	order => 100,
1034	handler => sub {
1035	my ( $terms, $args ) = @_;
1036	$terms->{type} = 'index';
1037	},
1038	condition => sub {
1039	$app->param('blog_id');
1040	},
1041	},
1042	archive_templates => {
1043	label => "Archive Templates",
1044	order => 200,
1045	handler => sub {
1046	my ( $terms, $args ) = @_;
1047	$terms->{type} =
1048	[ 'individual', 'page', 'archive', 'category' ];
1049	},
1050	condition => sub {
1051	$app->param('blog_id');
1052	},
1053	},
1054	module_templates => {
1055	label => "Template Modules",
1056	order => 300,
1057	handler => sub {
1058	my ($terms) = @_;
1059	$terms->{type} = 'custom';
1060	},
1061	},
1062	email_templates => {
1063	label => "E-mail Templates",
1064	order => 400,
1065	handler => sub {
1066	my ($terms) = @_;
1067	$terms->{type} = 'email';
1068	},
1069	condition => sub {
1070	!$app->param('blog_id');
1071	},
1072	},
1073	backup_templates => {
1074	label => "Backup Templates",
1075	order => 10000,
1076	handler => sub {
1077	my ($terms) = @_;
1078	$terms->{type} = 'backup';
1079	},
1080	},
1081	system_templates => {
1082	label => "System Templates",
1083	order => 500,
1084	handler => sub {
1085	my ($terms) = @_;
1086	my $scope;
1087	my $set;
1088	if ( my $blog_id = $app->param('blog_id') ) {
1089	my $blog = $app->model('blog')->load($blog_id);
1090	$set = $blog->template_set;
1091	$scope .= 'system';
1092	}
1093	else {
1094	$terms->{blog_id} = 0;
1095	$scope = 'global:system';
1096	}
1097	my @tmpl_path = ( $set && ($set ne 'mt_blog')) ? ("template_sets", $set, 'templates', $scope) : ("default_templates", $scope);
1098	my $sys_tmpl = MT->registry(@tmpl_path) \|\| {};
1099	$terms->{type} = [ keys %$sys_tmpl ];
1100	},
1101	condition => sub {
1102	$app->param('blog_id');
1103	},
1104	},
1105	},
1106	tag => {
1107	entry => {
1108	label => 'Tags with entries',
1109	order => 100,
1110	},
1111	page => {
1112	label => 'Tags with pages',
1113	order => 200,
1114	},
1115	asset => {
1116	label => 'Tags with assets',
1117	order => 300,
1118	},
1119	},
1120	sys_user => {
1121	enabled => {
1122	label => 'Enabled Users',
1123	order => 100,
1124	handler => sub {
1125	my ($terms) = @_;
1126	$terms->{status} = 1;
1127	},
1128	},
1129	disabled => {
1130	label => "Disabled Users",
1131	order => 200,
1132	handler => sub {
1133	my ($terms) = @_;
1134	$terms->{status} = 2;
1135	},
1136	},
1137	pending => {
1138	label => "Pending Users",
1139	order => 300,
1140	handler => sub {
1141	my ($terms) = @_;
1142	$terms->{status} = 3;
1143	},
1144	},
1145	},
1146	user => {
1147	author => {
1148	label => 'Authors',
1149	order => 100,
1150	handler => sub {
1151	my ($terms) = @_;
1152	require MT::Author;
1153	$terms->{type} = MT::Author::AUTHOR();
1154	},
1155	},
1156	commenter => {
1157	label => 'Commenters',
1158	order => 200,
1159	handler => sub {
1160	my ($terms) = @_;
1161	require MT::Author;
1162	$terms->{type} = MT::Author::COMMENTER();
1163	},
1164	},
1165	},
1166	};
1167	}
1168
1169	sub core_menus {
1170	my $app = shift;
1171	return {
1172	'create' => {
1173	label => "Create",
1174	order => 100,
1175	},
1176	'manage' => {
1177	label => "Manage",
1178	order => 200,
1179	},
1180	'design' => {
1181	label => "Design",
1182	order => 300,
1183	},
1184	'prefs' => {
1185	label => "Preferences",
1186	order => 400,
1187	},
1188	'tools' => {
1189	label => "Tools",
1190	order => 500,
1191	},
1192
1193	'create:blog' => {
1194	label => "Blog",
1195	order => 100,
1196	view => "system",
1197	},
1198	'create:blog' => {
1199	label => "Blog",
1200	order => 200,
1201	view => "system",
1202	mode => "view",
1203	args => { _type => "blog" },
1204	permission => "create_blog",
1205	},
1206	'create:user' => {
1207	label => "User",
1208	order => 200,
1209	view => "system",
1210	mode => "view",
1211	args => { _type => "author" },
1212	permission => "administer",
1213	condition => sub {
1214	return !MT->config->ExternalUserManagement;
1215	},
1216	},
1217	'create:entry' => {
1218	label => "Entry",
1219	order => 100,
1220	mode => 'view',
1221	args => { _type => 'entry' },
1222	permission => 'create_post',
1223	view => "blog",
1224	},
1225	'create:page' => {
1226	label => "Page",
1227	order => 200,
1228	mode => 'view',
1229	args => { _type => 'page' },
1230	permission => 'manage_pages',
1231	view => "blog",
1232	},
1233	'create:file' => {
1234	label => "Upload File",
1235	order => 300,
1236	dialog => 'start_upload',
1237	permission => 'upload,edit_assets',
1238	view => "blog",
1239	},
1240
1241	'manage:blog' => {
1242	label => "Blogs",
1243	mode => "list_blog",
1244	order => 100,
1245	view => "system",
1246	},
1247	'manage:user' => {
1248	label => "Users",
1249	mode => "list_user",
1250	order => 200,
1251	permission => "administer",
1252	view => "system",
1253	},
1254	'manage:entry' => {
1255	label => "Entries",
1256	mode => 'list_entry',
1257	order => 1000,
1258	condition => sub {
1259	return 1 if $app->user->is_superuser;
1260	if ( $app->param('blog_id') ) {
1261	my $perms = $app->user->permissions($app->param('blog_id'));
1262	return 1 if $perms->can_create_post \|\| $perms->can_publish_post \|\| $perms->can_edit_all_posts;
1263	}
1264	else {
1265	require MT::Permission;
1266	my @blogs =
1267	map { $_->blog_id }
1268	grep { $_->can_create_post \|\| $_->can_publish_post \|\| $_->can_edit_all_posts }
1269	MT::Permission->load( { author_id => $app->user->id } );
1270	return 1 if @blogs;
1271	}
1272	return 0;
1273	},
1274	#permission => 'create_post,publish_post,edit_all_posts',
1275	},
1276	'manage:comment' => {
1277	label => "Comments",
1278	mode => 'list_comment',
1279	order => 2000,
1280	condition => sub {
1281	return 1 if $app->user->is_superuser;
1282	if ( $app->param('blog_id') ) {
1283	my $perms = $app->user->permissions($app->param('blog_id'));
1284	return 1 if $perms->can_create_post \|\| $perms->can_manage_feedback \|\| $perms->can_edit_all_posts \|\| $perms->can_comment;
1285	}
1286	else {
1287	require MT::Permission;
1288	my @blogs =
1289	map { $_->blog_id }
1290	grep { $_->can_create_post \|\| $_->can_manage_feedback \|\| $_->can_edit_all_posts \|\| $_->can_comment }
