Merge branch 'hotfix/4.2.2' of ssh://172.20.0.1/var/git/espo/backend into hotfix/4.2.2

LDAP: label corrections
LDAP improvements: added possibility to define user objectClass
2016-08-15 15:51:40 +03:00 · 2016-08-15 15:51:10 +03:00 · 2016-08-15 15:47:25 +03:00 · 2016-08-15 11:08:45 +03:00 · 2016-08-15 10:50:10 +03:00 · 2016-08-12 12:51:02 +03:00
4928 changed files with 194106 additions and 299732 deletions
@@ -2,16 +2,19 @@
 /data/cache/*
 /data/upload/*
 /data/preferences/*
+/data/.backup/*
 /data/config.php
-/custom
-/application/Espo/Resources/metadata/scopes/CustomTest.json
-/application/Espo/Modules/Crm/Resources/metadata/scopes/CustomTest.json
-/application/Espo/Resources/layouts/CustomTest/*
-/application/Espo/Modules/Crm/Resources/layouts/CustomTest/*
-/application/Espo/Resources/metadata/customTest/*
-/application/Espo/Modules/Crm/Resources/metadata/customTest/*
 /build
 /node_modules
-/client
 /test.php
 /main.html
+/client/css/espo.css
+/client/css/espo-vertical.css
+/client/css/sakura.css
+/client/css/sakura-vertical.css
+/client/css/violet.css
+/client/css/violet-vertical.css
+/tests/testData/cache/*
+composer.phar
+vendor/
+/custom/Espo/Custom/*
@@ -1,10 +1,27 @@
+<ifModule mod_headers.c>
+  Header always set Access-Control-Allow-Methods "POST, GET, PUT, PATCH, DELETE"
+</ifModule>
+
 DirectoryIndex index.php index.html

-RedirectMatch 403 \.config$
-
 <IfModule mod_rewrite.c>
-RewriteEngine On
-RewriteRule .* - [E=HTTP_ESPO_CGI_AUTH:%{HTTP:Authorization}]
+  RewriteEngine On

-RewriteRule reset/?$ reset.html [QSA,L]
+  # PROTECTED DIRECTORIES
+  RewriteCond %{REQUEST_FILENAME} -d
+  RewriteRule ^/?(data|api)/ - [F]
+
+  RewriteRule ^/?data/config\.php$ - [F]
+  RewriteRule ^/?data/logs/ - [F]
+  RewriteRule ^/?data/cache/ - [F]
+  RewriteRule ^/?data/upload/ - [F]
+  RewriteRule ^/?data/\.backup/ - [F]
+  RewriteRule ^/?application/ - [F]
+  RewriteRule ^/?custom/ - [F]
+  RewriteRule ^/?vendor/ - [F]
+  #END PROTECTED DIRECTORIES
+
+  RewriteRule .* - [E=HTTP_ESPO_CGI_AUTH:%{HTTP:Authorization}]
+
+  RewriteRule reset/?$ reset.html [QSA,L]
 </IfModule>
@@ -0,0 +1,3 @@
+Before we can merge your pull request you need to accept our CLA [here](https://github.com/espocrm/cla). It's very simple to do.
+
+[Code Style Guidelines](https://github.com/espocrm/espocrm/wiki/Code-Style-Guidelines).
@@ -1,247 +1,302 @@
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ ************************************************************************/
 module.exports = function (grunt) {
-	
-	grunt.initConfig({
-		pkg: grunt.file.readJSON('package.json'),
-		
-		mkdir: {
-			tmp: {
-				options: {
-					mode: 0775,
-					create: [
-						'build/tmp',
-					]
-				},

-			}
-		},
-		clean: {
-			start: ['build/*'],
-			final: ['build/tmp'],
-		},
-		less: {
-			bootstrap: {
-				options: {
-					yuicompress: true,
-				},
-				files: {
-					'frontend/client/css/bootstrap.css': 'frontend/less/espo/main.less',
-				},
-			},
-		},
-		cssmin: {
-			minify: {
-				files: {
-					'build/tmp/client/css/espo.min.css': [
-						'frontend/client/css/bootstrap.css',
-						'frontend/client/css/datepicker.css',
-						'frontend/client/css/jquery.timepicker.css',
-					]
-				}
-			},
-		},
-		uglify: {
-			options: {
-				mangle: false,
-				banner: '/*! <%= pkg.name %> <%= grunt.template.today("yyyy-mm-dd") %> */\n',
-			},
-			'build/tmp/client/espo.min.js': [
-					'frontend/client/lib/jquery-2.0.2.min.js',
-					'frontend/client/lib/underscore-min.js',
-					'frontend/client/lib/backbone-min.js',
-					'frontend/client/lib/handlebars.js',
-					'frontend/client/lib/base64.js',
-					'frontend/client/lib/jquery-ui.min.js',
-					'frontend/client/lib/moment.min.js',
-					'frontend/client/lib/moment-timezone.min.js',
-					'frontend/client/lib/moment-timezone-data.js',
-					'frontend/client/lib/jquery.timepicker.min.js',
-					'frontend/client/lib/jquery.autocomplete.js',
-					'frontend/client/lib/bootstrap.min.js',
-					'frontend/client/lib/bootstrap-datepicker.js',
-					'frontend/client/lib/bull.min.js',					
-					'frontend/client/src/namespace.js',
-					'frontend/client/src/exceptions.js',
-					'frontend/client/src/app.js',
-					'frontend/client/src/utils.js',
-					'frontend/client/src/storage.js',
-					'frontend/client/src/loader.js',
-					'frontend/client/src/pre-loader.js',
-					'frontend/client/src/ui.js',
-					'frontend/client/src/acl.js',
-					'frontend/client/src/model.js',
-					'frontend/client/src/model-offline.js',
-					'frontend/client/src/metadata.js',
-					'frontend/client/src/language.js',
-					'frontend/client/src/cache.js',
-					'frontend/client/src/controller.js',
-					'frontend/client/src/router.js',
-					'frontend/client/src/date-time.js',
-					'frontend/client/src/field-manager.js',
-					'frontend/client/src/search-manager.js',
-					'frontend/client/src/collection.js',
-					'frontend/client/src/multi-collection.js',
-					'frontend/client/src/view-helper.js',
-					'frontend/client/src/layout-manager.js',
-					'frontend/client/src/model-factory.js',
-					'frontend/client/src/collection-factory.js',
-					'frontend/client/src/models/settings.js',
-					'frontend/client/src/models/user.js',
-					'frontend/client/src/models/preferences.js',
-					'frontend/client/src/controllers/base.js',
-					'frontend/client/src/controllers/record.js',
-					'frontend/client/src/controllers/role.js',
-					'frontend/client/src/controllers/admin.js',
-					'frontend/client/src/view.js',
-					'frontend/client/src/views/base.js',
-					'frontend/client/src/views/login.js',
-			]
-		},
-		copy: {
-			frontendFolders: {
-				expand: true,
-				cwd: 'frontend/client',
-				src: [
-					'src/**',
-					'res/**',
-					'fonts/**',
-					'cfg/**',
-					'modules/**',
-					'img/**',
-					'css/**',
-				],
-				dest: 'build/tmp/client',
-			},
-			frontendHtml: {
-				src: 'frontend/html/reset.html',
-				dest: 'build/tmp/reset.html'
-			},
-			frontendLib: {
-				expand: true,
-				dot: true,
-				cwd: 'frontend/client/lib',
-				src: '**',
-				dest: 'build/tmp/client/lib/',
-			},			
-			backend: {
-				expand: true,
-				dot: true,
-				src: [
-					'api/**',
-					'application/**',
-					'custom/**',
-					'data/.data',
-					'install/**',
-					'vendor/**',
-					'bootstrap.php',
-					'cron.php',
-					'rebuild.php',
-					'index.php',
-					'LICENSE.txt',
-					'.htaccess',
-					'Web.config',
-				],
-				dest: 'build/tmp/',
-			},
-			final: {
-				expand: true,
-				dot: true,
-				src: '**',
-				cwd: 'build/tmp',
-				dest: 'build/EspoCRM-<%= pkg.version %>/',
-			},
-		},
-		chmod: {
-			options: {
-				mode: '755'
-			},
-			php: {			
-				options: {
-					mode: '644'
-				},
-				src: [
-					'build/EspoCRM-<%= pkg.version %>/**/*.php',
-					'build/EspoCRM-<%= pkg.version %>/**/*.json',
-					'build/EspoCRM-<%= pkg.version %>/**/*.config',
-					'build/EspoCRM-<%= pkg.version %>/**/.htaccess',					
-					'build/EspoCRM-<%= pkg.version %>/client/**/*.js',
-					'build/EspoCRM-<%= pkg.version %>/client/**/*.css',
-					'build/EspoCRM-<%= pkg.version %>/client/**/*.tpl',
-					'build/EspoCRM-<%= pkg.version %>/**/*.html',
-					'build/EspoCRM-<%= pkg.version %>/**/*.txt',
-				]
-			}
-		},
-		replace: {
-			timestamp: {
-				options: {
-					patterns: [
-						{
-							match: 'timestamp',
-							replacement: '<%= new Date().getTime() %>'
-						}
-					]
-				},
-				files: [
-					{
-						src: 'frontend/html/main.html',
-						dest: 'build/tmp/main.html'
-					}
-				]
-			},
-			version: {
-				options: {
-					patterns: [
-						{
-							match: 'version',
-							replacement: '<%= pkg.version %>'
-						}
-					]
-				},
-				files: [
-					{
-						src: 'build/tmp/application/Espo/Core/defaults/config.php',
-						dest: 'build/tmp/application/Espo/Core/defaults/config.php'
-					}
-				]
-			}
-		},
-		compress: {
-			final: {
-				options: {
-					archive: 'build/EspoCRM-<%= pkg.version %>.zip',
-					mode: 'zip'
-				},
-				src: ['**'],
-				cwd: 'build/EspoCRM-<%= pkg.version %>',
-				dest: 'EspoCRM-<%= pkg.version %>'
-			}
-		}
-	});
+    var jsFilesToMinify = [
+        'client/lib/jquery-2.1.4.min.js',
+        'client/lib/underscore-min.js',
+        'client/lib/es6-promise.min.js',
+        'client/lib/backbone-min.js',
+        'client/lib/handlebars.js',
+        'client/lib/base64.js',
+        'client/lib/jquery-ui.min.js',
+        'client/lib/moment.min.js',
+        'client/lib/moment-timezone-with-data.min.js',
+        'client/lib/jquery.timepicker.min.js',
+        'client/lib/jquery.autocomplete.js',
+        'client/lib/bootstrap.min.js',
+        'client/lib/bootstrap-datepicker.js',
+        'client/lib/bull.js',
+        'client/src/namespace.js',
+        'client/src/exceptions.js',
+        'client/src/loader.js',
+        'client/src/utils.js'
+    ];

-	grunt.loadNpmTasks('grunt-contrib-clean');
-	grunt.loadNpmTasks('grunt-mkdir');
-	grunt.loadNpmTasks('grunt-contrib-less');
-	grunt.loadNpmTasks('grunt-contrib-cssmin');
-	grunt.loadNpmTasks('grunt-contrib-uglify');
-	grunt.loadNpmTasks('grunt-contrib-copy');
-	grunt.loadNpmTasks('grunt-replace');
-	grunt.loadNpmTasks('grunt-contrib-compress');
-	grunt.loadNpmTasks('grunt-chmod');
+    grunt.initConfig({
+        pkg: grunt.file.readJSON('package.json'),

