kiskolabs / splendidbacon

Project Management for hackers

Splendid Bacon

Project Management* for hackers

• http://blog.kiskolabs.com/post/24195529239/open-source-bacon
• http://blog.kiskolabs.com/post/20108267834/the-regrettable-end-of-splendid-bacon

Caveats

There are a few issues that should be fixed before taking this into production use:

• Fix the mass assignment vulnerabilities (this is the most important thing)
  • config.active_record.mass_assignment_sanitizer = :strict
  • config.active_record.whitelist_attributes = true

Note: Any API keys included in the source code have been revoked and cannot be used.

Installation (for development)

1. Clone the repository

   git clone [email protected]:kiskolabs/splendidbacon.git

2. Check that you have the right ruby version (> 1.9.2)

3. Install the required gems

   bundle install

   in development you might want to also pass --without production

4. Create database.yml in the config folder. You can cp config/database.example.yml config/database.yml to get a starting point.

5. Create the .env file. You can cp sample.env .env to get a starting point.

6. Setup the database (create DB, load schema, load seed data)

   rake db:setup

7. Start the app

   foreman start

The admin console is located at http://localhost:5000/magic

NB. The session secret must be set as an environment variable called SECRET_TOKEN.

You can generate a new secret with rake secret.

On Heroku, you can set the session secret with this one-liner:

heroku config:add SECRET_TOKEN=\`rake secret`

Foreman is included to make managing environment variables easier in development. Include any environment variables you need in a .env file (see sample.env as a reference).

Tests

Run the test suite with:

bundle exec rake spec

Or:

bundle exec rspec spec

License and Copyright

Copyright © 2010-2012 Kisko Labs & contributors.

Licensed under the MIT license. See the LICENSE file for the full license text.

splendidbacon's Issues

(Super) Admin interface

In a separate namespace, for Kisko internal use.

Possible features:

• Stats (number of users, orgs, demo users, etc...)
• The possibility to add news or messages to the SB frontpage?
• Possibility to show a message to all users? (Maybe a bit like GitHub broadcasts?)

Timezone support

Figure out a good way of doing timezones

Default admin user/pass

What is the default admin user/password on a fresh install of splendid bacon?
I opened the sqlite database and the admin table is empty?
Is there a sererate process to create a user with admin rights?

Status notifications are also sent to the creator

If you have subscribed to a project and create a status comment you too get an email notification

Delete project link/button

It should probably be possible to delete projects.

Server migration

Migrate the Linode to the Newark datacenter.

Probably best to do a bunch of change at the same time (i.e. move to Passenger 3 and Postgresql at the same time).

1. Create new Linode in the Newark datacenter and set it up with Postgres, Nginx, Passenger, etc...
2. Migrate the data from the old Linode to the new one
3. Set up redirects from the old server to the new one
4. Shut down the old server after a few days (to make sure that everyone's DNS records have time to get updated)

Formating for statuses

URLs in status links should be wrapped with link tags, so that you don't have to copy and paste links into your address bar. Great work, thanks!

=> use auto_link for status comments

We are catching all left/right clicks

We capture all left and right clicks. This brakes changing tabs with shortcuts including left or right arrow. I think we can just let the event bubble and it's all OK.

I'll fix this tomorrow.

Formatting issue

You have been assigned to this ticket (#33).

To review the status of the ticket and add updates, follow the link below:
http://splendidbacon.zendesk.com/tickets/33

konkas, May-25 03:14 (EEST):
When I post an update, it doesn't respect a double space/double intro.

"This

sentence"

turns into

"This
sentence"

Cheers!

Remove "Login" button from sign in page

Admin password resets are broken

Fix them...

Footer

We should have some kind of footer with instructions how to get in touch with us @splendidbacon in twitter [email protected]

Demo improvements and clarifications

Show a big notice when in demo mode ("You will lose all the changes you make")

Don't allow invitations!

Guest/Customer view

Small problem in project show

...
see video with voice over

http://screencast.com/t/uph6XwwD

May be a bug, expected behaviour or whatever
but didnt respond as I would have expeted

Alec

Use God to make sure resque is running

Do as the title says.

Filters

Filter by user, project status, etc in dashboard and timeline view.

Zendesk remote authentication

http://www.zendesk.com/api/remote-authentication

Sorting doesn't work on Windows

Client reported the following problem:
http://www.screencast.com/users/clickspice/folders/Jing/media/956985df-35ed-4db4-ba76-a8b7a61e1706

Exception Notifier

We should have some kind of exception notifier in use

Small ui tweak

"I noticed a positioning bug and as graphic designer I made a mockup if you want to consider :)"

https://skitch.com/akonan/r6s16/https-splendidbacon.zendesk.com-attachments-token-ltyvidrfcfsitpf-name-position-tweak.jpg

https://skitch.com/akonan/r6sun/https-splendidbacon.zendesk.com-attachments-token-5seks7lwtyie621-name-redesign-proposal.png

Secure Cookies via Rack SSL middleware

https://github.com/josh/rack-ssl

Tutorial: http://collectiveidea.com/blog/archives/2010/11/29/ssl-with-rails/

Bug in status messages

From Zendesk:
When you update a project with a www.link.com it shows the source code instead the link, like <a href="http://www.link…

Token resets broken

Joseph Weissman, May-22 20:30 (EEST):
That error's a 404 when I hit this URL: https://splendidbacon.com/users/reset_authentication_token

Joseph Weissman, May-22 20:28 (EEST):
Please advise. Was trying to get setup so I can see my commit messages from github, but the API token seems empty. Hadn't dug too deeply, but it threw some kind of error when I following the "reset token" link. Thanks.

MailChimp API integration

Remove/add people from the mailing list when they create/delete their accounts.

Maybe add a "Subscribe to Newsletter" type option to user profiles?

Some fucker has problems with user deletion

"We are unable to delete users from our account. Every time we try we get booted from the system and are forced to login again."

GitHub Issues integration

Have the latest updated/created issues in the activity feed.

Organization dropdown has a bug

"When I add another organization, the name appears as duplicate of another existing one on the top left corner.
The bug only appears when i'm inside the new organization."

https://skitch.com/akonan/r6s1s/fa8i9kuh9jyx7fm-1280x800

Rethink the built by line on the homepage

Uploaded with Skitch!

Maybe it should be built by Kisko Labs, and maybe we should link to the Kisko blog/twitter account and/or SB twitter account?

SSL support

Use SSL for login and preferably all other actions too... Otherwise Firesheep will steal your sessions...

Email notifications

I should be able to subscribe to email notifications for projects.

Completed status for projects

Apparently some people don't want to just delete completed projects.

Last activity doesn't work

Status updates are not updating last activity

Mobile optimized interface

jQuery Mobile! http://jquerymobile.com/

Who cares if it's alpha?

Lighthouse integration

Lighthouse tickets in the activity feed

Pivotal Tracker integration

Recurly integration

Write the necessary stuff to accept payments!

And we need to decide which we'll go for:

• Hosted Pages, or
• Full integration with API/Client Libraries

http://docs.recurly.com/getting-started/quick-start-guide