1291	MT::Permission->load( { author_id => $app->user->id } );
1292	return 1 if @blogs;
1293	}
1294	return 0;
1295	},
1296	#permission => 'create_post,edit_all_posts,manage_feedback,comment',
1297	},
1298	'manage:asset' => {
1299	label => "Assets",
1300	mode => 'list_asset',
1301	order => 3000,
1302	permission => 'edit_assets',
1303	},
1304	'manage:page' => {
1305	label => "Pages",
1306	mode => 'list_pages',
1307	order => 4000,
1308	permission => 'manage_pages',
1309	},
1310	'manage:ping' => {
1311	label => "TrackBacks",
1312	mode => 'list_pings',
1313	order => 5000,
1314	permission => 'create_post,edit_all_posts,manage_feedback',
1315	},
1316	'manage:category' => {
1317	label => "Categories",
1318	mode => 'list_cat',
1319	order => 6000,
1320	permission => 'edit_categories',
1321	view => "blog",
1322	},
1323	'manage:folder' => {
1324	label => "Folders",
1325	mode => 'list_cat',
1326	args => { _type => 'folder' },
1327	order => 7000,
1328	permission => 'manage_pages',
1329	view => "blog",
1330	},
1331	'manage:tag' => {
1332	label => "Tags",
1333	mode => 'list_tag',
1334	order => 8000,
1335	permission => 'edit_tags',
1336	system_permission => 'administer',
1337	},
1338	'manage:blog_user' => {
1339	label => "Users",
1340	mode => 'list_member',
1341	order => 9000,
1342	view => "blog",
1343	permission => 'administer_blog',
1344	system_permission => 'administer',
1345	},
1346
1347	'design:template' => {
1348	label => "Templates",
1349	mode => 'list',
1350	args => { _type => 'template' },
1351	order => 100,
1352	permission => 'edit_templates',
1353	system_permission => 'edit_templates',
1354	},
1355
1356	'prefs:general' => {
1357	label => "General",
1358	order => 100,
1359	mode => "cfg_system",
1360	view => "system",
1361	permission => "administer",
1362	},
1363	'prefs:user' => {
1364	label => "User",
1365	order => 200,
1366	mode => "cfg_system_users",
1367	view => "system",
1368	permission => "administer",
1369	},
1370	'prefs:feedback' => {
1371	label => "Feedback",
1372	order => 300,
1373	mode => "cfg_system_feedback",
1374	view => "system",
1375	permission => "administer",
1376	},
1377	'prefs:plugins' => {
1378	label => "Plugins",
1379	order => 600,
1380	mode => "cfg_plugins",
1381	permission => "administer_blog",
1382	system_permission => "manage_plugins",
1383	},
1384	'prefs:settings' => {
1385	label => "Blog Settings",
1386	mode => 'cfg_prefs',
1387	order => 100,
1388	permission => 'administer_blog,edit_config,set_publish_paths',
1389	system_permission => 'administer',
1390	view => "blog",
1391	},
1392	'prefs:notification' => {
1393	label => "Address Book",
1394	mode => 'list',
1395	args => { _type => 'notification' },
1396	order => 400,
1397	permission => 'edit_notifications',
1398	view => "blog",
1399	},
1400
1401	'tools:main' => {
1402	label => "System Information",
1403	order => 100,
1404	mode => "tools",
1405	view => "system",
1406	},
1407	'tools:activity_log' => {
1408	label => "Activity Log",
1409	order => 200,
1410	mode => "view_log",
1411	permission => "view_blog_log",
1412	system_permission => "view_log",
1413	view => "system",
1414	},
1415	'tools:import' => {
1416	label => "Import",
1417	order => 300,
1418	mode => "start_import",
1419	view => "blog",
1420	permission => "administer_blog",
1421	view => "system",
1422	},
1423	'tools:export' => {
1424	label => "Export",
1425	order => 400,
1426	mode => "start_export",
1427	view => "blog",
1428	permission => "administer_blog",
1429	view => "system",
1430	},
1431	'tools:backup' => {
1432	label => "Backup",
1433	order => 500,
1434	mode => "start_backup",
1435	permission => "administer_blog",
1436	view => "system",
1437	},
1438	'tools:restore' => {
1439	label => "Restore",
1440	order => 600,
1441	mode => "start_restore",
1442	permission => "administer_blog",
1443	view => "system",
1444	},
1445
1446	# System menu which is actually separate
1447	# in the CMS navigation
1448	'system' => {
1449	label => "System Overview",
1450	mode => 'dashboard',
1451	order => 10000,
1452	},
1453	'system:user' => {
1454	label => "Users",
1455	mode => 'list_authors',
1456	order => 100,
1457	permission => 'administer_blog',
1458	system_permission => 'administer',
1459	},
1460	'system:blog' => {
1461	label => "Blogs",
1462	mode => 'list_blogs',
1463	order => 200,
1464	},
1465	'system:template' => {
1466	label => "Global Templates",
1467	mode => 'list_template',
1468	order => 250,
1469	system_permission => 'edit_templates',
1470	},
1471	'system:settings' => {
1472	label => "Settings",
1473	mode => 'cfg_system',
1474	order => 300,
1475	system_permission => 'administer',
1476	},
1477	'system:plugins' => {
1478	label => "Plugins",
1479	mode => 'cfg_plugins',
1480	order => 400,
1481	system_permission => 'manage_plugins',
1482	},
1483	'system:log' => {
1484	label => "Activity Log",
1485	mode => 'view_log',
1486	order => 500,
1487	system_permission => 'view_log',
1488	},
1489	'system:tools' => {
1490	label => "Tools",
1491	mode => 'tools',
1492	order => 600,
1493	system_permission => 'administer',
1494	},
1495	};
1496	}
1497
1498	sub init_core_callbacks {
1499	my $app = shift;
1500	my $pkg = 'cms_';
1501	my $pfx = '$Core::MT::CMS::';
1502	$app->_register_core_callbacks(
1503	{
1504	# notification callbacks
1505	$pkg . 'save_permission_filter.notification' => "${pfx}AddressBook::can_save",
1506	$pkg . 'save_filter.notification' => "${pfx}AddressBook::save_filter",
1507	$pkg . 'post_delete.notification' => "${pfx}AddressBook::post_delete",
1508
1509	# banlist callbacks
1510	$pkg . 'save_permission_filter.banlist' => "${pfx}BanList::can_save",
1511	$pkg . 'save_filter.banlist' => "${pfx}BanList::save_filter",
1512
1513	# associations
1514	$pkg . 'delete_permission_filter.association' => "${pfx}User::can_delete_association",
1515
1516	# user callbacks
1517	$pkg . 'edit.author' => "${pfx}User::edit",
1518	$pkg . 'view_permission_filter.author' => "${pfx}User::can_view",
1519	$pkg . 'save_permission_filter.author' => "${pfx}User::can_save",
1520	$pkg . 'delete_permission_filter.author' => "${pfx}User::can_delete",