-	grunt.registerTask('default', [
-		'clean:start',
-		'mkdir:tmp',
-		'less',
-		'cssmin',		
-		'uglify',
-		'copy:frontendFolders',
-		'copy:frontendHtml',
-		'copy:frontendLib',
-		'copy:backend',
-		'replace',
-		'copy:final',
-		'chmod',
-		'clean:final',
-	]);		
+        mkdir: {
+            tmp: {
+                options: {
+                    mode: 0755,
+                    create: [
+                        'build/tmp',
+                    ]
+                },
+
+            }
+        },
+        clean: {
+            start: ['build/*'],
+            final: ['build/tmp'],
+        },
+        less: {
+            espo: {
+                options: {
+                    yuicompress: true,
+                },
+                files: {
+                    'client/css/espo.css': 'frontend/less/espo/main.less',
+                }
+            },
+            espoVertical: {
+                options: {
+                    yuicompress: true,
+                },
+                files: {
+                    'client/css/espo-vertical.css': 'frontend/less/espo-vertical/main.less',
+                }
+            },
+            sakura: {
+                options: {
+                    yuicompress: true,
+                },
+                files: {
+                    'client/css/sakura.css': 'frontend/less/sakura/main.less',
+                }
+            },
+            sakuraVertical: {
+                options: {
+                    yuicompress: true,
+                },
+                files: {
+                    'client/css/sakura-vertical.css': 'frontend/less/sakura-vertical/main.less',
+                }
+            },
+            violet: {
+                options: {
+                    yuicompress: true,
+                },
+                files: {
+                    'client/css/violet.css': 'frontend/less/violet/main.less',
+                }
+            },
+            violetVertical: {
+                options: {
+                    yuicompress: true,
+                },
+                files: {
+                    'client/css/violet-vertical.css': 'frontend/less/violet-vertical/main.less',
+                }
+            }
+        },
+        cssmin: {
+            minify: {
+                files: {
+                    'build/tmp/client/css/espo.css': [
+                        'client/css/espo.css',
+                    ]
+                }
+            },
+        },
+        uglify: {
+            options: {
+                mangle: false,
+                banner: '/*! <%= pkg.name %> <%= grunt.template.today("yyyy-mm-dd") %> */\n',
+            },
+            'build/tmp/client/espo.min.js': jsFilesToMinify.map(function (item) {
+                return '' + item;
+            })
+        },
+        copy: {
+            frontendFolders: {
+                expand: true,
+                cwd: 'client',
+                src: [
+                    'src/**',
+                    'res/**',
+                    'fonts/**',
+                    'cfg/**',
+                    'modules/**',
+                    'img/**',
+                    'css/**',
+                    'sounds/**',
+                    'custom/**'
+                ],
+                dest: 'build/tmp/client',
+            },
+            frontendHtml: {
+                src: 'frontend/reset.html',
+                dest: 'build/tmp/reset.html'
+            },
+            frontendLib: {
+                expand: true,
+                dot: true,
+                cwd: 'client/lib',
+                src: '**',
+                dest: 'build/tmp/client/lib/',
+            },
+            backend: {
+                expand: true,
+                dot: true,
+                src: [
+                    'api/**',
+                    'application/**',
+                    'custom/**',
+                    'data/.data',
+                    'install/**',
+                    'portal/**',
+                    'vendor/**',
+                    'html/**',
+                    'bootstrap.php',
+                    'cron.php',
+                    'rebuild.php',
+                    'clear_cache.php',
+                    'upgrade.php',
+                    'extension.php',
+                    'index.php',
+                    'LICENSE.txt',
+                    '.htaccess',
+                    'web.config',
+                ],
+                dest: 'build/tmp/',
+            },
+            final: {
+                expand: true,
+                dot: true,
+                src: '**',
+                cwd: 'build/tmp',
+                dest: 'build/EspoCRM-<%= pkg.version %>/',
+            },
+        },
+        chmod: {
+            options: {
+                mode: '755'
+            },
+            php: {
+                options: {
+                    mode: '644'
+                },
+                src: [
+                    'build/EspoCRM-<%= pkg.version %>/**/*.php',
+                    'build/EspoCRM-<%= pkg.version %>/**/*.json',
+                    'build/EspoCRM-<%= pkg.version %>/**/*.config',
+                    'build/EspoCRM-<%= pkg.version %>/**/.htaccess',
+                    'build/EspoCRM-<%= pkg.version %>/client/**/*.js',
+                    'build/EspoCRM-<%= pkg.version %>/client/**/*.css',
+                    'build/EspoCRM-<%= pkg.version %>/client/**/*.tpl',
+                    'build/EspoCRM-<%= pkg.version %>/**/*.html',
+                    'build/EspoCRM-<%= pkg.version %>/**/*.txt',
+                ]
+            },
+            folders: {
+                options: {
+                    mode: '755'
+                },
+                src: [
+                    'build/EspoCRM-<%= pkg.version %>/install',
+                    'build/EspoCRM-<%= pkg.version %>/portal',
+                    'build/EspoCRM-<%= pkg.version %>/api',
+                    'build/EspoCRM-<%= pkg.version %>/api/v1',
+                    'build/EspoCRM-<%= pkg.version %>/api/v1/portal-access',
+                    'build/EspoCRM-<%= pkg.version %>',
+                ]
+            }
+        },
+        replace: {
+            timestamp: {
+                options: {
+                    patterns: [
+                        {
+                            match: 'timestamp',
+                            replacement: '<%= new Date().getTime() %>'
+                        }
+                    ]
+                },
+                files: [
+                    {
+                        src: 'build/tmp/html/main.html',
+                        dest: 'build/tmp/html/main.html'
+                    },
+                    {
+                        src: 'build/tmp/html/portal.html',
+                        dest: 'build/tmp/html/portal.html'
+                    }
+                ]
+            },
+            version: {
+                options: {
+                    patterns: [
+                        {
+                            match: 'version',
+                            replacement: '<%= pkg.version %>'
+                        }
+                    ]
+                },
+                files: [
+                    {
+                        src: 'build/tmp/application/Espo/Core/defaults/config.php',
+                        dest: 'build/tmp/application/Espo/Core/defaults/config.php'
+                    }
+                ]
+            }
+        },
+        compress: {
+            final: {
+                options: {
+                    archive: 'build/EspoCRM-<%= pkg.version %>.zip',
+                    mode: 'zip'
+                },
+                src: ['**'],
+                cwd: 'build/EspoCRM-<%= pkg.version %>',
+                dest: 'EspoCRM-<%= pkg.version %>'
+            }
+        }
+    });
+
+    grunt.loadNpmTasks('grunt-contrib-clean');
+    grunt.loadNpmTasks('grunt-mkdir');
+    grunt.loadNpmTasks('grunt-contrib-less');
+    grunt.loadNpmTasks('grunt-contrib-cssmin');
+    grunt.loadNpmTasks('grunt-contrib-uglify');
+    grunt.loadNpmTasks('grunt-contrib-copy');
+    grunt.loadNpmTasks('grunt-replace');
+    grunt.loadNpmTasks('grunt-contrib-compress');
+    grunt.loadNpmTasks('grunt-chmod');
+
+    grunt.registerTask('default', [
+        'clean:start',
+        'mkdir:tmp',
+        'less',
+        'cssmin',
+        'uglify',
+        'copy:frontendFolders',
+        'copy:frontendHtml',
+        'copy:frontendLib',
+        'copy:backend',
+        'replace',
+        'copy:final',
+        'chmod',
+        'clean:final',
+    ]);

 };
@@ -631,29 +631,29 @@ to attach them to the start of each source file to most effectively
 state the exclusion of warranty; and each file should have at least
 the "copyright" line and a pointer to where the full notice is found.

-    EspoCRM - Open Source CRM
-    Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>

-    EspoCRM is free software: you can redistribute it and/or modify
+    This program is free software: you can redistribute it and/or modify
    it under the terms of the GNU General Public License as published by
    the Free Software Foundation, either version 3 of the License, or
    (at your option) any later version.

-    EspoCRM is distributed in the hope that it will be useful,
+    This program is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    GNU General Public License for more details.

    You should have received a copy of the GNU General Public License
-    along with EspoCRM.  If not, see <http://www.gnu.org/licenses/>.
+    along with this program.  If not, see <http://www.gnu.org/licenses/>.

 Also add information on how to contact you by electronic and paper mail.

  If the program does terminal interaction, make it output a short
 notice like this when it starts in an interactive mode:

-    EspoCRM  Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
-    EspoCRM comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
+    <program>  Copyright (C) <year>  <name of author>
+    This program comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
    This is free software, and you are welcome to redistribute it
    under certain conditions; type `show c' for details.

@@ -0,0 +1,65 @@
+## EspoCRM
+
+<a href='http://www.espocrm.com'>EspoCRM is an Open Source CRM</a> (Customer Relationship Management) software that allows you to see, enter and evaluate all your company relationships regardless of the type. People, companies or opportunities - all in an easy and intuitive interface.
+
+It's a web application with a frontend designed as a single page application based on backbone.js and a REST API backend written in PHP.
+
+Download the latest release from our [website](http://www.espocrm.com).
+
+### Requirements
+
+* PHP 5.4 or above (with pdo, json, gd, mcrypt extensions);
+* MySQL 5.1 or above.
+
+For more information about server configuration see [this article](http://blog.espocrm.com/administration/server-configuration-for-espocrm/).
+
+### How to report bug
+
+Create an issue [here](https://github.com/espocrm/espocrm/issues) or post on our [forum](http://forum.espocrm.com/bug-reports?routestring=forum/bug-reports).
+
+### How to get started (for developers)
+
+1. Clone repository to your local computer.
+2. Change to the project's root directory.
+3. Install [composer](https://getcomposer.org/doc/00-intro.md).
+4. Run `composer install` if composer is installed globally or `php composer.phar install` if locally.
+
+Never update composer dependencies if you are going to contribute code back.
+
+Now you can build. Build will create compiled css files.
+
+To compose a proper config.php and populate database you can run install by opening `http(s)://{YOUR_CRM_URL}/install` location in a browser. Then open `data/config.php` file and add `isDeveloperMode => true`.
+
+### How to build
+
+You need to have nodejs and Grunt CLI installed.
+
+1. Change to the project's root directory.
+2. Install project dependencies with `npm install`.
+3. Run Grunt with `grunt`.
+
+The build will be created in the `build` directory.
+
+### How to contribute
+
+Before we can merge your pull request you need to accept our CLA [here](https://github.com/espocrm/cla). It's very simple to do.
+
+### How to make a translation
+
+Build po file with command:
+`node po.js en_EN`
+(specify needed language instead of en_EN)
+
+After that translate the generated po file.
+
+Build json files from the translated po file:
+
+1. Put your po file espocrm-en_EN.po into `build` directory
+2. Run `node lang.js en_EN`
+
+Json files will be created in build directory grouped by folders.
+
+### License
+
+EspoCRM is published under the GNU GPLv3 [license](https://raw.githubusercontent.com/espocrm/espocrm/master/LICENSE.txt).
+
@@ -1,22 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<configuration>
-
-    <system.webServer>
-        <rewrite>
-            <rules>
-                <rule name="rule 1X" stopProcessing="true">
-                    <match url="reset/?$"  />
-                    <action type="Rewrite" url="reset.html"  appendQueryString="true" />
-                </rule>
-            </rules>
-        </rewrite>
-
-        <defaultDocument>
-            <files>
-                <clear />
-                <add value="index.php" />
-            </files>
-        </defaultDocument>
-    </system.webServer>
-
-</configuration>
@@ -1,4 +1,31 @@
-<?php
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/

 require_once('../../bootstrap.php');

@@ -0,0 +1,12 @@
+RewriteEngine On
+
+# Some hosts may require you to use the `RewriteBase` directive.
+# If you need to use the `RewriteBase` directive, it should be the
+# absolute physical path to the directory that contains this htaccess file.
+#
+# RewriteBase /
+
+RewriteRule .* - [E=HTTP_ESPO_CGI_AUTH:%{HTTP:Authorization}]
+
+RewriteCond %{REQUEST_FILENAME} !-f
+RewriteRule ^ index.php [QSA,L]
@@ -0,0 +1,39 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+require_once('../../../bootstrap.php');
+
+if (!empty($_GET['portalId'])) {
+    $portalId = $_GET['portalId'];
+} else {
+    $portalId = explode('/', $_SERVER['REQUEST_URI'])[count(explode('/', $_SERVER['SCRIPT_NAME'])) - 1];
+}
+
+$app = new \Espo\Core\Portal\Application($portalId);
+$app->run();
@@ -0,0 +1,15 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<configuration>
+
+    <system.webServer>
+        <rewrite>
+            <rules>
+                <rule name="rule 1G" stopProcessing="true">
+                    <match url="^"  />
+                    <action type="Rewrite" url="index.php"  appendQueryString="true" />
+				</rule>
+            </rules>
+        </rewrite>
+    </system.webServer>
+
+</configuration>
@@ -1,2 +0,0 @@
-Order Deny,Allow
-Deny from all
@@ -0,0 +1,93 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Acl;
+
+use \Espo\Entities\User as EntityUser;
+use \Espo\ORM\Entity;
+
+class Attachment extends \Espo\Core\Acl\Base
+{
+    public function checkEntityRead(EntityUser $user, Entity $entity, $data)
+    {
+        if ($user->isAdmin()) {
+            return true;
+        }
+
+        if ($entity->get('parentType') === 'Settings') {
+            return true;
+        }
+
+        $parent = null;
+        $hasParent = false;
+        if ($entity->get('parentId') && $entity->get('parentType')) {
+            $hasParent = true;
+            $parent = $this->getEntityManager()->getEntity($entity->get('parentType'), $entity->get('parentId'));
+        } else if ($entity->get('relatedId') && $entity->get('relatedType')) {
+            $hasParent = true;
+            $parent = $this->getEntityManager()->getEntity($entity->get('relatedType'), $entity->get('relatedId'));
+        }
+
+        if ($hasParent) {
+            if ($parent) {
+                if ($parent->getEntityType() === 'Note') {
+                    if ($parent->get('parentId') && $parent->get('parentType')) {
+                        $parentOfParent = $this->getEntityManager()->getEntity($parent->get('parentType'), $parent->get('parentId'));
+                        if ($parentOfParent && $this->getAclManager()->checkEntity($user, $parentOfParent)) {
+                            return true;
+                        }
+                    } else {
+                        return true;
+                    }
+                } else {
+                    if ($this->getAclManager()->checkEntity($user, $parent)) {
+                        return true;
+                    }
+                }
+            }
+        } else {
+            return true;
+        }
+
+        if ($this->checkEntity($user, $entity, $data, 'read')) {
+            return true;
+        }
+
+        return false;
+    }
+
+    public function checkIsOwner(EntityUser $user, Entity $entity)
+    {
+        if ($user->id === $entity->get('createdById')) {
+            return true;
+        }
+        return false;
+    }
+}
+
@@ -0,0 +1,121 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Acl;
+
+use \Espo\Entities\User as EntityUser;
+use \Espo\ORM\Entity;
+
+class Email extends \Espo\Core\Acl\Base
+{
+
+    public function checkEntityRead(EntityUser $user, Entity $entity, $data)
+    {
+        if ($this->checkEntity($user, $entity, $data, 'read')) {
+            return true;
+        }
+
+        if ($data === false) {
+            return false;
+        }
+        if (is_object($data)) {
+            if ($data->read === false || $data->read === 'no') {
+                return false;
+            }
+        }
+
+        if (!$entity->has('usersIds')) {
+            $entity->loadLinkMultipleField('users');
+        }
+        $userIdList = $entity->get('usersIds');
+        if (is_array($userIdList) && in_array($user->id, $userIdList)) {
+            return true;
+        }
+        return false;
+    }
+
+    public function checkIsOwner(EntityUser $user, Entity $entity)
+    {
+        if ($user->id === $entity->get('assignedUserId')) {
+            return true;
+        }
+
+        if ($user->id === $entity->get('createdById')) {
+            return true;
+        }
+
+        if ($entity->hasLinkMultipleId('assignedUsers', $user->id)) {
+            return true;
+        }
+
+        return false;
+    }
+
+    public function checkEntityDelete(EntityUser $user, Entity $entity, $data)
+    {
+        if ($user->isAdmin()) {
+            return true;
+        }
+
+        if ($data === false) {
+            return false;
+        }
+
+        if ($data->delete === 'own') {
+            if ($user->id === $entity->get('assignedUserId')) {
+                return true;
+            }
+
+            if ($user->id === $entity->get('createdById')) {
+                return true;
+            }
+
+            $assignedUserIdList = $entity->getLinkMultipleIdList('assignedUsers');
+            if (count($assignedUserIdList) === 1 && $entity->hasLinkMultipleId('assignedUsers', $user->id)) {
+                return true;
+            }
+            return false;
+        }
+
+        if ($this->checkEntity($user, $entity, $data, 'delete')) {
+            return true;
+        }
+
+        if ($data->edit !== 'no' || $data->create !== 'no') {
+            if ($entity->get('createdById') === $user->id) {
+                if ($entity->get('status') !== 'Sent' && $entity->get('status') !== 'Archived') {
+                    return true;
+                }
+            }
+        }
+
+        return false;
+    }
+}
+
@@ -0,0 +1,56 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Acl;
+
+use \Espo\Entities\User as EntityUser;
+use \Espo\ORM\Entity;
+
+class EmailFilter extends \Espo\Core\Acl\Base
+{
+    public function checkIsOwner(EntityUser $user, Entity $entity)
+    {
+        if ($entity->has('parentId') && $entity->has('parentType')) {
+            $parentType = $entity->get('parentType');
+            $parentId = $entity->get('parentId');
+            if (!$parentType || !$parentId) return;
+
+            $parent = $this->getEntityManager()->getEntity($parentType, $parentId);
+
+            if ($parent->getEntityType() === 'User') {
+                return $parent->id === $user->id;
+            }
+            if ($parent && $parent->has('assignedUserId') && $parent->get('assignedUserId') === $user->id) {
+                return true;
+            }
+        }
+        return;
+    }
+}
+
@@ -0,0 +1,45 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Acl;
+
+use \Espo\Entities\User as EntityUser;
+use \Espo\ORM\Entity;
+
+class Notification extends \Espo\Core\Acl\Base
+{
+    public function checkIsOwner(EntityUser $user, Entity $entity)
+    {
+        if ($user->id === $entity->get('userId')) {
+            return true;
+        }
+        return false;
+    }
+}
+
@@ -0,0 +1,41 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Acl;
+
+use \Espo\ORM\Entity;
+
+class User extends \Espo\Core\Acl\Base
+{
+    public function checkIsOwner(\Espo\Entities\User $user, Entity $entity)
+    {
+        return $user->id === $entity->id;
+    }
+}
+
@@ -0,0 +1,93 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\AclPortal;
+
+use \Espo\Entities\User as EntityUser;
+use \Espo\ORM\Entity;
+
+class Attachment extends \Espo\Core\AclPortal\Base
+{
+    public function checkEntityRead(EntityUser $user, Entity $entity, $data)
+    {
+        if ($user->isAdmin()) {
+            return true;
+        }
+
+        if ($entity->get('parentType') === 'Settings') {
+            return true;
+        }
+
+        $parent = null;
+        $hasParent = false;
+        if ($entity->get('parentId') && $entity->get('parentType')) {
+            $hasParent = true;
+            $parent = $this->getEntityManager()->getEntity($entity->get('parentType'), $entity->get('parentId'));
+        } else if ($entity->get('relatedId') && $entity->get('relatedType')) {
+            $hasParent = true;
+            $parent = $this->getEntityManager()->getEntity($entity->get('relatedType'), $entity->get('relatedId'));
+        }
+
+        if ($hasParent) {
+            if ($parent) {
+                if ($parent->getEntityType() === 'Note') {
+                    if ($parent->get('parentId') && $parent->get('parentType')) {
+                        $parentOfParent = $this->getEntityManager()->getEntity($parent->get('parentType'), $parent->get('parentId'));
+                        if ($parentOfParent && $this->getAclManager()->checkEntity($user, $parentOfParent)) {
+                            return true;
+                        }
+                    } else {
+                        return true;
+                    }
+                } else {
+                    if ($this->getAclManager()->checkEntity($user, $parent)) {
+                        return true;
+                    }
+                }
+            }
+        } else {
+            return true;
+        }
+
+        if ($this->checkEntity($user, $entity, $data, 'read')) {
+            return true;
+        }
+
+        return false;
+    }
+
+    public function checkIsOwner(EntityUser $user, Entity $entity)
+    {
+        if ($user->id === $entity->get('createdById')) {
+            return true;
+        }
+        return false;
+    }
+}
+
@@ -0,0 +1,71 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\AclPortal;
+
+use \Espo\Entities\User as EntityUser;
+use \Espo\ORM\Entity;
+
+class Email extends \Espo\Core\AclPortal\Base
+{
+
+    public function checkEntityRead(EntityUser $user, Entity $entity, $data)
+    {
+        if ($this->checkEntity($user, $entity, $data, 'read')) {
+            return true;
+        }
+
+        if ($data === false) {
+            return false;
+        }
+        if (is_object($data)) {
+            if ($data->read === false || $data->read === 'no') {
+                return false;
+            }
+        }
+
+        if (!$entity->has('usersIds')) {
+            $entity->loadLinkMultipleField('users');
+        }
+        $userIdList = $entity->get('usersIds');
+        if (is_array($userIdList) && in_array($user->id, $userIdList)) {
+            return true;
+        }
+        return false;
+    }
+
+    public function checkIsOwner(EntityUser $user, Entity $entity)
+    {
+        if ($user->id === $entity->get('createdById')) {
+            return true;
+        }
+        return false;
+    }
+}
+
@@ -0,0 +1,45 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\AclPortal;
+
+use \Espo\Entities\User as EntityUser;
+use \Espo\ORM\Entity;
+
+class Notification extends \Espo\Core\AclPortal\Base
+{
+    public function checkIsOwner(EntityUser $user, Entity $entity)
+    {
+        if ($user->id === $entity->get('userId')) {
+            return true;
+        }
+        return false;
+    }
+}
+
@@ -0,0 +1,41 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\AclPortal;
+
+use \Espo\ORM\Entity;
+
+class User extends \Espo\Core\AclPortal\Base
+{
+    public function checkIsOwner(\Espo\Entities\User $user, Entity $entity)
+    {
+        return $user->id === $entity->id;
+    }
+}
+
@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,69 +18,90 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
 ************************************************************************/

 namespace Espo\Controllers;

-use \Espo\Core\Exceptions\Error,
-    \Espo\Core\Exceptions\Forbidden;
+use \Espo\Core\Exceptions\NotFound;
+use \Espo\Core\Exceptions\Error;
+use \Espo\Core\Exceptions\Forbidden;
+use \Espo\Core\Exceptions\BadRequest;

 class Admin extends \Espo\Core\Controllers\Base
 {
-	protected function checkControllerAccess()
-	{
-		if (!$this->getUser()->isAdmin()) {
-			throw new Forbidden();
-		}
-	}
+    protected function checkControllerAccess()
+    {
+        if (!$this->getUser()->isAdmin()) {
+            throw new Forbidden();
+        }
+    }

-	public function actionRebuild($params, $data)
-	{
-		$result = $this->getContainer()->get('dataManager')->rebuild();
+    public function postActionRebuild($params, $data, $request)
+    {
+        if (!$request->isPost()) {
+            throw new BadRequest();
+        }
+        $result = $this->getContainer()->get('dataManager')->rebuild();

-		return $result;
-	}
+        return $result;
+    }

-	public function actionClearCache($params, $data)
-	{
-		$result = $this->getContainer()->get('dataManager')->clearCache();
+    public function postActionClearCache($params, $data)
+    {
+        $result = $this->getContainer()->get('dataManager')->clearCache();
+        return $result;
+    }

-		return $result;
-	}
+    public function actionJobs()
+    {
+        $scheduledJob = $this->getContainer()->get('scheduledJob');

-	public function actionJobs()
-	{
-		$scheduledJob = $this->getContainer()->get('scheduledJob');
+        return $scheduledJob->getAllNamesOnly();
+    }

-		return $scheduledJob->getAllNamesOnly();
-	}
+    public function postActionUploadUpgradePackage($params, $data)
+    {
+        if ($this->getConfig()->get('restrictedMode')) {
+            if (!$this->getUser()->get('isSuperAdmin')) {
+                throw new Forbidden();
+            }
+        }
+        $upgradeManager = new \Espo\Core\UpgradeManager($this->getContainer());

-	public function actionUploadUpgradePackage($params, $data)
-	{
-		$upgradeManager = new \Espo\Core\UpgradeManager($this->getContainer());
+        $upgradeId = $upgradeManager->upload($data);
+        $manifest = $upgradeManager->getManifest();

-		$upgradeId = $upgradeManager->upload($data);
-		$manifest = $upgradeManager->getManifest();
+        return array(
+            'id' => $upgradeId,
+            'version' => $manifest['version'],
+        );
+    }

-		return array(
-			'id' => $upgradeId,
-			'version' => $manifest['version'],
-		);
-	}
+    public function postActionRunUpgrade($params, $data)
+    {
+        if ($this->getConfig()->get('restrictedMode')) {
+            if (!$this->getUser()->get('isSuperAdmin')) {
+                throw new Forbidden();
+            }
+        }

-	public function actionRunUpgrade($params, $data)
-	{
-		$upgradeManager = new \Espo\Core\UpgradeManager($this->getContainer());
+        $upgradeManager = new \Espo\Core\UpgradeManager($this->getContainer());
+        $upgradeManager->install($data);

-		$upgradeManager->run($data['id']);
+        return true;
+    }

-		return true;
-	}
-
-	public function actionCronMessage($params, $data)
-	{
-		return $this->getContainer()->get('scheduledJob')->getSetupMessage();
-	}
+    public function actionCronMessage($params, $data)
+    {
+        return $this->getContainer()->get('scheduledJob')->getSetupMessage();
+    }

 }

@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,33 +18,65 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
- ************************************************************************/ 
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/

 namespace Espo\Controllers;

 use \Espo\Core\Exceptions\BadRequest;

-class App extends \Espo\Core\Controllers\Record
+class App extends \Espo\Core\Controllers\Base
 {
-	public function actionUser()
-	{		
-		return array(
-			'user' => $this->getUser()->toArray(),
-			'acl' => $this->getAcl()->toArray(),
-			'preferences' => $this->getPreferences()->toArray(),
-			'token' => $this->getUser()->get('token')
-		);	
-	}
-	
-	public function actionDestroyAuthToken($params, $data)
-	{		
-		$token = $data['token'];		
-		if (empty($token)) {
-			throw new BadRequest();
-		}
+    public function actionUser()
+    {
+        $preferences = $this->getPreferences()->getValues();
+        unset($preferences['smtpPassword']);

-		$auth = new \Espo\Core\Utils\Auth($this->getContainer());
-		return $auth->destroyAuthToken($token);		
-	}
+        $user = $this->getUser();
+        if (!$user->has('teamsIds')) {
+            $user->loadLinkMultipleField('teams');
+        }
+        if ($user->get('isPortalUser')) {
+            $user->loadAccountField();
+            $user->loadLinkMultipleField('accounts');
+        }
+
+        $userData = $user->getValues();
+
+        $emailAddressList = [];
+        foreach ($user->get('emailAddresses') as $emailAddress) {
+            if ($emailAddress->get('invalid')) continue;
+            if ($user->get('emailAddrses') === $emailAddress->get('name')) continue;
+            $emailAddressList[] = $emailAddress->get('name');
+        }
+        if ($user->get('emailAddrses')) {
+            array_unshift($emailAddressList, $user->get('emailAddrses'));
+        }
+        $userData['emailAddressList'] = $emailAddressList;
+
+        return array(
+            'user' => $userData,
+            'acl' => $this->getAcl()->getMap(),
+            'preferences' => $preferences,
+            'token' => $this->getUser()->get('token')
+        );
+    }
+
+    public function postActionDestroyAuthToken($params, $data)
+    {
+        $token = $data['token'];
+        if (empty($token)) {
+            throw new BadRequest();
+        }
+
+        $auth = new \Espo\Core\Utils\Auth($this->getContainer());
+        return $auth->destroyAuthToken($token);
+    }
 }

@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,26 +18,43 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
- ************************************************************************/ 
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/

 namespace Espo\Controllers;

+use \Espo\Core\Exceptions\Forbidden;
+use \Espo\Core\Exceptions\BadRequest;
+
 class Attachment extends \Espo\Core\Controllers\Record
 {
+    public function actionUpload($params, $data, $request)
+    {
+        if (!$request->isPost()) {
+            throw new BadRequest();
+        }

-	public function actionUpload($params, $data)
-	{		
-		list($prefix, $contents) = explode(',', $data);
-		$contents = base64_decode($contents);
-		
-		$attachment = $this->getEntityManager()->getEntity('Attachment');
-		$this->getEntityManager()->saveEntity($attachment);		
-		$this->getContainer()->get('fileManager')->putContents('data/upload/' . $attachment->id, $contents);
-		
-		return array(
-			'attachmentId' => $attachment->id
-		);	
-	}
+        if (!$this->getAcl()->checkScope('Attachment', 'create')) {
+            throw new Forbidden();
+        }
+
+        list($prefix, $contents) = explode(',', $data);
+        $contents = base64_decode($contents);
+
+        $attachment = $this->getEntityManager()->getEntity('Attachment');
+        $this->getEntityManager()->saveEntity($attachment);
+        $this->getContainer()->get('fileManager')->putContents('data/upload/' . $attachment->id, $contents);
+
+        return array(
+            'attachmentId' => $attachment->id
+        );
+    }

 }

@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,49 +18,56 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
- ************************************************************************/ 
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/

 namespace Espo\Controllers;

 use \Espo\Core\Exceptions\Forbidden;

 class AuthToken extends \Espo\Core\Controllers\Record
-{	
-	protected function checkControllerAccess()
-	{
-		if (!$this->getUser()->isAdmin()) {
-			throw new Forbidden();
-		}
-	}
-	
-	public function actionUpdate($params, $data)
-	{
-		throw new Forbidden();
-	}	
-	
-	public function actionCreate($params, $data)
-	{
-		throw new Forbidden();
-	}
-	
-	public function actionListLinked($params, $data)
-	{
-		throw new Forbidden();
-	}
-	
-	public function actionMassUpdate($params, $data)
-	{
-		throw new Forbidden();
-	}
-	
-	public function actionCreateLink($params, $data)
-	{
-		throw new Forbidden();
-	}
-	
-	public function actionRemoveLink($params, $data)
-	{
-		throw new Forbidden();
-	}	
+{
+    protected function checkControllerAccess()
+    {
+        if (!$this->getUser()->isAdmin()) {
+            throw new Forbidden();
+        }
+    }
+
+    public function actionUpdate($params, $data)
+    {
+        throw new Forbidden();
+    }
+
+    public function actionCreate($params, $data)
+    {
+        throw new Forbidden();
+    }
+
+    public function actionListLinked($params, $data)
+    {
+        throw new Forbidden();
+    }
+
+    public function actionMassUpdate($params, $data)
+    {
+        throw new Forbidden();
+    }
+
+    public function actionCreateLink($params, $data)
+    {
+        throw new Forbidden();
+    }
+
+    public function actionRemoveLink($params, $data)
+    {
+        throw new Forbidden();
+    }
 }

@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,11 +18,208 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
- ************************************************************************/ 
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/

 namespace Espo\Controllers;

+use \Espo\Core\Exceptions\BadRequest;
+use \Espo\Core\Exceptions\Forbidden;
+use \Espo\Core\Exceptions\Error;
+use \Espo\Core\Exceptions\NotFound;
+
 class Email extends \Espo\Core\Controllers\Record
 {
+    public function postActionGetCopiedAttachments($params, $data, $request)
+    {
+        if (empty($data['id'])) {
+            throw new BadRequest();
+        }
+        $id = $data['id'];