1521	$pkg . 'save_filter.author' => "${pfx}User::save_filter",
1522	$pkg . 'pre_save.author' => "${pfx}User::pre_save",
1523	$pkg . 'post_save.author' => "${pfx}User::post_save",
1524	$pkg . 'post_delete.author' => "${pfx}User::post_delete",
1525
1526	# blog callbacks
1527	$pkg . 'edit.blog' => "${pfx}Blog::edit",
1528	$pkg
1529	. 'view_permission_filter.blog' => "${pfx}Blog::can_view",
1530	$pkg
1531	. 'save_permission_filter.blog' => "${pfx}Blog::can_save",
1532	$pkg
1533	. 'delete_permission_filter.blog' => "${pfx}Blog::can_delete",
1534	$pkg . 'pre_save.blog' => "${pfx}Blog::pre_save",
1535	$pkg . 'post_save.blog' => "${pfx}Blog::post_save",
1536	$pkg . 'save_filter.blog' => "${pfx}Blog::save_filter",
1537	$pkg . 'post_delete.blog' => "${pfx}Blog::post_delete",
1538
1539	# folder callbacks
1540	$pkg . 'edit.folder' => "${pfx}Folder::edit",
1541	$pkg . 'view_permission_filter.folder' => "${pfx}Folder::can_view",
1542	$pkg . 'save_permission_filter.folder' => "${pfx}Folder::can_save",
1543	$pkg . 'delete_permission_filter.folder' => "${pfx}Folder::can_delete",
1544	$pkg . 'pre_save.folder' => "${pfx}Folder::pre_save",
1545	$pkg . 'post_save.folder' => "${pfx}Folder::post_save",
1546	$pkg . 'save_filter.folder' => "${pfx}Folder::save_filter",
1547	$pkg . 'post_delete.folder' => "${pfx}Folder::post_delete",
1548
1549	# category callbacks
1550	$pkg . 'edit.category' => "${pfx}Category::edit",
1551	$pkg . 'view_permission_filter.category' => "${pfx}Category::can_view",
1552	$pkg . 'save_permission_filter.category' => "${pfx}Category::can_save",
1553	$pkg . 'delete_permission_filter.category' => "${pfx}Category::can_delete",
1554	$pkg . 'pre_save.category' => "${pfx}Category::pre_save",
1555	$pkg . 'post_save.category' => "${pfx}Category::post_save",
1556	$pkg . 'save_filter.category' => "${pfx}Category::save_filter",
1557	$pkg . 'post_delete.category' => "${pfx}Category::post_delete",
1558
1559	# comment callbacks
1560	$pkg . 'edit.comment' => "${pfx}Comment::edit",
1561	$pkg . 'view_permission_filter.comment' => "${pfx}Comment::can_view",
1562	$pkg . 'save_permission_filter.comment' => "${pfx}Comment::can_save",
1563	$pkg . 'delete_permission_filter.comment' => "${pfx}Comment::can_delete",
1564	$pkg . 'pre_save.comment' => "${pfx}Comment::pre_save",
1565	$pkg . 'post_save.comment' => "${pfx}Comment::post_save",
1566	$pkg . 'post_delete.comment' => "${pfx}Comment::post_delete",
1567
1568	# commenter callbacks
1569	$pkg . 'edit.commenter' => "${pfx}Comment::edit_commenter",
1570	$pkg . 'view_permission_filter.commenter' => "${pfx}Comment::can_view_commenter",
1571	$pkg . 'delete_permission_filter.commenter' => "${pfx}Comment::can_delete_commenter",
1572
1573	# entry callbacks
1574	$pkg . 'edit.entry' => "${pfx}Entry::edit",
1575	$pkg . 'view_permission_filter.entry' => "${pfx}Entry::can_view",
1576	$pkg . 'delete_permission_filter.entry' => "${pfx}Entry::can_delete",
1577	$pkg . 'pre_save.entry' => "${pfx}Entry::pre_save",
1578	$pkg . 'post_save.entry' => "${pfx}Entry::post_save",
1579	$pkg . 'post_delete.entry' => "${pfx}Entry::post_delete",
1580
1581	# page callbacks
1582	$pkg . 'edit.page' => "${pfx}Page::edit",
1583	$pkg . 'view_permission_filter.page' => "${pfx}Page::can_view",
1584	$pkg . 'delete_permission_filter.page' => "${pfx}Page::can_delete",
1585	$pkg . 'pre_save.page' => "${pfx}Page::pre_save",
1586	$pkg . 'post_save.page' => "${pfx}Page::post_save",
1587	$pkg . 'post_delete.page' => "${pfx}Page::post_delete",
1588
1589	# ping callbacks
1590	$pkg . 'edit.ping' => "${pfx}TrackBack::edit",
1591	$pkg . 'view_permission_filter.ping' => "${pfx}TrackBack::can_view",
1592	$pkg . 'save_permission_filter.ping' => "${pfx}TrackBack::can_save",
1593	$pkg . 'delete_permission_filter.ping' => "${pfx}TrackBack::can_delete",
1594	$pkg . 'pre_save.ping' => "${pfx}TrackBack::pre_save",
1595	$pkg . 'post_save.ping' => "${pfx}TrackBack::post_save",
1596	$pkg . 'post_delete.ping' => "${pfx}TrackBack::post_delete",
1597
1598	# template callbacks
1599	$pkg . 'edit.template' => "${pfx}Template::edit",
1600	$pkg . 'view_permission_filter.template' => "${pfx}Template::can_view",
1601	$pkg . 'save_permission_filter.template' => "${pfx}Template::can_save",
1602	$pkg . 'delete_permission_filter.template' => "${pfx}Template::can_delete",
1603	$pkg . 'pre_save.template' => "${pfx}Template::pre_save",
1604	$pkg . 'post_save.template' => "${pfx}Template::post_save",
1605	$pkg . 'post_delete.template' => "${pfx}Template::post_delete",
1606
1607	# tags
1608	$pkg . 'delete_permission_filter.tag' => "${pfx}Tag::can_delete",
1609	$pkg . 'post_delete.tag' => "${pfx}Tag::post_delete",
1610
1611	# junk-related callbacks
1612	#'HandleJunk' => \&_builtin_spam_handler,
1613	#'HandleNotJunk' => \&_builtin_spam_unhandler,
1614	$pkg . 'not_junk_test' => "${pfx}Common::not_junk_test",
1615
1616	# assets
1617	$pkg . 'edit.asset' => "${pfx}Asset::edit",
1618	$pkg . 'view_permission_filter.asset' => "${pfx}Asset::can_view",
1619	$pkg . 'delete_permission_filter.asset' => "${pfx}Asset::can_delete",
1620	$pkg . 'pre_save.asset' => "${pfx}Asset::pre_save",
1621	$pkg . 'post_save.asset' => "${pfx}Asset::post_save",
1622	$pkg . 'post_delete.asset' => "${pfx}Asset::post_delete",
1623	'template_param.edit_asset' => "${pfx}Asset::template_param_edit",
1624	}
1625	);
1626	}
1627
1628	sub user_can_admin_commenters {
1629	my $app = shift;
1630	my $perms = $app->permissions;
1631	$app->user->is_superuser()
1632	\|\| ( $perms
1633	&& ( $perms->can_administer_blog \|\| $perms->can_manage_feedback ) );
1634	}
1635
1636	sub validate_magic {
1637	my $app = shift;
1638	if ( my $feed_token = $app->param('feed_token') ) {
1639	return unless $app->user;
1640	my $pw = $app->user->api_password;
1641	return undef if ( $pw \|\| '' ) eq '';
1642	my $auth_token = perl_sha1_digest_hex( 'feed:' . $pw );
1643	return $feed_token eq $auth_token;
1644	}
1645	else {
1646	return $app->SUPER::validate_magic(@_);
1647	}
1648	}
1649
1650	sub is_authorized {
1651	my $app = shift;