+        return $this->getRecordService()->getCopiedAttachments($id);
+    }
+
+    public function actionSendTestEmail($params, $data, $request)
+    {
+        if (!$request->isPost()) {
+            throw new BadRequest();
+        }
+
+        if (!$this->getAcl()->checkScope('Email')) {
+            throw new Forbidden();
+        }
+
+        if (is_null($data['password'])) {
+            if ($data['type'] == 'preferences') {
+                if (!$this->getUser()->isAdmin() && $data['id'] !== $this->getUser()->id) {
+                    throw new Forbidden();
+                }
+                $preferences = $this->getEntityManager()->getEntity('Preferences', $data['id']);
+                if (!$preferences) {
+                    throw new NotFound();
+                }
+
+                if (is_null($data['password'])) {
+                    $data['password'] = $this->getContainer()->get('crypt')->decrypt($preferences->get('smtpPassword'));
+                }
+            } else if ($data['type'] == 'emailAccount') {
+                if (!$this->getAcl()->checkScope('EmailAccount')) {
+                    throw new Forbidden();
+                }
+                if (!empty($data['id'])) {
+                    $emailAccount = $this->getEntityManager()->getEntity('EmailAccount', $data['id']);
+                    if (!$emailAccount) {
+                        throw new NotFound();
+                    }
+                    if (!$this->getUser()->isAdmin()) {
+                        if ($emailAccount->get('assigniedUserId') !== $this->getUser()->id) {
+                            throw new Forbidden();
+                        }
+                    }
+                    if (is_null($data['password'])) {
+                        $data['password'] = $this->getContainer()->get('crypt')->decrypt($emailAccount->get('smtpPassword'));
+                    }
+                }
+            } else {
+                if (!$this->getUser()->isAdmin()) {
+                    throw new Forbidden();
+                }
+                if (is_null($data['password'])) {
+                    $data['password'] = $this->getConfig()->get('smtpPassword');
+                }
+            }
+        }
+
+        return $this->getRecordService()->sendTestEmail($data);
+    }
+
+    public function postActionMarkAsRead($params, $data, $request)
+    {
+        if (!empty($data['ids'])) {
+            $ids = $data['ids'];
+        } else {
+            if (!empty($data['id'])) {
+                $ids = [$data['id']];
+            } else {
+                throw new BadRequest();
+            }
+        }
+        return $this->getRecordService()->markAsReadByIdList($ids);
+    }
+
+    public function postActionMarkAsNotRead($params, $data, $request)
+    {
+        if (!empty($data['ids'])) {
+            $ids = $data['ids'];
+        } else {
+            if (!empty($data['id'])) {
+                $ids = [$data['id']];
+            } else {
+                throw new BadRequest();
+            }
+        }
+        return $this->getRecordService()->markAsNotReadByIdList($ids);
+    }
+
+    public function postActionMarkAllAsRead($params, $data, $request)
+    {
+        return $this->getRecordService()->markAllAsRead();
+    }
+
+    public function postActionMarkAsImportant($params, $data, $request)
+    {
+        if (!empty($data['ids'])) {
+            $ids = $data['ids'];
+        } else {
+            if (!empty($data['id'])) {
+                $ids = [$data['id']];
+            } else {
+                throw new BadRequest();
+            }
+        }
+        return $this->getRecordService()->markAsImportantByIdList($ids);
+    }
+
+    public function postActionMarkAsNotImportant($params, $data, $request)
+    {
+        if (!empty($data['ids'])) {
+            $ids = $data['ids'];
+        } else {
+            if (!empty($data['id'])) {
+                $ids = [$data['id']];
+            } else {
+                throw new BadRequest();
+            }
+        }
+        return $this->getRecordService()->markAsNotImportantByIdList($ids);
+    }
+
+    public function postActionMoveToTrash($params, $data)
+    {
+        if (!empty($data['ids'])) {
+            $ids = $data['ids'];
+        } else {
+            if (!empty($data['id'])) {
+                $ids = [$data['id']];
+            } else {
+                throw new BadRequest();
+            }
+        }
+        return $this->getRecordService()->moveToTrashByIdList($ids);
+    }
+
+    public function postActionRetrieveFromTrash($params, $data)
+    {
+        if (!empty($data['ids'])) {
+            $ids = $data['ids'];
+        } else {
+            if (!empty($data['id'])) {
+                $ids = [$data['id']];
+            } else {
+                throw new BadRequest();
+            }
+        }
+        return $this->getRecordService()->retrieveFromTrashByIdList($ids);
+    }
+
+    public function getActionGetFoldersNotReadCounts(&$params, $request, $data)
+    {
+        return $this->getRecordService()->getFoldersNotReadCounts();
+    }
+
+    protected function fetchListParamsFromRequest(&$params, $request, $data)
+    {
+        parent::fetchListParamsFromRequest($params, $request, $data);
+
+        $folderId = $request->get('folderId');
+        if ($folderId) {
+            $params['folderId'] = $request->get('folderId');
+        }
+    }
+
+    public function postActionMoveToFolder($params, $data)
+    {
+        if (!empty($data['ids'])) {
+            $ids = $data['ids'];
+        } else {
+            if (!empty($data['id'])) {
+                $ids = [$data['id']];
+            } else {
+                throw new BadRequest();
+            }
+        }
+
+        if (empty($data['folderId'])) {
+            throw new BadRequest();
+        }
+        return $this->getRecordService()->moveToFolderByIdList($ids, $data['folderId']);
+    }
 }
+
@@ -0,0 +1,78 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Controllers;
+
+use \Espo\Core\Exceptions\Forbidden;
+use \Espo\Core\Exceptions\BadRequest;
+
+class EmailAccount extends \Espo\Core\Controllers\Record
+{
+    public function actionGetFolders($params, $data, $request)
+    {
+        return $this->getRecordService()->getFolders(array(
+            'host' => $request->get('host'),
+            'port' => $request->get('port'),
+            'ssl' => $request->get('ssl') === 'true',
+            'username' => $request->get('username'),
+            'password' => $request->get('password'),
+            'id' => $request->get('id')
+        ));
+    }
+
+    protected function checkControllerAccess()
+    {
+        if (!$this->getAcl()->check('EmailAccountScope')) {
+            throw new Forbidden();
+        }
+    }
+
+    public function actionTestConnection($params, $data, $request)
+    {
+        if (!$request->isPost()) {
+            throw new BadRequest();
+        }
+
+        if (is_null($data['password'])) {
+            $emailAccount = $this->getEntityManager()->getEntity('EmailAccount', $data['id']);
+            if (!$emailAccount) {
+                throw new Error();
+            }
+
+            if ($emailAccount->get('assignedUserId') != $this->getUser()->id && !$this->getUser()->isAdmin()) {
+                throw new Forbidden();
+            }
+
+            $data['password'] = $this->getContainer()->get('crypt')->decrypt($emailAccount->get('password'));
+        }
+
+        return $this->getRecordService()->testConnection($data);
+    }
+}
+
@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,11 +18,35 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
- ************************************************************************/ 
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/

 namespace Espo\Controllers;

+use \Espo\Core\Exceptions\Forbidden;
+
 class EmailAddress extends \Espo\Core\Controllers\Record
 {
-
+    public function actionSearchInAddressBook($params, $data, $request)
+    {
+        if (!$this->getAcl()->checkScope('Email')) {
+            throw new Forbidden();
+        }
+        if (!$this->getAcl()->checkScope('Email', 'create')) {
+            throw new Forbidden();
+        }
+        $q = $request->get('q');
+        $limit = intval($request->get('limit'));
+        if (empty($limit) || $limit > 30) {
+            $limit = 5;
+        }
+        return $this->getRecordService()->searchInAddressBook($q, $limit);
+    }
 }
+
@@ -0,0 +1,36 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Controllers;
+
+class EmailFilter extends \Espo\Core\Controllers\Record
+{
+
+}
+
@@ -0,0 +1,63 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Controllers;
+
+use \Espo\Core\Exceptions\BadRequest;
+
+class EmailFolder extends \Espo\Core\Controllers\Record
+{
+    public function postActionMoveUp($params, $data, $request)
+    {
+        if (empty($data['id'])) {
+            throw new BadRequest();
+        }
+
+        $this->getRecordService()->moveUp($data['id']);
+
+        return true;
+    }
+
+    public function postActionMoveDown($params, $data, $request)
+    {
+        if (empty($data['id'])) {
+            throw new BadRequest();
+        }
+
+        $this->getRecordService()->moveDown($data['id']);
+
+        return true;
+    }
+
+    public function getActionListAll()
+    {
+        return $this->getRecordService()->listAll();
+    }
+}
+
@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,6 +18,13 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
 ************************************************************************/ 

 namespace Espo\Controllers;
@@ -26,20 +33,20 @@ use \Espo\Core\Exceptions\Error;

 class EmailTemplate extends \Espo\Core\Controllers\Record
 {
-	public function actionParse($params, $data, $request)
-	{		
-		$id = $request->get('id');
-		$emailAddress = $request->get('emailAddress');
-		if (empty($id)) {
-			throw new Error();
-		}
-		
-		return $this->getRecordService()->parse($id, array(
-			'emailAddress' => $request->get('emailAddress'),
-			'parentType' => $request->get('parentType'),
-			'parentId' => $request->get('parentId'),
-		), true);
-	}
+    public function actionParse($params, $data, $request)
+    {        
+        $id = $request->get('id');
+        $emailAddress = $request->get('emailAddress');
+        if (empty($id)) {
+            throw new Error();
+        }
+        
+        return $this->getRecordService()->parse($id, array(
+            'emailAddress' => $request->get('emailAddress'),
+            'parentType' => $request->get('parentType'),
+            'parentId' => $request->get('parentId'),
+        ), true);
+    }

 }

@@ -0,0 +1,282 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Controllers;
+
+use \Espo\Core\Exceptions\BadRequest;
+use \Espo\Core\Exceptions\Forbidden;
+use \Espo\Core\Exceptions\Error;
+
+class EntityManager extends \Espo\Core\Controllers\Base
+{
+    protected function checkControllerAccess()
+    {
+        if (!$this->getUser()->isAdmin()) {
+            throw new Forbidden();
+        }
+    }
+
+    public function actionCreateEntity($params, $data, $request)
+    {
+        if (!$request->isPost()) {
+            throw new BadRequest();
+        }
+
+        if (empty($data['name']) || empty($data['type'])) {
+            throw new BadRequest();
+        }
+
+        $name = $data['name'];
+        $type = $data['type'];
+
+        $name = filter_var($name, \FILTER_SANITIZE_STRING);
+        $type = filter_var($type, \FILTER_SANITIZE_STRING);
+
+        $params = array();
+
+        if (!empty($data['labelSingular'])) {
+            $params['labelSingular'] = $data['labelSingular'];
+        }
+        if (!empty($data['labelPlural'])) {
+            $params['labelPlural'] = $data['labelPlural'];
+        }
+        if (!empty($data['stream'])) {
+            $params['stream'] = $data['stream'];
+        }
+        if (!empty($data['disabled'])) {
+            $params['disabled'] = $data['disabled'];
+        }
+        if (!empty($data['sortBy'])) {
+            $params['sortBy'] = $data['sortBy'];
+        }
+        if (!empty($data['sortDirection'])) {
+            $params['asc'] = $data['sortDirection'] === 'asc';
+        }
+        if (isset($data['textFilterFields']) && is_array($data['textFilterFields'])) {
+            $params['textFilterFields'] = $data['textFilterFields'];
+        }
+
+        $result = $this->getContainer()->get('entityManagerUtil')->create($name, $type, $params);
+
+        if ($result) {
+            $tabList = $this->getConfig()->get('tabList', []);
+
+            if (!in_array($name, $tabList)) {
+                $tabList[] = $name;
+                $this->getConfig()->set('tabList', $tabList);
+                $this->getConfig()->save();
+            }
+
+            $this->getContainer()->get('dataManager')->rebuild();
+        } else {
+            throw new Error();
+        }
+
+        return true;
+    }
+
+    public function actionUpdateEntity($params, $data, $request)
+    {
+        if (!$request->isPost()) {
+            throw new BadRequest();
+        }
+        if (empty($data['name'])) {
+            throw new BadRequest();
+        }
+        $name = $data['name'];
+        $name = filter_var($name, \FILTER_SANITIZE_STRING);
+
+        if (!empty($data['sortDirection'])) {
+            $data['asc'] = $data['sortDirection'] === 'asc';
+        }
+
+        $result = $this->getContainer()->get('entityManagerUtil')->update($name, $data);
+
+        if ($result) {
+            $this->getContainer()->get('dataManager')->clearCache();
+        } else {
+            throw new Error();
+        }
+
+        return true;
+    }
+
+    public function actionRemoveEntity($params, $data, $request)
+    {
+        if (!$request->isPost()) {
+            throw new BadRequest();
+        }
+
+        if (empty($data['name'])) {
+            throw new BadRequest();
+        }
+        $name = $data['name'];
+        $name = filter_var($name, \FILTER_SANITIZE_STRING);
+
+        $result = $this->getContainer()->get('entityManagerUtil')->delete($name);
+
+        if ($result) {
+            $tabList = $this->getConfig()->get('tabList', []);
+            if (($key = array_search($name, $tabList)) !== false) {
+                unset($tabList[$key]);
+                $tabList = array_values($tabList);
+            }
+            $this->getConfig()->set('tabList', $tabList);
+            $this->getConfig()->save();
+
+            $this->getContainer()->get('dataManager')->clearCache();
+        } else {
+            throw new Error();
+        }
+
+        return true;
+    }
+
+    public function actionCreateLink($params, $data, $request)
+    {
+        if (!$request->isPost()) {
+            throw new BadRequest();
+        }
+
+        $paramList = [
+        	'entity',
+        	'entityForeign',
+        	'link',
+        	'linkForeign',
+        	'label',
+        	'labelForeign',
+        	'linkType'
+        ];
+
+        $additionalParamList = [
+            'relationName',
+        ];
+
+        $params = array();
+
+        foreach ($paramList as $item) {
+        	if (empty($data[$item])) {
+        		throw new BadRequest();
+        	}
+        	$params[$item] = filter_var($data[$item], \FILTER_SANITIZE_STRING);
+        }
+
+        foreach ($additionalParamList as $item) {
+            $params[$item] = filter_var($data[$item], \FILTER_SANITIZE_STRING);
+        }
+
+        if (array_key_exists('linkMultipleField', $data)) {
+            $params['linkMultipleField'] = $data['linkMultipleField'];
+        }
+        if (array_key_exists('linkMultipleFieldForeign', $data)) {
+            $params['linkMultipleFieldForeign'] = $data['linkMultipleFieldForeign'];
+        }
+
+        $result = $this->getContainer()->get('entityManagerUtil')->createLink($params);
+
+        if ($result) {
+            $this->getContainer()->get('dataManager')->rebuild();
+        } else {
+            throw new Error();
+        }
+
+        return true;
+    }
+
+    public function actionUpdateLink($params, $data, $request)
+    {
+        if (!$request->isPost()) {
+            throw new BadRequest();
+        }
+
+        $paramList = [
+        	'entity',
+        	'entityForeign',
+        	'link',
+        	'linkForeign',
+        	'label',
+        	'labelForeign'
+        ];
+
+        $additionalParamList = [];
+
+        $params = array();
+        foreach ($paramList as $item) {
+        	$params[$item] = filter_var($data[$item], \FILTER_SANITIZE_STRING);
+        }
+
+        foreach ($additionalParamList as $item) {
+            $params[$item] = filter_var($data[$item], \FILTER_SANITIZE_STRING);
+        }
+
+        if (array_key_exists('linkMultipleField', $data)) {
+            $params['linkMultipleField'] = $data['linkMultipleField'];
+        }
+        if (array_key_exists('linkMultipleFieldForeign', $data)) {
+            $params['linkMultipleFieldForeign'] = $data['linkMultipleFieldForeign'];
+        }
+
+        $result = $this->getContainer()->get('entityManagerUtil')->updateLink($params);
+
+        if ($result) {
+            $this->getContainer()->get('dataManager')->clearCache();
+        } else {
+            throw new Error();
+        }
+
+        return true;
+    }
+
+    public function actionRemoveLink($params, $data, $request)
+    {
+        if (!$request->isPost()) {
+            throw new BadRequest();
+        }
+
+        $paramList = [
+        	'entity',
+        	'link',
+        ];
+        $d = array();
+        foreach ($paramList as $item) {
+        	$d[$item] = filter_var($data[$item], \FILTER_SANITIZE_STRING);
+        }
+
+        $result = $this->getContainer()->get('entityManagerUtil')->deleteLink($d);
+
+        if ($result) {
+            $this->getContainer()->get('dataManager')->clearCache();
+        } else {
+            throw new Error();
+        }
+
+        return true;
+    }
+}
+
@@ -0,0 +1,152 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Controllers;
+
+use \Espo\Core\Exceptions\Error;
+use \Espo\Core\Exceptions\Forbidden;
+
+class Extension extends \Espo\Core\Controllers\Record
+{
+    protected function checkControllerAccess()
+    {
+        if (!$this->getUser()->isAdmin()) {
+            throw new Forbidden();
+        }
+    }
+
+    public function actionUpload($params, $data, $request)
+    {
+        if (!$request->isPost()) {
+            throw new Forbidden();
+        }
+
+        $manager = new \Espo\Core\ExtensionManager($this->getContainer());
+
+        $id = $manager->upload($data);
+        $manifest = $manager->getManifest();
+
+        return array(
+            'id' => $id,
+            'version' => $manifest['version'],
+            'name' => $manifest['name'],
+            'description' => $manifest['description'],
+        );
+    }
+
+    public function actionInstall($params, $data, $request)
+    {
+        if (!$request->isPost()) {
+            throw new Forbidden();
+        }
+        if ($this->getConfig()->get('restrictedMode')) {
+            if (!$this->getUser()->get('isSuperAdmin')) {
+                throw new Forbidden();
+            }
+        }
+
+        $manager = new \Espo\Core\ExtensionManager($this->getContainer());
+
+        $manager->install($data);
+
+        return true;
+    }
+
+    public function actionUninstall($params, $data, $request)
+    {
+        if (!$request->isPost()) {
+            throw new Forbidden();
+        }
+        if ($this->getConfig()->get('restrictedMode')) {
+            if (!$this->getUser()->get('isSuperAdmin')) {
+                throw new Forbidden();
+            }
+        }
+
+        $manager = new \Espo\Core\ExtensionManager($this->getContainer());
+        $manager->uninstall($data);
+        return true;
+    }
+
+    public function actionCreate($params, $data)
+    {
+        throw new Forbidden();
+    }
+
+    public function actionUpdate($params, $data)
+    {
+        throw new Forbidden();
+    }
+
+    public function actionPatch($params, $data)
+    {
+        throw new Forbidden();
+    }
+
+    public function actionListLinked($params, $data, $request)
+    {
+        throw new Forbidden();
+    }
+
+    public function actionDelete($params, $data, $request)
+    {
+        if (!$request->isDelete()) {
+            throw BadRequest();
+        }
+        if ($this->getConfig()->get('restrictedMode')) {
+            if (!$this->getUser()->get('isSuperAdmin')) {
+                throw new Forbidden();
+            }
+        }
+        $manager = new \Espo\Core\ExtensionManager($this->getContainer());
+        $manager->delete($params);
+        return true;
+    }
+
+    public function actionMassUpdate($params, $data, $request)
+    {
+        throw new Forbidden();
+    }
+
+    public function actionMassDelete($params, $data, $request)
+    {
+        throw new Forbidden();
+    }
+
+    public function actionCreateLink($params, $data)
+    {
+        throw new Forbidden();
+    }
+
+    public function actionRemoveLink($params, $data)
+    {
+        throw new Forbidden();
+    }
+}
+
@@ -0,0 +1,142 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Controllers;
+
+use \Espo\Core\Exceptions\Error;
+use \Espo\Core\Exceptions\Forbidden;
+use \Espo\Core\Exceptions\BadRequest;
+
+class ExternalAccount extends \Espo\Core\Controllers\Record
+{
+    public static $defaultAction = 'list';
+
+    protected function checkControllerAccess()
+    {
+        if (!$this->getAcl()->checkScope('ExternalAccount')) {
+            throw new Forbidden();
+        }
+    }
+
+    public function actionList($params, $data, $request)
+    {
+        $integrations = $this->getEntityManager()->getRepository('Integration')->find();
+        $arr = array();
+        foreach ($integrations as $entity) {
+            if ($entity->get('enabled') && $this->getMetadata()->get('integrations.' . $entity->id .'.allowUserAccounts')) {
+                $arr[] = array(
+                    'id' => $entity->id
+                );
+            }
+        }
+        return array(
+            'list' => $arr
+        );
+    }
+
+    public function actionGetOAuth2Info($params, $data, $request)
+    {
+        $id = $request->get('id');
+        list($integration, $userId) = explode('__', $id);
+
+
+        if ($this->getUser()->id != $userId) {
+            throw new Forbidden();
+        }
+
+        $entity = $this->getEntityManager()->getEntity('Integration', $integration);
+        if ($entity) {
+            return array(
+                'clientId' => $entity->get('clientId'),
+                'redirectUri' => $this->getConfig()->get('siteUrl') . '?entryPoint=oauthCallback',
+                'isConnected' => $this->getRecordService()->ping($integration, $userId)
+            );
+        }
+    }
+
+    public function actionRead($params, $data, $request)
+    {
+        list($integration, $userId) = explode('__', $params['id']);
+
+        if ($this->getUser()->id != $userId) {
+            throw new Forbidden();
+        }
+
+        $entity = $this->getEntityManager()->getEntity('ExternalAccount', $params['id']);
+        return $entity->toArray();
+    }
+
+    public function actionUpdate($params, $data, $request)
+    {
+        return $this->actionPatch($params, $data, $request);
+    }
+
+    public function actionPatch($params, $data, $request)
+    {
+        if (!$request->isPut() && !$request->isPost() && !$request->isPatch()) {
+            throw new BadRequest();
+        }
+
+        list($integration, $userId) = explode('__', $params['id']);
+
+        if ($this->getUser()->id != $userId) {
+            throw new Forbidden();
+        }
+
+        if (isset($data['enabled']) && !$data['enabled']) {
+            $data['data'] = null;
+        }
+
+        $entity = $this->getEntityManager()->getEntity('ExternalAccount', $params['id']);
+        $entity->set($data);
+        $this->getEntityManager()->saveEntity($entity);
+
+        return $entity->toArray();
+    }
+
+    public function actionAuthorizationCode($params, $data, $request)
+    {
+        if (!$request->isPost()) {
+            throw new Error('Bad HTTP method type.');
+        }
+
+        $id = $data['id'];
+        $code = $data['code'];
+
+        list($integration, $userId) = explode('__', $id);
+
+        if ($this->getUser()->id != $userId) {
+            throw new Forbidden();
+        }
+
+        $service = $this->getRecordService();
+        return $service->authorizationCode($integration, $userId, $code);
+    }
+}
+
@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,71 +18,82 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
 ************************************************************************/

 namespace Espo\Controllers;

 use \Espo\Core\Exceptions\Error,
-	\Espo\Core\Exceptions\Forbidden,
-	\Espo\Core\Exceptions\NotFound;
+    \Espo\Core\Exceptions\Forbidden,
+    \Espo\Core\Exceptions\NotFound;

 class FieldManager extends \Espo\Core\Controllers\Base
 {
-	protected function checkControllerAccess()
-	{
-		if (!$this->getUser()->isAdmin()) {
-			throw new Forbidden();
-		}
-	}
+    protected function checkControllerAccess()
+    {
+        if (!$this->getUser()->isAdmin()) {
+            throw new Forbidden();
+        }
+    }

-	public function actionRead($params, $data)
-	{
-		$data = $this->getContainer()->get('fieldManager')->read($params['name'], $params['scope']);
+    public function actionRead($params, $data)
+    {
+        $data = $this->getContainer()->get('fieldManager')->read($params['name'], $params['scope']);

-		if (!isset($data)) {
-			throw new NotFound();
-		}
+        if (!isset($data)) {
+            throw new NotFound();
+        }

-		return $data;
-	}
+        return $data;
+    }

-	public function actionCreate($params, $data)
-	{
-		if (empty($data['name'])) {
-			throw new Error("Field 'name' cannnot be empty");
-		}
+    public function actionCreate($params, $data)
+    {
+        if (empty($data['name'])) {
+            throw new Error("Field 'name' cannnot be empty");
+        }

-		$fieldManager = $this->getContainer()->get('fieldManager');
-		$fieldManager->create($data['name'], $data, $params['scope']);
+        $fieldManager = $this->getContainer()->get('fieldManager');
+        $fieldManager->create($data['name'], $data, $params['scope']);

-		try {
-			$this->getContainer()->get('dataManager')->rebuild($params['scope']);
-		} catch (Error $e) {
-			$fieldManager->delete($data['name'], $params['scope']);
-			throw new Error($e->getMessage());
-		}
+        try {
+            $this->getContainer()->get('dataManager')->rebuild($params['scope']);
+        } catch (Error $e) {
+            $fieldManager->delete($data['name'], $params['scope']);
+            throw new Error($e->getMessage());
+        }

-		return $fieldManager->read($data['name'], $params['scope']);
-	}
+        return $fieldManager->read($data['name'], $params['scope']);
+    }

-	public function actionUpdate($params, $data)
-	{
-		$fieldManager = $this->getContainer()->get('fieldManager');
-		$fieldManager->update($params['name'], $data, $params['scope']);
+    public function actionUpdate($params, $data)
+    {
+        $fieldManager = $this->getContainer()->get('fieldManager');
+        $fieldManager->update($params['name'], $data, $params['scope']);

-		$this->getContainer()->get('dataManager')->rebuild($params['scope']);
+        if ($fieldManager->isChanged()) {
+            $this->getContainer()->get('dataManager')->rebuild($params['scope']);
+        } else {
+            $this->getContainer()->get('dataManager')->clearCache();
+        }

-		return $fieldManager->read($params['name'], $params['scope']);
-	}
+        return $fieldManager->read($params['name'], $params['scope']);
+    }

-	public function actionDelete($params, $data)
-	{
-		$res = $this->getContainer()->get('fieldManager')->delete($params['name'], $params['scope']);
+    public function actionDelete($params, $data)
+    {
+        $res = $this->getContainer()->get('fieldManager')->delete($params['name'], $params['scope']);

-		$this->getContainer()->get('dataManager')->rebuildMetadata();
+        $this->getContainer()->get('dataManager')->rebuildMetadata();

-		return $res;
-	}
+        return $res;
+    }

 }

@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,23 +18,30 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
- ************************************************************************/ 
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/

 namespace Espo\Controllers;

 use \Espo\Core\Exceptions\Error,
-	\Espo\Core\Exceptions\Forbidden;
+    \Espo\Core\Exceptions\Forbidden;

 class GlobalSearch extends \Espo\Core\Controllers\Base
 {
    public function actionSearch($params, $data, $request)
-	{
-		$query = $params['query'];
-		
-		$offset = $request->get('offset');
-		$maxSize = $request->get('maxSize');		
-		
-		return $this->getService('GlobalSearch')->find($query, $offset);
-	}
+    {
+        $query = $request->get('q');
+
+        $offset = intval($request->get('offset'));
+        $maxSize = intval($request->get('maxSize'));
+
+        return $this->getService('GlobalSearch')->find($query, $offset, $maxSize);
+    }
 }

@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,15 +18,21 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
 ************************************************************************/

 namespace Espo\Controllers;

 class I18n extends \Espo\Core\Controllers\Base
 {
-
    public function actionRead($params, $data)
-	{
-		return $this->getContainer()->get('language')->getAll();
-	}
+    {
+        return $this->getContainer()->get('language')->getAll();
+    }
 }
@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,69 +18,148 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
- ************************************************************************/ 
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/

 namespace Espo\Controllers;

 use Espo\Core\Utils as Utils;
 use \Espo\Core\Exceptions\Error;
 use \Espo\Core\Exceptions\Forbidden;
+use \Espo\Core\Exceptions\BadRequest;