1652	my $blog_id = $app->param('blog_id');
1653	$app->permissions(undef);
1654	return 1 unless $blog_id;
1655	return unless my $user = $app->user;
1656	my $perms = $app->permissions( $user->permissions($blog_id) );
1657	$perms
1658	? 1
1659	: $app->error(
1660	$app->translate("You are not authorized to log in to this blog.") );
1661	}
1662
1663	sub set_default_tmpl_params {
1664	my $app = shift;
1665	$app->SUPER::set_default_tmpl_params(@_);
1666	my ($tmpl) = @_;
1667	my $param = {};
1668
1669	my $mode = $app->mode;
1670	my $auth_mode = $app->config('AuthenticationModule');
1671	my ($pref) = split /\s+/, $auth_mode;
1672
1673	# TODO - remove after testing or after new IA is defined
1674	$param->{app_layout_fixed} = 0;
1675	$param->{athena_nav} = 1;
1676
1677	$param->{"auth_mode_$pref"} = 1;
1678	$param->{mt_news} = $app->config('NewsURL');
1679	$param->{mt_support} = $app->config('SupportURL');
1680	my $lang = lc MT->current_language \|\| 'en_us';
1681	$param->{language_id} = ( $lang !~ /en[_-]us/ ) ? $lang : '';
1682	$param->{mode} = $app->mode;
1683
1684	my $blog_id = $app->param('blog_id') \|\| 0;
1685	my $blog;
1686	my $blog_class = $app->model('blog');
1687	$blog \|\|= $blog_class->load($blog_id) if $blog_id;
1688	if ( my $auth = $app->user ) {
1689	$param->{is_administrator} = $auth->is_superuser;
1690	$param->{can_create_blog} = $auth->can_create_blog;
1691	$param->{can_view_log} \|\|= $auth->can_view_log;
1692	$param->{can_manage_plugins} = $auth->can_manage_plugins;
1693	$param->{can_edit_templates} = $auth->can_edit_templates;
1694	$param->{can_publish_feedbacks} = $auth->is_superuser;
1695	$param->{can_search_replace} = $auth->is_superuser;
1696	$param->{has_authors_button} = $auth->is_superuser;
1697	$param->{author_id} = $auth->id;
1698	$param->{author_name} = $auth->name;
1699	$param->{author_display_name} = $auth->nickname \|\| $auth->name;
1700	}
1701
1702	if ( my $perms = $app->permissions ) {
1703	my $perm_hash = $perms->to_hash;
1704	foreach my $perm_name ( keys %$perm_hash ) {
1705	my $perm_token = $perm_name;
1706	$perm_token =~ s/^permission\.//;
1707	$param->{$perm_token} = $perm_hash->{$perm_name}
1708	if defined $perm_hash->{$perm_name};
1709	}
1710	$param->{can_edit_entries} = $param->{can_create_post}
1711	\|\| $param->{can_edit_all_entries}
1712	\|\| $param->{can_publish_post};
1713	$param->{can_search_replace} = $param->{can_edit_all_posts};
1714	$param->{can_edit_authors} = $param->{can_administer_blog};
1715	$param->{can_access_assets} = $param->{can_create_post}
1716	\|\| $param->{can_edit_all_posts}
1717	\|\| $param->{can_edit_assets};
1718	$param->{can_edit_commenters} = $param->{can_manage_feedback};
1719	$param->{has_manage_label} = $param->{can_edit_templates}
1720	\|\| $param->{can_administer_blog}
1721	\|\| $param->{can_edit_categories}
1722	\|\| $param->{can_edit_config}
1723	\|\| $param->{can_edit_tags}
1724	\|\| $param->{can_set_publish_paths}
1725	\|\| $param->{show_ip_info};
1726	$param->{has_posting_label} = $param->{can_create_post}
1727	\|\| $param->{can_edit_entries}
1728	\|\| $param->{can_access_assets};
1729	$param->{has_community_label} = $param->{can_edit_entries}
1730	\|\| $param->{can_edit_notifications};
1731	$param->{can_publish_feedbacks} = $param->{can_manage_feedback}
1732	\|\| $param->{can_publish_post}
1733	\|\| $param->{can_edit_all_posts};
1734	$param->{can_view_log} = $param->{can_view_blog_log};
1735	$param->{can_publish_post} = $param->{can_publish_post}
1736	\|\| $param->{can_edit_all_posts};
1737	$param->{show_ip_info} = $app->config->ShowIPInformation
1738	&& $param->{can_manage_feedback};
1739	}
1740
1741	my $static_app_url = $app->static_path;
1742	$param->{help_url} = $app->help_url() \|\| $static_app_url . 'docs/';
1743
1744	$param->{show_ip_info} \|\|= $app->config('ShowIPInformation');
1745	my $type = $app->param('_type') \|\| '';
1746	$param->{page_actions} \|\|= $app->page_actions($mode);
1747
1748	$param->{ "mode_$mode" . ( $type ? "_$type" : '' ) } = 1;
1749	$param->{return_args} \|\|= $app->make_return_args;
1750	$tmpl->param($param);
1751	}
1752
1753	sub build_page {
1754	my $app = shift;
1755	my ( $page, $param ) = @_;
1756	$param \|\|= {};
1757
1758	my $blog_id = $app->param('blog_id') \|\| 0;
1759	my $blog;
1760	my $blog_class = $app->model('blog');
1761	$blog \|\|= $blog_class->load($blog_id) if $blog_id;
1762	if ( $blog_id && $page ne 'login.tmpl' ) {
1763	if ($blog) {
1764	$param->{blog_name} = $blog->name;
1765	$param->{blog_id} = $blog->id;
1766	$param->{blog_url} = $blog->site_url;
1767	}
1768	else {
1769	$app->error( $app->translate( "No such blog [_1]", $blog_id ) );
1770	}
1771	}
1772	if ( $page ne 'login.tmpl' ) {
1773	if ( ref $app eq 'MT::App::CMS' ) {
1774	$param->{system_overview_nav} = 1
1775	unless $blog_id
1776	\|\| exists $param->{system_overview_nav}
1777	\|\| $param->{no_breadcrumbs};
1778	$param->{quick_search} = 1 unless defined $param->{quick_search};
1779	}
1780	}
1781
1782	$app->build_blog_selector($param);
1783	$app->build_menus($param);
1784	$app->SUPER::build_page( $page, $param );
1785	}
1786
1787	sub build_blog_selector {
1788	my $app = shift;
1789	my ($param) = @_;
1790
1791	return if exists $param->{top_blog_loop};
1792
1793	my $blog = $app->blog;
1794	my $blog_id = $blog->id if $blog;
1795	$param->{dynamic_all} = $blog->custom_dynamic_templates eq 'all' if $blog;
1796
1797	my $blog_class = $app->model('blog');
1798	my $auth = $app->user or return;
1799
1800	# Any access to a blog will put it on the top of your
1801	# recently used blogs list (the blog selector)
1802	$app->add_to_favorite_blogs($blog_id) if $blog_id;
1803
1804	my %args;
1805	$args{join} =
1806	MT::Permission->join_on( 'blog_id', { author_id => $auth->id, } );
1807	$args{limit} = 11; # don't load more than 11
1808	my @blogs = $blog_class->load( undef, \%args );
1809
1810	my @fav_blogs = @{ $auth->favorite_blogs \|\| [] };
1811	@fav_blogs = grep { $_ != $blog_id } @fav_blogs if $blog_id;
1812
1813	# Special case for when a user only has access to a single blog.