-class Import extends \Espo\Core\Controllers\Base
-{	
-	
-	protected function getFileManager()
-	{
-		return $this->getContainer()->get('fileManager');
-	}
-	
-	protected function getEntityManager()
-	{
-		return $this->getContainer()->get('entityManager');
-	}
-	
-	public function actionUploadFile($params, $data)
-	{	
-		$contents = $data;
-		
-		$attachment = $this->getEntityManager()->getEntity('Attachment');
-		$attachment->set('type', 'text/csv');		
-		$this->getEntityManager()->saveEntity($attachment);
-		
-		$this->getFileManager()->putContents('data/upload/' . $attachment->id, $contents);
-		
-		return array(
-			'attachmentId' => $attachment->id
-		);
-	}
-	
-	public function actionRevert($params, $data)
-	{			
-		return $this->getService('Import')->revert($data['entityType'], $data['idsToRemove']);
-	}
-	
-	public function actionCreate($params, $data)
-	{   
-        $importParams = array(
-        	'headerRow' => $data['headerRow'],
-        	'fieldDelimiter' => $data['fieldDelimiter'],
-        	'textQualifier' => $data['textQualifier'],
-        	'dateFormat' => $data['dateFormat'],
-        	'timeFormat' => $data['timeFormat'],
-        	'personNameFormat' => $data['personNameFormat'],
-        	'decimalMark' => $data['decimalMark'],
-        	'currency' => $data['currency'],
-        	'defaultValues' => $data['defaultValues'],
-        	'action' => $data['action'],
-        );
-        
-        $attachmentId = $data['attachmentId'];
-        
-        if (!$this->getAcl()->check($data['entityType'], 'edit')) {
-        	throw new Forbidden();
+class Import extends \Espo\Core\Controllers\Record
+{
+    protected function checkControllerAccess()
+    {
+        if (!$this->getUser()->isAdmin()) {
+            throw new Forbidden();
        }
-        
-		return $this->getService('Import')->import($data['entityType'], $data['fields'], $attachmentId, $importParams);
-	}
+    }
+
+    public function actionPatch($params, $data, $request)
+    {
+        throw new BadRequest();
+    }
+
+    public function actionUpdate($params, $data, $request)
+    {
+        throw new BadRequest();
+    }
+
+    public function actionMassUpdate($params, $data, $request)
+    {
+        throw new BadRequest();
+    }
+
+    public function actionCreateLink($params, $data, $request)
+    {
+        throw new BadRequest();
+    }
+
+    public function actionRemoveLink($params, $data, $request)
+    {
+        throw new BadRequest();
+    }
+
+    protected function getFileManager()
+    {
+        return $this->getContainer()->get('fileManager');
+    }
+
+    protected function getEntityManager()
+    {
+        return $this->getContainer()->get('entityManager');
+    }
+
+    public function actionUploadFile($params, $data, $request)
+    {
+        $contents = $data;
+
+        if (!$request->isPost()) {
+            throw new BadRequest();
+        }
+
+        $attachment = $this->getEntityManager()->getEntity('Attachment');
+        $attachment->set('type', 'text/csv');
+        $attachment->set('role', 'Import File');
+        $attachment->set('name', 'import-file.csv');
+        $this->getEntityManager()->saveEntity($attachment);
+
+        $this->getFileManager()->putContents('data/upload/' . $attachment->id, $contents);
+
+        return array(
+            'attachmentId' => $attachment->id
+        );
+    }
+
+    public function actionRevert($params, $data, $request)
+    {
+        if (empty($data['id'])) {
+            throw new BadRequest();
+        }
+        if (!$request->isPost()) {
+            throw new BadRequest();
+        }
+        return $this->getService('Import')->revert($data['id']);
+    }
+
+    public function actionRemoveDuplicates($params, $data, $request)
+    {
+        if (empty($data['id'])) {
+            throw new BadRequest();
+        }
+        if (!$request->isPost()) {
+            throw new BadRequest();
+        }
+        return $this->getService('Import')->removeDuplicates($data['id']);
+    }
+
+    public function actionCreate($params, $data, $request)
+    {
+        if (!$request->isPost() && !$request->isPut()) {
+            throw new BadRequest();
+        }
+
+        $importParams = array(
+            'headerRow' => $data['headerRow'],
+            'fieldDelimiter' => $data['fieldDelimiter'],
+            'textQualifier' => $data['textQualifier'],
+            'dateFormat' => $data['dateFormat'],
+            'timeFormat' => $data['timeFormat'],
+            'personNameFormat' => $data['personNameFormat'],
+            'decimalMark' => $data['decimalMark'],
+            'currency' => $data['currency'],
+            'defaultValues' => $data['defaultValues'],
+            'action' => $data['action'],
+        );
+
+        if (array_key_exists('updateBy', $data)) {
+            $importParams['updateBy'] = $data['updateBy'];
+        }
+
+        $attachmentId = $data['attachmentId'];
+
+        if (!$this->getAcl()->check($data['entityType'], 'edit')) {
+            throw new Forbidden();
+        }
+
+        return $this->getService('Import')->import($data['entityType'], $data['fields'], $attachmentId, $importParams);
+    }
+
+    public function postActionUnmarkAsDuplicate($params, $data)
+    {
+        if (empty($data['id']) || empty($data['entityType']) || empty($data['entityId'])) {
+            throw new BadRequest();
+        }
+        $this->getService('Import')->unmarkAsDuplicate($data['id'], $data['entityType'], $data['entityId']);
+        return true;
+    }
 }

@@ -0,0 +1,73 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Controllers;
+
+use \Espo\Core\Exceptions\Forbidden;
+use \Espo\Core\Exceptions\BadRequest;
+
+class InboundEmail extends \Espo\Core\Controllers\Record
+{
+    protected function checkControllerAccess()
+    {
+        if (!$this->getUser()->isAdmin()) {
+            throw new Forbidden();
+        }
+    }
+
+    public function actionGetFolders($params, $data, $request)
+    {
+        return $this->getRecordService()->getFolders(array(
+            'host' => $request->get('host'),
+            'port' => $request->get('port'),
+            'ssl' => $request->get('ssl') === 'true',
+            'username' => $request->get('username'),
+            'password' => $request->get('password'),
+            'id' => $request->get('id')
+        ));
+    }
+
+    public function actionTestConnection($params, $data, $request)
+    {
+        if (!$request->isPost()) {
+            throw new BadRequest();
+        }
+
+        if (is_null($data['password'])) {
+            $inboundEmail = $this->getEntityManager()->getEntity('InboundEmail', $data['id']);
+            if (!$inboundEmail) {
+                throw new Error();
+            }
+            $data['password'] = $this->getContainer()->get('crypt')->decrypt($inboundEmail->get('password'));
+        }
+
+        return $this->getRecordService()->testConnection($data);
+    }
+
+}
@@ -0,0 +1,73 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Controllers;
+
+use \Espo\Core\Exceptions\Error;
+use \Espo\Core\Exceptions\Forbidden;
+use \Espo\Core\Exceptions\BadRequest;
+
+class Integration extends \Espo\Core\Controllers\Record
+{
+    protected function checkControllerAccess()
+    {
+        if (!$this->getUser()->isAdmin()) {
+            throw new Forbidden();
+        }
+    }
+
+    public function actionIndex($params, $data, $request)
+    {
+        return false;
+    }
+
+    public function actionRead($params, $data, $request)
+    {
+        $entity = $this->getEntityManager()->getEntity('Integration', $params['id']);
+        return $entity->toArray();
+    }
+
+    public function actionUpdate($params, $data, $request)
+    {
+        return $this->actionPatch($params, $data, $request);
+    }
+
+    public function actionPatch($params, $data, $request)
+    {
+        if (!$request->isPut() && !$request->isPatch()) {
+            throw new BadRequest();
+        }
+        $entity = $this->getEntityManager()->getEntity('Integration', $params['id']);
+        $entity->set($data);
+        $this->getEntityManager()->saveEntity($entity);
+
+        return $entity->toArray();
+    }
+}
+
@@ -0,0 +1,79 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Controllers;
+
+use \Espo\Core\Exceptions\Error;
+use \Espo\Core\Exceptions\Forbidden;
+
+class Job extends \Espo\Core\Controllers\Record
+{
+    protected function checkControllerAccess()
+    {
+        if (!$this->getUser()->isAdmin()) {
+            throw new Forbidden();
+        }
+    }
+
+    public function actionCreate($params, $data, $request)
+    {
+        throw new Forbidden();
+    }
+
+    public function actionUpdate($params, $data, $request)
+    {
+        throw new Forbidden();
+    }
+
+    public function actionPatch($params, $data, $request)
+    {
+        throw new Forbidden();
+    }
+
+    public function actionListLinked($params, $data, $request)
+    {
+        throw new Forbidden();
+    }
+
+    public function actionMassUpdate($params, $data, $request)
+    {
+        throw new Forbidden();
+    }
+
+    public function actionCreateLink($params, $data, $request)
+    {
+        throw new Forbidden();
+    }
+
+    public function actionRemoveLink($params, $data, $request)
+    {
+        throw new Forbidden();
+    }
+}
+
@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,6 +18,13 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
 ************************************************************************/

 namespace Espo\Controllers;
@@ -25,33 +32,57 @@ namespace Espo\Controllers;
 use Espo\Core\Utils as Utils;
 use \Espo\Core\Exceptions\NotFound;
 use \Espo\Core\Exceptions\Error;
+use \Espo\Core\Exceptions\Forbidden;
+use \Espo\Core\Exceptions\BadRequest;

 class Layout extends \Espo\Core\Controllers\Base
 {
    public function actionRead($params, $data)
-	{
-		$data = $this->getContainer()->get('layout')->get($params['scope'], $params['name']);
-		if (empty($data)) {
-			throw new NotFound("Layout " . $params['scope'] . ":" . $params['name'] . ' is not found');
-		}
-		return $data;
-	}
+    {
+        $data = $this->getContainer()->get('layout')->get($params['scope'], $params['name']);
+        if (empty($data)) {
+            throw new NotFound("Layout " . $params['scope'] . ":" . $params['name'] . ' is not found.');
+        }
+        return $data;
+    }

-	public function actionUpdate($params, $data)
-	{
-        $result = $this->getContainer()->get('layout')->set($data, $params['scope'], $params['name']);
+    public function actionUpdate($params, $data, $request)
+    {
+        if (!$this->getUser()->isAdmin()) {
+            throw new Forbidden();
+        }

-		if ($result === false) {
-			throw new Error("Error while saving layout");
-		}
+        if (!$request->isPut() && !$request->isPatch()) {
+            throw new BadRequest();
+        }

-		$this->getContainer()->get('dataManager')->updateCacheTimestamp();
+        $layoutManager = $this->getContainer()->get('layout');
+        $layoutManager->set($data, $params['scope'], $params['name']);
+        $result = $layoutManager->save();

-		return $this->getContainer()->get('layout')->get($params['scope'], $params['name']);
-	}
+        if ($result === false) {
+            throw new Error("Error while saving layout.");
+        }

-	public function actionPatch($params, $data)
-	{
-        return $this->actionUpdate($params, $data);
-	}
+        $this->getContainer()->get('dataManager')->updateCacheTimestamp();
+
+        return $layoutManager->get($params['scope'], $params['name']);
+    }
+
+    public function actionPatch($params, $data, $request)
+    {
+        return $this->actionUpdate($params, $data, $request);
+    }
+
+    public function actionResetToDefault($params, $data, $request)
+    {
+        if (!$request->isPost()) {
+            throw new BadRequest();
+        }
+        if (empty($data['scope']) || empty($data['name'])) {
+            throw new BadRequest();
+        }
+
+        return $this->getContainer()->get('layout')->resetToDefault($data['scope'], $data['name']);
+    }
 }
@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,6 +18,13 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
 ************************************************************************/ 

 namespace Espo\Controllers;
@@ -26,7 +33,7 @@ class Metadata extends \Espo\Core\Controllers\Base
 {

    public function actionRead($params, $data)
-	{
-		return $this->getMetadata()->getAll(true);
-	}
+    {
+        return $this->getMetadata()->getAll(true);
+    }
 }
@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,7 +18,14 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
- ************************************************************************/ 
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/

 namespace Espo\Controllers;

@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,43 +18,80 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
- ************************************************************************/ 
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/

 namespace Espo\Controllers;

 use \Espo\Core\Exceptions\Error;

-class Notification extends \Espo\Core\Controllers\Base
+class Notification extends \Espo\Core\Controllers\Record
 {
-	public static $defaultAction = 'list';
+    public static $defaultAction = 'list';

-	public function actionList($params, $data, $request)
-	{
-		$scope = $params['scope'];
-		$id = $params['id'];
-		
-		$userId = $this->getUser()->id;
-		
-		$offset = intval($request->get('offset'));
-		$maxSize = intval($request->get('maxSize'));		
-		
-		$params = array(
-			'offset' => $offset,
-			'maxSize' => $maxSize,
-		);
-		
-		$result = $this->getService('Notification')->getList($userId, $params);	
-		
-		return array(
-			'total' => $result['total'],
-			'list' => $result['collection']->toArray()
-		);
-	}
-	
-	public function actionNotReadCount()
-	{
-		$userId = $this->getUser()->id;
-		return $this->getService('Notification')->getNotReadCount($userId);	
-	}
+    public function actionList($params, $data, $request)
+    {
+        $userId = $this->getUser()->id;
+
+        $offset = intval($request->get('offset'));
+        $maxSize = intval($request->get('maxSize'));
+        $after = $request->get('after');
+
+        $params = array(
+            'offset' => $offset,
+            'maxSize' => $maxSize,
+            'after' => $after
+        );
+
+        $result = $this->getService('Notification')->getList($userId, $params);
+
+        return array(
+            'total' => $result['total'],
+            'list' => $result['collection']->toArray()
+        );
+    }
+
+    public function actionNotReadCount()
+    {
+        $userId = $this->getUser()->id;
+        return $this->getService('Notification')->getNotReadCount($userId);
+    }
+
+    public function postActionMarkAllRead($params, $data, $request)
+    {
+        $userId = $this->getUser()->id;
+        return $this->getService('Notification')->markAllRead($userId);
+    }
+
+    public function actionExport($params, $data, $request)
+    {
+        throw new Error();
+    }
+
+    public function actionMassUpdate($params, $data, $request)
+    {
+        throw new Error();
+    }
+
+    public function actionCreateLink($params, $data, $request)
+    {
+        throw new Error();
+    }
+
+    public function actionRemoveLink($params, $data, $request)
+    {
+        throw new Error();
+    }
+
+    public function actionMerge($params, $data, $request)
+    {
+        throw new Error();
+    }
 }

@@ -0,0 +1,43 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Controllers;
+
+use \Espo\Core\Exceptions\Forbidden;
+
+class Portal extends \Espo\Core\Controllers\Record
+{
+    protected function checkControllerAccess()
+    {
+        $portalPermission = $this->getAcl()->get('portalPermission');
+        if (!$portalPermission || $portalPermission === 'no') {
+            throw new Forbidden();
+        }
+    }
+}
@@ -0,0 +1,34 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Controllers;
+
+class PortalRole extends \Espo\Core\Controllers\Record
+{
+}
@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,75 +18,129 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
- ************************************************************************/ 
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/

 namespace Espo\Controllers;

 use \Espo\Core\Exceptions\Error;
 use \Espo\Core\Exceptions\Forbidden;
+use \Espo\Core\Exceptions\BadRequest;
 use \Espo\Core\Exceptions\NotFound;

 class Preferences extends \Espo\Core\Controllers\Base
-{	
-	protected function getPreferences()
-	{
-		return $this->getContainer()->get('preferences');
-	}
-	
-	protected function getEntityManager()
-	{
-		return $this->getContainer()->get('entityManager');
-	}
-	
-	protected function handleUserAccess($userId)
-	{
-		if (!$this->getUser()->isAdmin()) {
-			if ($this->getUser()->id != $userId) {
-				throw new Forbidden();
-			}
-		}
-	}
-	
-	public function actionPatch($params, $data)
-	{
-		return $this->actionUpdate($params, $data);
-	}	
+{
+    protected function getPreferences()
+    {
+        return $this->getContainer()->get('preferences');
+    }

-	public function actionUpdate($params, $data)
-	{
-		$userId = $params['id'];
-		$this->handleUserAccess($userId);
-		
-		$user = $this->getEntityManager()->getEntity('User', $userId);		
+    protected function getEntityManager()
+    {
+        return $this->getContainer()->get('entityManager');
+    }