1814	if ( (!defined($app->param('blog_id'))) && ( @blogs == 1 ) && ( scalar @fav_blogs <= 1 ) ) {
1815
1816	# User only has visibility to a single blog. Don't
1817	# bother giving them a dashboard link for 'all blogs', or
1818	# to 'select a blog'.
1819	$param->{single_blog_mode} = 1;
1820	my $blog = $blogs[0];
1821	$blog_id = $blog->id;
1822	my $perms = MT::Permission->load(
1823	{
1824	blog_id => $blog_id,
1825	author_id => $auth->id
1826	}
1827	);
1828	if ( !$app->blog ) {
1829	if ( $app->mode eq 'dashboard' ) {
1830	$app->param( 'blog_id', $blog_id );
1831	$param->{blog_id} = $blog_id;
1832	$param->{blog_name} = $blog->name;
1833	$app->permissions($perms);
1834	$app->blog($blog);
1835	}
1836	else {
1837	@fav_blogs = ($blog_id);
1838	$blog_id = undef;
1839	}
1840	}
1841	}
1842	elsif ( @blogs && ( @blogs <= 10 ) ) {
1843
1844	# This user only has visibility to 10 or fewer blogs;
1845	# no need to reference their 'favorite' blogs list.
1846	my @ids = map { $_->id } @blogs;
1847	if ($blog_id) {
1848	@ids = grep { $_ != $blog_id } @ids;
1849	}
1850	@fav_blogs = @ids;
1851	if ( $auth->is_superuser ) {
1852
1853	# Better check to see if there are more than
1854	# 10 blogs in the system; if so, a superuser
1855	# will still want the 'Select a blog...' chooser.
1856	# Otherwise, hide it.
1857	my $all_blog_count = $blog_class->count();
1858	if ( $all_blog_count < 11 ) {
1859	$param->{selector_hide_chooser} = 1;
1860	}
1861	}
1862	else {
1863
1864	# This user is not a superuser and only has
1865	# 10 blogs, so they don't need a 'select blog'
1866	# link...
1867	$param->{selector_hide_chooser} = 1;
1868	}
1869	}
1870	$param->{selector_hide_chooser} \|\|= 0;
1871
1872	# Logic for populating the blog selector control
1873	# * Pull list of 'favorite blogs' from user record
1874	# * Load all of those blogs so we can display them
1875	# * Exclude the current blog from the favorite list so it isn't
1876	# shown twice.
1877	@blogs = $blog_class->load( { id => \@fav_blogs } ) if @fav_blogs;
1878	my %blogs = map { $_->id => $_ } @blogs;
1879	@blogs = ();
1880	foreach my $id (@fav_blogs) {
1881	push @blogs, $blogs{$id} if $blogs{$id};
1882	}
1883
1884	my @data;
1885	if (@blogs) {
1886	my @perms = grep { !$_->is_empty } MT::Permission->load(
1887	{
1888	author_id => $auth->id,
1889	blog_id => \@fav_blogs,
1890	}
1891	);
1892	my %perms = map { $_->blog_id => $_ } @perms;
1893	for my $blog (@blogs) {
1894	my $perm = $perms{ $blog->id };
1895	next
1896	unless $auth->is_superuser \|\| ( $perm && !$perm->is_empty );
1897	push @data,
1898	{
1899	top_blog_id => $blog->id,
1900	top_blog_name => $blog->name
1901	};
1902	$data[-1]{top_blog_selected} = 1
1903	if $blog_id && ( $blog->id == $blog_id );
1904	}
1905	}
1906	$param->{top_blog_loop} = \@data;
1907	if ( !$app->user->can_create_blog
1908	&& ( $param->{single_blog_mode} \|\| scalar(@data) <= 1 ) )
1909	{
1910	$param->{no_submenu} = 1;
1911	}
1912	}
1913
1914	sub build_menus {
1915	my $app = shift;
1916	my ($param) = @_;
1917	return if exists $param->{top_nav_loop};
1918
1919	my $menus = $app->registry('menus');
1920	my $blog = $app->blog;
1921	my $blog_id = $blog->id if $blog;
1922
1923	my @top_ids = grep { !/:/ } keys %$menus;
1924	my @top;
1925	my @sys;
1926	my $user = $app->user
1927	or return;
1928	my $perms = $app->permissions \|\| $user->permissions;
1929	my $view = $blog_id ? "blog" : "system";
1930
1931	my $hide_disabled_options = $app->config('HideDisabledMenus') \|\| 0;
1932
1933	my $admin =
1934	$user->is_superuser(); # \|\| ($perms && $perms->has('administer_blog'));
1935
1936	foreach my $id (@top_ids) {
1937	my $menu = $menus->{$id};
1938	next if $menu->{view} && $menu->{view} ne $view;
1939	if (my $cond = $menu->{condition}) {
1940	if (!ref($cond)) {
1941	$cond = $menu->{condition} = $app->handler_to_coderef($cond);
1942	}
1943	next unless $cond->();
1944	}
1945
1946	$menu->{allowed} = 1;
1947	$menu->{'id'} = $id;
1948
1949	my @sub_ids = grep { m/^$id:/ } keys %$menus;
1950	my @sub;
1951	foreach my $sub_id (@sub_ids) {
1952	my $sub = $menus->{$sub_id};
1953	next
1954	if $sub->{view}
1955	&& ( $sub->{view} ne $view );
1956	$sub->{'id'} = $sub_id;
1957	if (my $cond = $sub->{condition}) {
1958	if (!ref($cond)) {
1959	$cond = $sub->{condition} = $app->handler_to_coderef($cond);
1960	}
1961	next unless $cond->();
1962	}
1963	push @sub, $sub;
1964	}
1965
1966	if (
1967	my $p =
1968	$blog_id
1969	? $menu->{permission}
1970	\|\| $menu->{system_permission}
1971	: $menu->{system_permission}
1972	\|\| $menu->{permission}
1973	)
1974	{
1975	my $allowed = 0;
1976	my @p = split /,/, $p;
1977	foreach my $p (@p) {
1978	my $perm = 'can_' . $p;
1979	$allowed = 1, last if ( $perms && $perms->$perm() ) \|\| $admin;
1980	}
1981	$menu->{allowed} = $allowed;
1982	}
1983	elsif ( !$perms && !$blog_id ) {
1984	$menu->{allowed} = 0 if $menu->{system_permission} && !$admin;
1985	}
1986
1987	next if $hide_disabled_options && (! $menu->{allowed});
1988
1989	if (@sub) {
1990	if ( $id eq 'system' ) {
1991	push @sys, $menu;
1992	}
1993	else {
1994	push @top, $menu;
1995	}
1996
1997	my $has_sub = 0;
1998	foreach my $sub (@sub) {
1999	my $sys_only = $sub->{id} =~ m/^system:/;
2000	$sub->{allowed} = 1;
2001	if ( $sub->{mode} ) {
2002	$sub->{link} = $app->uri(
2003	mode => $sub->{mode},
2004	args => {
2005	%{ $sub->{args} \|\| {} },
2006	(
2007	$blog_id
2008	&& !$sys_only ? ( blog_id => $blog_id ) : ()
2009	)
2010	}
2011	);
2012	}
2013	$sub->{allowed} = 0
2014	if $sub->{view} && ( $sub->{view} ne $view );
2015	if ( $sub->{allowed} ) {
2016	my $sub_perms =
2017	( $sys_only \|\| ( $sub->{view} \|\| '' ) eq 'system' )
2018	? $app->user->permissions(0)
2019	: $perms;
2020	if (
2021	$sub_perms
2022	&& (
2023	my $p =
2024	$blog_id
2025	? $sub->{permission}
2026	\|\| $sub->{system_permission}
2027	: $sub->{system_permission}
2028	\|\| $sub->{permission}
2029	)
2030	)
2031	{
2032	my $allowed = 0;
2033	my @p = split /,/, $p;
2034	foreach my $p (@p) {
2035	my $perm = 'can_' . $p;
2036	$allowed = 1, last
2037	if ( $sub_perms && $sub_perms->$perm() )
2038	\|\| $admin;
2039	}
2040	$sub->{allowed} = $allowed;
2041	}
2042	elsif ( !$sub_perms && !$blog_id ) {
2043	$sub->{allowed} = 0
2044	if ( $sub->{system_permission} \|\| $sub->{permission} )
2045	&& !$admin;
2046	}
2047	$has_sub = 1 if $sub->{allowed};
2048	}
2049	}
2050	if ( $menu->{mode} ) {
2051	my $sys_only = 1 if $menu->{id} eq 'system';
2052	$menu->{link} = $app->uri(
2053	mode => $menu->{mode},
2054	args => {
2055	%{ $menu->{args} \|\| {} },
2056	(
2057	$blog_id
2058	&& !$sys_only ? ( blog_id => $blog_id ) : ()
2059	)
2060	}
2061	);
2062	}
2063	@sub = sort { $a->{order} <=> $b->{order} } @sub;
2064
2065	@sub = grep { $_->{allowed} } @sub if $hide_disabled_options;
2066	if ( !$menu->{mode} ) {
2067	$menu->{link} = $sub[0]->{link};
2068	}
2069	$menu->{sub_nav_loop} = \@sub;
2070
2071	if ( $menu->{allowed} ) {
2072	$menu->{allowed} = 0 unless $has_sub;
2073	}
2074	}
2075	}
2076
2077	@top = grep { $_->{allowed} } @top if $hide_disabled_options;
2078	@sys = grep { $_->{allowed} } @sys if $hide_disabled_options;
2079	@top = sort { $a->{order} <=> $b->{order} } @top;
2080	$param->{top_nav_loop} = \@top;
2081	$param->{sys_nav_loop} = \@sys;
2082	}
2083
2084	sub return_to_dashboard {
2085	my $app = shift;
2086	my (%param) = @_;
2087	$param{redirect} = 1 unless %param;
2088	my $blog_id = $app->param('blog_id');
2089	$param{blog_id} = $blog_id if $blog_id;
2090	return $app->redirect( $app->uri( mode => 'dashboard', args => \%param ) );
2091	}
2092
2093	sub list_pref {
2094	my $app = shift;
2095	my ($list) = @_;
2096	my $updating = $app->mode eq 'update_list_prefs';
2097	unless ($updating) {
2098	my $pref = $app->request("list_pref_$list");
2099	return $pref if defined $pref;
2100	}
2101
2102	my $cookie = $app->cookie_val('mt_list_pref') \|\| '';
2103	my $mode = $app->mode;
2104
2105	# defaults:
2106	my $d = $app->config->DefaultListPrefs \|\| {};
2107	my %default = (
2108	Rows => 25,
2109	Format => 'Compact',
2110	SortOrder => 'Ascend', # Ascend\|Descend
2111	Button => 'Above', # Above\|Below\|Both
2112	DateFormat => 'Relative', # Relative\|Full
2113	);
2114	if ( ( $list eq 'comment' ) \|\| ( $list eq 'ping' ) ) {
2115	$default{Format} = 'expanded';
2116	}
2117	$default{$_} = lc( $d->{$_} ) for keys %$d;
2118	my $list_pref;
2119	if ( $list eq 'main_menu' ) {
2120	$list_pref = {
2121	'sort' => 'name',
2122	order => $default{SortOrder} \|\| 'ascend',
2123	view => $default{Format} \|\| 'compact',
2124	dates => $default{DateFormat} \|\| 'relative',
2125	};
2126	}
2127	else {
2128	$list_pref = {
2129	rows => $default{Rows} \|\| 25,
2130	view => $default{Format} \|\| 'compact',
2131	bar => $default{Button} \|\| 'above',
2132	dates => $default{DateFormat} \|\| 'relative',
2133	};
2134	}
2135	my @list_prefs = split /;/, $cookie;
2136	my $new_cookie = '';
2137	foreach my $pref (@list_prefs) {
2138	my ( $name, $prefs ) = $pref =~ m/^(\w+):(.*)$/;
2139	next unless $name && $prefs;
2140	if ( $name eq $list ) {
2141	my @prefs = split /,/, $prefs;
2142	foreach (@prefs) {
2143	my ( $k, $v ) = split /=/;
2144	$list_pref->{$k} = $v if exists $list_pref->{$k};
2145	}
2146	}
2147	else {
2148	$new_cookie .= ( $new_cookie ne '' ? ';' : '' ) . $pref;
2149	}
2150	}
2151
2152	if ($updating) {
2153	my $updated = 0;
2154	if ( my $limit = $app->param('limit') ) {
2155	$limit = 20 if $limit eq 'none';
2156	$list_pref->{rows} = $limit > 0 ? $limit : 20;
2157	$updated = 1;
2158	}
2159	if ( my $view = $app->param('verbosity') ) {
2160	if ( $view =~ m!^compact\|expanded$! ) {
2161	$list_pref->{view} = $view;
2162	$updated = 1;
2163	}
2164	}
2165	if ( my $bar = $app->param('actions') ) {
2166	if ( $bar =~ m!^above\|below\|both$! ) {
2167	$list_pref->{bar} = $bar;
2168	$updated = 1;
2169	}
2170	}
2171	if ( my $ord = $app->param('order') ) {
2172	if ( $ord =~ m!^ascend\|descend$! ) {
2173	$list_pref->{order} = $ord;
2174	$updated = 1;
2175	}
2176	}
2177	if ( my $sort = $app->param('sort') ) {
2178	if ( $sort =~ m!^name\|created\|updated$! ) {
2179	$list_pref->{'sort'} = $sort;
2180	$updated = 1;
2181	}
2182	}
2183	if ( my $dates = $app->param('dates') ) {
2184	if ( $dates =~ m!^relative\|full$! ) {
2185	$list_pref->{'dates'} = $dates;
2186	$updated = 1;