-		$entity = $this->getEntityManager()->getEntity('Preferences', $userId);
-		
-		if ($entity) {
-			$entity->set($data);
-			$this->getEntityManager()->saveEntity($entity);
-			
-			$entity->set('smtpEmailAddress', $user->get('emailAddress'));			
-			$entity->set('name', $user->get('name'));
-			
-			return $entity->toArray();		
-		}
-		throw new Error();
-	}
+    protected function getCrypt()
+    {
+        return $this->getContainer()->get('crypt');
+    }
+
+    protected function handleUserAccess($userId)
+    {
+        if (!$this->getUser()->isAdmin()) {
+            if ($this->getUser()->id != $userId) {
+                throw new Forbidden();
+            }
+        }
+    }
+
+    public function actionDelete($params, $data, $request)
+    {
+        $userId = $params['id'];
+        if (empty($userId)) {
+            throw new BadRequest();
+        }
+        if (!$request->isDelete()) {
+            throw new BadRequest();
+        }
+        $this->handleUserAccess($userId);
+
+        return $this->getEntityManager()->getRepository('Preferences')->resetToDefaults($userId);
+    }
+
+    public function actionPatch($params, $data, $request)
+    {
+        return $this->actionUpdate($params, $data, $request);
+    }
+
+    public function actionUpdate($params, $data, $request)
+    {
+        $userId = $params['id'];
+        $this->handleUserAccess($userId);
+
+        if (!$request->isPost() && !$request->isPatch() && !$request->isPut()) {
+            throw new BadRequest();
+        }
+
+        if ($this->getAcl()->getLevel('Preferences', 'read') === 'no') {
+            throw new Forbidden();
+        }
+
+        foreach ($this->getAcl()->getScopeForbiddenAttributeList('Preferences', 'edit') as $attribute) {
+            unset($data[$attribute]);
+        }
+
+        if (array_key_exists('smtpPassword', $data)) {
+            $data['smtpPassword'] = $this->getCrypt()->encrypt($data['smtpPassword']);
+        }
+
+        $user = $this->getEntityManager()->getEntity('User', $userId);
+
+        $entity = $this->getEntityManager()->getEntity('Preferences', $userId);
+
+        if ($entity && $user) {
+            $entity->set($data);
+            $this->getEntityManager()->saveEntity($entity);
+
+            $entity->set('smtpEmailAddress', $user->get('emailAddress'));
+            $entity->set('name', $user->get('name'));
+
+            $entity->clear('smtpPassword');
+
+            return $entity->toArray();
+        }
+        throw new Error();
+    }

    public function actionRead($params)
-	{
-		$userId = $params['id'];
-		$this->handleUserAccess($userId);
+    {
+        $userId = $params['id'];
+        $this->handleUserAccess($userId);

-		$entity = $this->getEntityManager()->getEntity('Preferences', $userId);		
-		$user = $this->getEntityManager()->getEntity('User', $userId);
-		
-		$entity->set('smtpEmailAddress', $user->get('emailAddress'));
-		$entity->set('name', $user->get('name'));
-		if ($entity) {
-			return $entity->toArray();		
-		}
-		throw new NotFound();
-	}
+        $entity = $this->getEntityManager()->getEntity('Preferences', $userId);
+        $user = $this->getEntityManager()->getEntity('User', $userId);
+
+        if (!$entity || !$user) {
+            throw new NotFound();
+        }
+
+        $entity->set('smtpEmailAddress', $user->get('emailAddress'));
+        $entity->set('name', $user->get('name'));
+        $entity->set('isPortalUser', $user->get('isPortalUser'));
+
+        $entity->clear('smtpPassword');
+
+        foreach ($this->getAcl()->getScopeForbiddenAttributeList('Preferences', 'read') as $attribute) {
+            $entity->clear($attribute);
+        }
+
+        return $entity->toArray();
+    }
 }

@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,12 +18,17 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
- ************************************************************************/ 
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/

 namespace Espo\Controllers;

 class Role extends \Espo\Core\Controllers\Record
 {
-
 }
-
@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,17 +18,24 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
 ************************************************************************/ 

 namespace Espo\Controllers;

 class ScheduledJob extends \Espo\Core\Controllers\Record
 {
-	protected function checkControllerAccess()
-	{
-		if (!$this->getUser()->isAdmin()) {
-        	throw new Forbidden();
-		}
-	}
+    protected function checkControllerAccess()
+    {
+        if (!$this->getUser()->isAdmin()) {
+            throw new Forbidden();
+        }
+    }
 }

@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,17 +18,24 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
 ************************************************************************/ 

 namespace Espo\Controllers;

 class ScheduledJobLogRecord extends \Espo\Core\Controllers\Record
 {
-	protected function checkControllerAccess()
-	{
-		if (!$this->getUser()->isAdmin()) {
-        	throw new Forbidden();
-		}
-	}
+    protected function checkControllerAccess()
+    {
+        if (!$this->getUser()->isAdmin()) {
+            throw new Forbidden();
+        }
+    }
 }

@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,51 +18,95 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
 ************************************************************************/

 namespace Espo\Controllers;

 use \Espo\Core\Exceptions\Error;
 use \Espo\Core\Exceptions\Forbidden;
+use \Espo\Core\Exceptions\BadRequest;

 class Settings extends \Espo\Core\Controllers\Base
 {
-	protected function getConfigData()
-	{
-		$data = $this->getConfig()->getData($this->getUser()->isAdmin());
+    protected function getConfigData()
+    {
+        $data = $this->getConfig()->getData($this->getUser()->isAdmin());

-		$fieldDefs = $this->getMetadata()->get('entityDefs.Settings.fields');
+        $fieldDefs = $this->getMetadata()->get('entityDefs.Settings.fields');

-		foreach ($fieldDefs as $field => $d) {
-			if ($d['type'] == 'password') {
-				unset($data[$field]);
-			}
-		}
-		return $data;
-	}
+        foreach ($fieldDefs as $field => $d) {
+            if ($d['type'] == 'password') {
+                unset($data[$field]);
+            }
+        }

-	public function actionRead($params, $data)
-	{
-		return $this->getConfigData();
-	}
+        $data['jsLibs'] = $this->getMetadata()->get('app.jsLibs');

-	public function actionUpdate($params, $data)
-	{
-		return $this->actionPatch($params, $data);
-	}
+        return $data;
+    }

-	public function actionPatch($params, $data)
-	{
-		if (!$this->getUser()->isAdmin()) {
-			throw new Forbidden();
-		}
+    public function actionRead($params, $data)
+    {
+        return $this->getConfigData();
+    }

-		$this->getConfig()->setData($data, $this->getUser()->isAdmin());
-		$result = $this->getConfig()->save();
-		if ($result === false) {
-			throw new Error('Cannot save settings');
-		}
+    public function actionUpdate($params, $data, $request)
+    {
+        return $this->actionPatch($params, $data, $request);
+    }

-		return $this->getConfigData();
-	}
+    public function actionPatch($params, $data, $request)
+    {
+        if (!$this->getUser()->isAdmin()) {
+            throw new Forbidden();
+        }
+
+        if (!$request->isPut() && !$request->isPatch()) {
+            throw new BadRequest();
+        }
+
+        if (isset($data['useCache']) && $data['useCache'] != $this->getConfig()->get('useCache')) {
+            $this->getContainer()->get('dataManager')->clearCache();
+        }
+
+        $this->getConfig()->setData($data, $this->getUser()->isAdmin());
+        $result = $this->getConfig()->save();
+        if ($result === false) {
+            throw new Error('Cannot save settings');
+        }
+
+        /** Rebuild for Currency Settings */
+        if (isset($data['baseCurrency']) || isset($data['currencyRates'])) {
+            $this->getContainer()->get('dataManager')->rebuildDatabase(array());
+        }
+        /** END Rebuild for Currency Settings */
+
+        return $this->getConfigData();
+    }
+
+    public function postActionTestLdapConnection($params, $data)
+    {
+        if (!$this->getUser()->isAdmin()) {
+            throw new Forbidden();
+        }
+
+        if (!isset($data['password'])) {
+            $data['password'] = $this->getConfig()->get('ldapPassword');
+        }
+
+        $ldapUtils = new \Espo\Core\Utils\Authentication\LDAP\Utils();
+        $options = $ldapUtils->normalizeOptions($data);
+
+        $ldapClient = new \Espo\Core\Utils\Authentication\LDAP\Client($options);
+        $ldapClient->bind(); //an exception if no connection
+
+        return true;
+    }
 }
@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,7 +18,14 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
- ************************************************************************/ 
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/

 namespace Espo\Controllers;

@@ -26,38 +33,40 @@ use \Espo\Core\Exceptions\Error;

 class Stream extends \Espo\Core\Controllers\Base
 {
-	const MAX_SIZE_LIMIT = 400;
-	
-	public static $defaultAction = 'list';
+    const MAX_SIZE_LIMIT = 200;
+
+    public static $defaultAction = 'list';

    public function actionList($params, $data, $request)
-	{
-		$scope = $params['scope'];
-		$id = $params['id'];
-		
-		$offset = intval($request->get('offset'));
-		$maxSize = intval($request->get('maxSize'));
-		$after = $request->get('after');
-		
-		$service = $this->getService('Stream');
-		
-		if (empty($maxSize)) {
-			$maxSize = self::MAX_SIZE_LIMIT;
-		}
-		if (!empty($maxSize) && $maxSize > self::MAX_SIZE_LIMIT) {
-			throw new Forbidden();
-		}		
-		
-		$result = $service->find($scope, $id, array(
-			'offset' => $offset,
-			'maxSize' => $maxSize,
-			'after' => $after,
-		));
-		
-		return array(
-			'total' => $result['total'],
-			'list' => $result['collection']->toArray()
-		);
-	}
+    {
+        $scope = $params['scope'];
+        $id = isset($params['id']) ? $params['id'] : null;
+
+        $offset = intval($request->get('offset'));
+        $maxSize = intval($request->get('maxSize'));
+        $after = $request->get('after');
+        $filter = $request->get('filter');
+
+        $service = $this->getService('Stream');
+
+        if (empty($maxSize)) {
+            $maxSize = self::MAX_SIZE_LIMIT;
+        }
+        if (!empty($maxSize) && $maxSize > self::MAX_SIZE_LIMIT) {
+            throw new Forbidden();
+        }
+
+        $result = $service->find($scope, $id, array(
+            'offset' => $offset,
+            'maxSize' => $maxSize,
+            'after' => $after,
+            'filter' => $filter
+        ));
+
+        return array(
+            'total' => $result['total'],
+            'list' => $result['collection']->toArray()
+        );
+    }
 }

@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,12 +18,19 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
- ************************************************************************/ 
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/

 namespace Espo\Controllers;

 class Team extends \Espo\Core\Controllers\Record
 {
-	
+

 }
@@ -0,0 +1,38 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Controllers;
+
+use \Espo\Core\Exceptions\Error;
+
+class Template extends \Espo\Core\Controllers\Record
+{
+
+}
+
@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,40 +18,92 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
- ************************************************************************/ 
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/

 namespace Espo\Controllers;

 use \Espo\Core\Exceptions\Error;
 use \Espo\Core\Exceptions\NotFound;
 use \Espo\Core\Exceptions\Forbidden;
+use \Espo\Core\Exceptions\BadRequest;

 class User extends \Espo\Core\Controllers\Record
-{	
-	public function actionAcl($params, $data, $request)
-	{		
-		$userId = $request->get('id');
-		if (empty($userId)) {
-			throw new Error();
-		}
-		
-		if (!$this->getUser()->isAdmin() && $this->getUser()->id != $userId) {
-			throw new Forbidden();
-		}
-		
-		$user = $this->getEntityManager()->getEntity('User', $userId);
-		if (empty($user)) {
-			throw new NotFound();
-		}
-		
-		$acl = new \Espo\Core\Acl($user);
-		
-		return $acl->toArray();					
-	}
-	
-	public function actionChangeOwnPassword($params, $data)
-	{
-		return $this->getService('User')->changePassword($this->getUser()->id, $data['password']);
-	}
+{
+    public function actionAcl($params, $data, $request)
+    {
+        $userId = $request->get('id');
+        if (empty($userId)) {
+            throw new Error();
+        }
+
+        if (!$this->getUser()->isAdmin() && $this->getUser()->id != $userId) {
+            throw new Forbidden();
+        }
+
+        $user = $this->getEntityManager()->getEntity('User', $userId);
+        if (empty($user)) {
+            throw new NotFound();
+        }
+
+        return $this->getAclManager()->getMap($user);
+    }
+
+    public function postActionChangeOwnPassword($params, $data, $request)
+    {
+        if (!array_key_exists('password', $data) || !array_key_exists('currentPassword', $data)) {
+            throw new BadRequest();
+        }
+        return $this->getService('User')->changePassword($this->getUser()->id, $data['password'], true, $data['currentPassword']);
+    }
+
+    public function postActionChangePasswordByRequest($params, $data, $request)
+    {
+        if (empty($data['requestId']) || empty($data['password'])) {
+            throw new BadRequest();
+        }
+
+        $p = $this->getEntityManager()->getRepository('PasswordChangeRequest')->where(array(
+            'requestId' => $data['requestId']
+        ))->findOne();
+
+        if (!$p) {
+            throw new Forbidden();
+        }
+        $userId = $p->get('userId');
+        if (!$userId) {
+            throw new Error();
+        }
+
+        $this->getEntityManager()->removeEntity($p);
+
+        if ($this->getService('User')->changePassword($userId, $data['password'])) {
+            return array(
+                'url' => $p->get('url')
+            );
+        }
+    }
+
+    public function postActionPasswordChangeRequest($params, $data, $request)
+    {
+        if (empty($data['userName']) || empty($data['emailAddress'])) {
+            throw new BadRequest();
+        }
+
+        $userName = $data['userName'];
+        $emailAddress = $data['emailAddress'];
+        $url = null;
+        if (!empty($data['url'])) {
+            $url = $data['url'];
+        }
+
+        return $this->getService('User')->passwordChangeRequest($userName, $emailAddress, $url);
+    }
 }

@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,248 +18,115 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
- ************************************************************************/ 
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/

 namespace Espo\Core;

-use \Espo\Core\Exceptions\Error;
+use \Espo\ORM\Entity;
+use \Espo\Entities\User;

 class Acl
 {
-	private $data = array();
+    private $user;

-	private $cacheFile;
+    private $aclManager;

-	private $actionList = array('read', 'edit', 'delete');
+    public function __construct(AclManager $aclManager, User $user)
+    {
+        $this->aclManager = $aclManager;
+        $this->user = $user;
+    }

-	private $levelList = array('all', 'team', 'own', 'no');
-	
-	private $fileManager;
+    protected function getAclManager()
+    {
+        return $this->aclManager;
+    }

-	public function __construct(\Espo\Entities\User $user, $config = null, $fileManager = null)
-	{
-		$this->user = $user;		
-		
-		if (!$this->user->isFetched()) {
-			throw new Error();
-		}
-		
-		$this->user->loadLinkMultipleField('teams');
-		
-		if ($fileManager) {
-			$this->fileManager = $fileManager;
-		}
-			
-		$this->cacheFile = 'data/cache/application/acl/' . $user->id . '.php';
-		
-		if ($config && $config->get('useCache') && file_exists($this->cacheFile)) {
-			$cached = include $this->cacheFile;
-			$this->data = $cached;
-			$this->initSolid();
-		} else {
-			$this->load();
-			$this->initSolid();
-			if ($config && $fileManager && $config->get('useCache')) {
-				$this->buildCache();
-			}
-		}
+    protected function getUser()
+    {
+        return $this->user;
+    }