2187	}
2188	}
2189
2190	if ($updated) {
2191	my @list_prefs;
2192	foreach ( keys %$list_pref ) {
2193	push @list_prefs, $_ . '=' . $list_pref->{$_};
2194	}
2195	my $prefs = join ',', @list_prefs;
2196	$new_cookie .=
2197	( $new_cookie ne '' ? ';' : '' ) . $list . ':' . $prefs;
2198	$app->bake_cookie(
2199	-name => 'mt_list_pref',
2200	-value => $new_cookie,
2201	-expires => '+10y'
2202	);
2203	}
2204	}
2205
2206	if ( $list_pref->{rows} ) {
2207	$list_pref->{ "limit_" . $list_pref->{rows} } = $list_pref->{rows};
2208	}
2209	if ( $list_pref->{view} ) {
2210	$list_pref->{ "view_" . $list_pref->{view} } = 1;
2211	}
2212	if ( $list_pref->{dates} ) {
2213	$list_pref->{ "dates_" . $list_pref->{dates} } = 1;
2214	}
2215	if ( $list_pref->{bar} ) {
2216	if ( lc $list_pref->{bar} eq 'both' ) {
2217	$list_pref->{"position_actions_both"} = 1;
2218	$list_pref->{"position_actions_top"} = 1;
2219	$list_pref->{"position_actions_bottom"} = 1;
2220	}
2221	elsif ( lc $list_pref->{bar} eq 'below' ) {
2222	$list_pref->{"position_actions_bottom"} = 1;
2223	}
2224	elsif ( lc $list_pref->{bar} eq 'above' ) {
2225	$list_pref->{"position_actions_top"} = 1;
2226	}
2227	}
2228	if ( $list_pref->{'sort'} ) {
2229	$list_pref->{ 'sort_' . $list_pref->{'sort'} } = 1;
2230	}
2231	if ( $list_pref->{'order'} ) {
2232	$list_pref->{ 'order_' . $list_pref->{'order'} } = 1;
2233	}
2234	$app->request( "list_pref_$list", $list_pref );
2235	}
2236
2237	sub make_feed_link {
2238	my $app = shift;
2239	my ( $view, $params ) = @_;
2240	my $user = $app->user;
2241	return if ( $user->api_password \|\| '' ) eq '';
2242
2243	$params \|\|= {};
2244	$params->{view} = $view;
2245	$params->{username} = $user->name;
2246	$params->{token} = perl_sha1_digest_hex( 'feed:' . $user->api_password );
2247	$app->base
2248	. $app->mt_path
2249	. $app->config('ActivityFeedScript')
2250	. $app->uri_params( args => $params );
2251	}
2252
2253	sub show_error {
2254	my $app = shift;
2255	my ($param) = @_;
2256
2257	# handle legacy scalar error string signature
2258	$param = { error => $param } unless ref($param) eq 'HASH';
2259
2260	my $mode = $app->mode;
2261	if ( $mode eq 'rebuild' ) {
2262
2263	my $r = MT::Request->instance;
2264	if (my $tmpl = $r->cache('build_template')) {
2265	# this is the template that likely caused the rebuild error
2266	push @{ $param->{button_loop} \|\|= [] }, {
2267	link => $app->uri( mode => 'view', args => { blog_id => $tmpl->blog_id, '_type' => 'template', id => $tmpl->id }),
2268	label => $app->translate("Edit Template"),
2269	};
2270	}
2271
2272	my $blog_id = $app->param('blog_id');
2273	my $url = $app->uri(
2274	mode => 'rebuild_confirm',
2275	args => { blog_id => $blog_id }
2276	);
2277	$param->{goback} \|\|= qq{window.location='$url'};
2278	$param->{value} \|\|= $app->translate('Go Back');
2279	}
2280
2281	return $app->SUPER::show_error($param);
2282	}
2283
2284	sub load_default_entry_prefs {
2285	my $app = shift;
2286	my $prefs;
2287	require MT::Permission;
2288	my $blog_id;
2289	$blog_id = $app->blog->id if $app->blog;
2290	my $perm = MT::Permission->load( { blog_id => $blog_id, author_id => 0 } );
2291	my %default = %{ $app->config->DefaultEntryPrefs };
2292	if ( $perm && $perm->entry_prefs ) {
2293	$prefs = $perm->entry_prefs;
2294	}
2295	else {
2296	my %default = %{ $app->config->DefaultEntryPrefs };
2297	if ( lc( $default{type} ) ne 'default' ) {
2298	$prefs = 'Advanced';
2299	}
2300	elsif ( lc( $default{type} ) eq 'custom' ) {
2301	my %map = (
2302	Category => 'category',
2303	Excerpt => 'excerpt',
2304	Keywords => 'keywords',
2305	Tags => 'tags',
2306	Publishing => 'publishing',
2307	Feedback => 'feedback',
2308	);
2309	my @p;
2310	foreach my $p ( keys %map ) {
2311	push @p, $map{$p} . ':' . ( $default{$p} \|\| $default{ lc $p } )
2312	if ( $default{$p} \|\| $default{ lc $p } );
2313	}
2314	$prefs = join ',', @p;
2315	$prefs \|\|= 'Custom';
2316	}
2317	$default{button} = 'Bottom' if lc( $default{button} ) eq 'below';
2318	$default{button} = 'Top' if lc( $default{button} ) eq 'above';
2319	$prefs .= '\|' . $default{button} if $prefs;
2320	}
2321	$prefs \|\|= 'Default\|Bottom';
2322	return $prefs;
2323	}
2324
2325	sub load_template_prefs {
2326	my $app = shift;
2327	my ($prefs) = @_;
2328	my %param;
2329
2330	if ( !$prefs ) {
2331	$prefs = '';
2332	}
2333	my @p = split /,/, $prefs;
2334	for my $p (@p) {
2335	if ( $p =~ m/^(.+?):(\d+)$/ ) {
2336	$param{ 'disp_prefs_height_' . $1 } = $2;
2337	}
2338	}
2339	\%param;
2340	}
2341
2342	sub _parse_entry_prefs {
2343	my $app = shift;
2344	my ( $prefs, $param ) = @_;
2345
2346	my @p = split /,/, $prefs;
2347	for my $p (@p) {
2348	if ( $p =~ m/^(.+?):(\d+)$/ ) {
2349	my ( $name, $num ) = ( $1, $2 );
2350	if ($num) {
2351	$param->{ 'disp_prefs_height_' . $name } = $num;
2352	}
2353	$param->{ 'disp_prefs_show_' . $name } = 1;
2354	}
2355	else {
2356	$p = 'Default' if lc($p) eq 'basic';
2357	if ( ( lc($p) eq 'advanced' ) \|\| ( lc($p) eq 'default' ) ) {
2358	$param->{ 'disp_prefs_' . $p } = 1;
2359	foreach my $def (
2360	qw(title body category tags keywords feedback publishing ))
2361	{
2362	$param->{ 'disp_prefs_show_' . $def } = 1;
2363	}
2364	if ( lc($p) eq 'advanced' ) {
2365	foreach my $def (qw(excerpt feedback)) {
2366	$param->{ 'disp_prefs_show_' . $def } = 1;
2367	}
2368	}
2369	}
2370	else {
2371	$param->{ 'disp_prefs_show_' . $p } = 1;
2372	}
2373	}
2374	}
2375	}
2376
2377	sub load_entry_prefs {
2378	my $app = shift;
2379	my ($prefs) = @_;
2380	my %param;
2381	my $pos;
2382	my $is_from_db = 1;
2383
2384	# defaults:
2385	if ( !$prefs ) {
2386	$prefs = $app->load_default_entry_prefs;
2387	( $prefs, $pos ) = split /\\|/, $prefs;
2388	$is_from_db = 0;
2389	$app->_parse_entry_prefs( $prefs, \%param );
2390	my @fields;
2391	foreach ( keys %param ) {
2392	if (m/^disp_prefs_show_(.+)/) {
2393	push @fields, { name => $1 };
2394	}
2395	}
2396	$param{disp_prefs_default_fields} = \@fields;
2397	}
2398	else {
2399	( $prefs, $pos ) = split /\\|/, $prefs;
2400	}
2401	$app->_parse_entry_prefs( $prefs, \%param );
2402	if ($is_from_db) {
2403	my $default_prefs = $app->load_default_entry_prefs;
2404	( $default_prefs, my ($default_pos) ) = split /\\|/, $default_prefs;
2405	$pos \|\|= $default_pos;
2406	$app->_parse_entry_prefs( $default_prefs, \my %def_param );
2407	my @fields;
2408	foreach ( keys %def_param ) {
2409	if (m/^disp_prefs_show_(.+)/) {
2410	push @fields, { name => $1 };
2411	}
2412	}
2413	if ( $prefs eq 'Default' ) {
2414	foreach my $p ( keys %param ) {
2415	delete $param{$p} if $p =~ m/^disp_prefs_show_/;
2416	}
2417	}
2418	if ( $param{disp_prefs_Default} ) {
2419
2420	# apply default settings
2421	%param = ( %def_param, %param );
2422	}
2423	$param{disp_prefs_default_fields} = \@fields;
2424	}
2425	$pos \|\|= 'Bottom';
2426	if ( !exists $param{'disp_prefs_Default'}
2427	&& !exists $param{'disp_prefs_Advanced'} )
2428	{
2429	$param{'disp_prefs_Custom'} = 1;
2430	}
2431	if ( lc $pos eq 'both' ) {
2432	$param{'position_actions_top'} = 1;
2433	$param{'position_actions_bottom'} = 1;
2434	$param{'position_actions_both'} = 1;
2435	}
2436	else {
2437	$param{ 'position_actions_' . $pos } = 1;
2438	}
2439	\%param;
2440	}
2441
2442	sub _convert_word_chars {
2443	my ( $app, $s ) = @_;
2444	return '' unless $s;
2445	return $s if 'utf-8' ne lc( $app->charset );
2446
2447	my $blog = $app->blog;
2448	my $smart_replace = $blog ? $blog->smart_replace
2449	: MT->config->NwcSmartReplace;
2450	return $s if $smart_replace == 2;
2451
2452	if ($smart_replace) {
2453
2454	# html character entity replacements
2455	$s =~ s/\342\200\231/’/g;
2456	$s =~ s/\342\200\230/‘/g;
2457	$s =~ s/\342\200\246//g;
2458	$s =~ s/\342\200\223/-/g;
2459	$s =~ s/\342\200\224/—/g;
2460	$s =~ s/\342\200\234/“/g;
2461	$s =~ s/\342\200\235/”/g;
2462	}
2463	else {
2464
2465	# ascii equivalent replacements
2466	$s =~ s/\342\200[\230\231]/'/g;
2467	$s =~ s/\342\200\246/.../g;
2468	$s =~ s/\342\200\223/-/g;
2469	$s =~ s/\342\200\224/--/g;
2470	$s =~ s/\342\200[\234\235]/"/g;
2471	}
2472
2473	# While we're fixing Word, remove processing instructions with
2474	# colons, as they can break PHP.
2475	$s =~ s{ <\? xml:namespace [^>]*> }{}xmsg;
2476
2477	$s;
2478	}
2479
2480	sub _translate_naughty_words {
2481	my $app = shift;
2482	my ($entry) = @_;
2483	my $blog = $app->blog;
2484	return if $blog->smart_replace == 2;
2485
2486	my $fields = $blog->smart_replace_fields;
2487	return unless $fields;
2488
2489	my @fields = split( /\s,\s/, $fields \|\| '' );
2490	foreach my $field (@fields) {
2491	if ( $entry->can($field) ) {
2492	$entry->$field( _convert_word_chars( $app, $entry->$field ) );
2493	}
2494	}
2495	}
2496
2497	sub autosave_session_obj {
2498	my $app = shift;
2499	my ($or_make_one) = @_;
2500	my $q = $app->param;
2501	my $type = $q->param('_type');
2502	return unless $type;
2503	my $id = $q->param('id');
2504	$id = '0' unless $id;
2505	my $ident =
2506	'autosave' . ':user=' . $app->user->id . ':type=' . $type . ':id=' . $id;
2507
2508	if ( my $blog = $app->blog ) {
2509	$ident .= ':blog_id=' . $blog->id;
2510	}
2511	require MT::Session;
2512	my $sess_obj = MT::Session->load( { id => $ident, kind => 'AS' } );
2513
2514	if ( !$sess_obj && $or_make_one ) {
2515
2516	# autosave is being requested, so provision an object for saving
2517	$sess_obj = new MT::Session;
2518	$sess_obj->kind('AS'); # AutoSave record
2519	$sess_obj->id($ident);
2520	$sess_obj->start(time);
2521	}
2522	return $sess_obj;
2523	}
2524
2525	sub autosave_object {
2526	my $app = shift;
2527	my $sess_obj = $app->autosave_session_obj(1) or return;
2528	$sess_obj->data('');
2529	my $class = $app->model( $app->param('_type') ) or return;
2530	my %data = $app->param_hash;
2531	delete $data{_autosave};
2532	delete $data{magic_token};
2533
2534	# my $col_names = $class->column_names;
2535	# foreach my $c (@$col_names) {
2536	foreach my $c ( keys %data ) {
2537	$sess_obj->set( $c, $data{$c} );
2538	}
2539	$sess_obj->start(time);
2540	$sess_obj->save;
2541	$app->send_http_header("text/javascript+json");
2542	$app->{no_print_body} = 1;
2543	require JSON;
2544	$app->print("true");
2545	}
2546
2547	sub model {
2548	my $app = shift;
2549	my ($type) = @_;
2550	my $class = $app->SUPER::model($type)
2551	or return $app->error(
2552	$app->translate