-	}
-	
-	public function checkScope($scope, $action = null, $isOwner = null, $inTeam = null)
-	{
-		if (array_key_exists($scope, $this->data)) {			
-			if ($this->data[$scope] === false) {
-				return false;
-			}
-			if ($this->data[$scope] === true) {
-				return true;
-			}
-			if (!is_null($action)) {		
-				if (array_key_exists($action, $this->data[$scope])) {
-					$value = $this->data[$scope][$action];
-			
-					if ($value === 'all' || $value === true) {
-						return true;					
-					}
-			
-					if (!$value || $value === 'no') {
-						return false;					
-					}					
-				
-					if (is_null($isOwner)) {
-						return true;
-					}
-				
-					if ($isOwner) {
-						if ($value === 'own' || $value === 'team') {
-							return true;
-						}
-					}
-			
-					if ($inTeam) {
-						if ($value === 'team') {
-							return true;
-						}
-					}
-			
-					return false;
-				}
-			}
-			return true;
-		}
-		return true;		
-	}
-	
-	public function toArray()
-	{
-		return $this->data;
-	}
+    public function getMap()
+    {
+        return $this->getAclManager()->getMap($this->getUser());
+    }

-	public function check($subject, $action = null, $isOwner = null, $inTeam = null)
-	{	
-		if ($this->user->isAdmin()) {
-			return true;
-		}
-		if (is_string($subject)) {
-			return $this->checkScope($subject, $action, $isOwner, $inTeam);
-		} else {
-			$entity = $subject;
-			$entityName = $entity->getEntityName();			
-			return $this->checkScope($entityName, $action, $this->checkIsOwner($entity), $this->checkInTeam($entity));
-		}
-	}
-			
-	public function checkReadOnlyTeam($scope)
-	{
-		if (isset($this->data[$scope]) && isset($this->data[$scope]['read'])) {
-			return $this->data[$scope]['read'] === 'team';
-		}
-		return false;
-	}
-	
-	public function checkReadOnlyOwn($scope)
-	{
-		if ($this->user->isAdmin()) {
-			return false;
-		}
-		if (isset($this->data[$scope]) && isset($this->data[$scope]['read'])) {
-			return $this->data[$scope]['read'] === 'own';
-		}
-		return false;
-	}
-	
-	public function checkIsOwner($entity)
-	{
-		if ($this->user->isAdmin()) {
-			return false;
-		}
-		$userId = $this->user->id;
-		if ($userId === $entity->get('assignedUserId') || $userId === $entity->get('createdById')) {
-			return true;
-		}
-		return false;
-	}
-	
-	public function checkInTeam($entity)
-	{
-		$userTeamIds = $this->user->get('teamsIds');
-		$teamIds = $entity->get('teamsIds');
-		
-		foreach ($userTeamIds as $id) {
-			if (in_array($id, $teamIds)) {
-				return true;
-			}
-		}		
-		return false;
-	}
+    public function getLevel($scope, $action)
+    {
+        return $this->getAclManager()->getLevel($this->getUser(), $scope, $action);
+    }

-	private function load()
-	{
-		$aclTables = array();
+    public function get($permission)
+    {
+        return $this->getAclManager()->get($this->getUser(), $permission);
+    }

-		$userRoles = $this->user->get('roles');
-		
-		foreach ($userRoles as $role) {
-			$aclTables[] = json_decode($role->get('data'));
-		}
+    public function checkReadOnlyTeam($scope)
+    {
+        return $this->getAclManager()->checkReadOnlyTeam($this->getUser(), $scope);
+    }

-		$teams = $this->user->get('teams');
-		foreach ($teams as $team) {
-			$teamRoles = $team->get('roles');
-			foreach ($teamRoles as $role) {
-				$aclTables[] = json_decode($role->get('data'));
-			}
-		}
+    public function checkReadOnlyOwn($scope)
+    {
+        return $this->getAclManager()->checkReadOnlyOwn($this->getUser(), $scope);
+    }

-		$this->data = $this->merge($aclTables);
-	}
-	
-	private function initSolid()
-	{
-		$this->data['User'] = array(
-			'read' => 'all',
-			'edit' => 'no',
-			'delete' => 'no',					
-		);
-		$this->data['Team'] = array(
-			'read' => 'all',
-			'edit' => 'no',
-			'delete' => 'no',					
-		);
-		$this->data['Role'] = false;
-		$this->data['Note'] = array(
-			'read' => 'own',
-			'edit' => 'own',
-			'delete' => 'own',					
-		);
-		$this->data['EmailAddress'] = array(
-			'read' => 'no',
-			'edit' => 'no',
-			'delete' => 'no',					
-		);
-		$this->data['Note'] = array(
-			'read' => 'all',
-			'edit' => 'own',
-			'delete' => 'own',					
-		);
-	}
+    public function check($subject, $action = null)
+    {
+        return $this->getAclManager()->check($this->getUser(), $subject, $action);
+    }

-	private function merge($tables)
-	{
-		$data = array();
-		foreach ($tables as $table) {
-			foreach ($table as $scope => $row) {
-				if ($row == false) {
-					if (!isset($data[$scope])) {
-						$data[$scope] = false;
-					}
-				} else {
-					if (!isset($data[$scope])) {
-						$data[$scope] = array();
-					}
-					if ($data[$scope] == false) {
-						$data[$scope] = array();
-					}
-					foreach ($row as $action => $level) {
-						if (!isset($data[$scope][$action])) {
-							$data[$scope][$action] = $level;
-						} else {
-							if (array_search($data[$scope][$action], $this->levelList) > array_search($level, $this->levelList)) {
-								$data[$scope][$action] = $level;
-							}
-						}
-					}
-				}
-			}
-		}
-		return $data;
-	}
+    public function checkScope($scope, $action = null)
+    {
+        return $this->getAclManager()->checkScope($this->getUser(), $scope, $action);
+    }

-	private function buildCache()
-	{
-		$contents = '<' . '?'. 'php return ' .  var_export($this->data, true)  . ';';
-		$this->fileManager->putContents($this->cacheFile, $contents);
-	}
+    public function checkEntity(Entity $entity, $action = 'read')
+    {
+        return $this->getAclManager()->checkEntity($this->getUser(), $entity, $action);
+    }
+
+    public function checkUser($permission, User $entity)
+    {
+        return $this->getAclManager()->checkUser($this->getUser(), $permission, $entity);
+    }
+
+    public function checkIsOwner(Entity $entity)
+    {
+        return $this->getAclManager()->checkIsOwner($this->getUser(), $entity);
+    }
+
+    public function checkInTeam(Entity $entity)
+    {
+        return $this->getAclManager()->checkInTeam($this->getUser(), $entity);
+    }
+
+    public function getScopeForbiddenAttributeList($scope, $action = 'read', $thresholdLevel = 'no')
+    {
+        return $this->getAclManager()->getScopeForbiddenAttributeList($this->getUser(), $scope, $action, $thresholdLevel);
+    }
+
+    public function getScopeForbiddenFieldList($scope, $action = 'read', $thresholdLevel = 'no')
+    {
+        return $this->getAclManager()->getScopeForbiddenFieldList($this->getUser(), $scope, $action, $thresholdLevel);
+    }
+
+    public function checkUserPermission($target, $permissionType = 'userPermission')
+    {
+        return $this->getAclManager()->checkUserPermission($this->getUser(), $target, $permissionType);
+    }
+
+    public function checkAssignmentPermission($target)
+    {
+        return $this->getAclManager()->checkAssignmentPermission($this->getUser(), $target);
+    }
 }

@@ -0,0 +1,273 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Core\Acl;
+
+use \Espo\Core\Interfaces\Injectable;
+
+use \Espo\Entities\User;
+use \Espo\ORM\Entity;
+
+class Base implements Injectable
+{
+    protected $dependencies = array(
+        'config',
+        'entityManager',
+        'aclManager'
+    );
+
+    protected $scope;
+
+    protected $injections = array();
+
+    public function inject($name, $object)
+    {
+        $this->injections[$name] = $object;
+    }
+
+    public function __construct($scope)
+    {
+        $this->init();
+        $this->scope = $scope;
+    }
+
+    protected function init()
+    {
+    }
+
+    protected function getInjection($name)
+    {
+        return $this->injections[$name];
+    }
+
+    protected function addDependencyList(array $list)
+    {
+        foreach ($list as $item) {
+            $this->addDependency($item);
+        }
+    }
+
+    protected function addDependency($name)
+    {
+        $this->dependencies[] = $name;
+    }
+
+    public function getDependencyList()
+    {
+        return $this->dependencies;
+    }
+
+    protected function getConfig()
+    {
+        return $this->getInjection('config');
+    }
+
+    protected function getEntityManager()
+    {
+        return $this->getInjection('entityManager');
+    }
+
+    protected function getAclManager()
+    {
+        return $this->getInjection('aclManager');
+    }
+
+    public function checkReadOnlyTeam(User $user, $data)
+    {
+        if (empty($data) || !is_object($data) || !isset($data->read)) {
+            return false;
+        }
+        return $data->read === 'team';
+    }
+
+    public function checkReadOnlyOwn(User $user, $data)
+    {
+        if (empty($data) || !is_object($data) || !isset($data->read)) {
+            return false;
+        }
+        return $data->read === 'own';
+    }
+
+    public function checkEntity(User $user, Entity $entity, $data, $action)
+    {
+        if ($user->isAdmin()) {
+            return true;
+        }
+        return $this->checkScope($user, $data, $action, $entity);
+    }
+
+    public function checkScope(User $user, $data, $action = null, Entity $entity = null, $entityAccessData = array())
+    {
+        if ($user->isAdmin()) {
+            return true;
+        }
+
+        if (is_null($data)) {
+            return false;
+        }
+        if ($data === false) {
+            return false;
+        }
+        if ($data === true) {
+            return true;
+        }
+        if (is_string($data)) {
+            return true;
+        }
+
+        $isOwner = null;
+        if (isset($entityAccessData['isOwner'])) {
+            $isOwner = $entityAccessData['isOwner'];
+        }
+        $inTeam = null;
+        if (isset($entityAccessData['inTeam'])) {
+            $inTeam = $entityAccessData['inTeam'];
+        }
+
+        if (is_null($action)) {
+            return true;
+        }
+
+        if (!isset($data->$action)) {
+            return true;
+        }
+
+        $value = $data->$action;
+
+        if ($value === 'all' || $value === 'yes' || $value === true) {
+            return true;
+        }
+
+        if (!$value || $value === 'no') {
+            return false;
+        }
+
+        if (is_null($isOwner)) {
+            if ($entity) {
+                $isOwner = $this->checkIsOwner($user, $entity);
+            } else {
+                return true;
+            }
+        }
+
+        if ($isOwner) {
+            if ($value === 'own' || $value === 'team') {
+                return true;
+            }
+        }
+        if (is_null($inTeam) && $entity) {
+            $inTeam = $this->checkInTeam($user, $entity);
+        }
+
+        if ($inTeam) {
+            if ($value === 'team') {
+                return true;
+            }
+        }
+        return false;
+    }
+
+    public function checkIsOwner(User $user, Entity $entity)
+    {
+        if ($entity->hasAttribute('assignedUserId')) {
+            if ($entity->has('assignedUserId')) {
+                if ($user->id === $entity->get('assignedUserId')) {
+                    return true;
+                }
+            }
+        } else if ($entity->hasAttribute('createdById')) {
+            if ($entity->has('createdById')) {
+                if ($user->id === $entity->get('createdById')) {
+                    return true;
+                }
+            }
+        }
+
+        if ($entity->hasAttribute('assignedUsersIds') && $entity->hasRelation('assignedUsers')) {
+            if ($entity->hasLinkMultipleId('assignedUsers', $user->id)) {
+                return true;
+            }
+        }
+
+        return false;
+    }
+
+    public function checkInTeam(User $user, Entity $entity)
+    {
+        $userTeamIdList = $user->getLinkMultipleIdList('teams');
+
+        if (!$entity->hasRelation('teams') || !$entity->hasAttribute('teamsIds')) {
+            return false;
+        }
+
+        $entityTeamIdList = $entity->getLinkMultipleIdList('teams');
+
+        if (empty($entityTeamIdList)) {
+            return false;
+        }
+
+        foreach ($userTeamIdList as $id) {
+            if (in_array($id, $entityTeamIdList)) {
+                return true;
+            }
+        }
+        return false;
+    }
+
+    public function checkEntityDelete(User $user, Entity $entity, $data)
+    {
+        if ($user->isAdmin()) {
+            return true;
+        }
+
+        if ($this->checkEntity($user, $entity, $data, 'delete')) {
+            return true;
+        }
+
+        if (is_object($data)) {
+            if ($data->edit !== 'no' || $data->create !== 'no') {
+                if ($entity->has('createdById') && $entity->get('createdById') == $user->id) {
+                    if (!$entity->has('assignedUserId')) {
+                        return true;
+                    } else {
+                        if (!$entity->get('assignedUserId')) {
+                            return true;
+                        }
+                        if ($entity->get('assignedUserId') == $entity->get('createdById')) {
+                            return true;
+                        }
+                    }
+                }
+            }
+        }
+
+        return false;
+    }
+}
+
@@ -0,0 +1,708 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Core\Acl;
+
+use \Espo\Core\Exceptions\Error;
+
+use \Espo\ORM\Entity;
+use \Espo\Entities\User;
+
+use \Espo\Core\Utils\Config;
+use \Espo\Core\Utils\Metadata;
+use \Espo\Core\Utils\FieldManager;
+use \Espo\Core\Utils\File\Manager as FileManager;
+
+class Table
+{
+    protected $type = 'acl';
+
+    protected $defaultAclType = 'recordAllTeamOwnNo';
+
+    private $data = null;
+
+    protected $cacheFilePath;
+
+    protected $actionList = ['read', 'stream', 'edit', 'delete', 'create'];
+
+    protected $booleanActionList = ['create'];
+
+    protected $levelList = ['yes', 'all', 'team', 'own', 'no'];
+
+    protected $fieldActionList = ['read', 'edit'];
+
+    protected $fieldLevelList = ['yes', 'no'];
+
+    protected $valuePermissionList = ['assignmentPermission', 'userPermission', 'portalPermission'];
+
+    protected $valuePrtmissionHighestLevels = array(
+        'assignmentPermission' => 'all',
+        'userPermission' => 'all',
+        'portalPermission' => 'yes'
+    );
+
+    private $fileManager;
+
+    private $metadata;
+
+    private $fieldManager;
+
+    protected $forbiddenAttributesCache = array();
+
+    protected $forbiddenFieldsCache = array();
+
+    public function __construct(User $user, Config $config = null, FileManager $fileManager = null, Metadata $metadata = null, FieldManager $fieldManager = null)
+    {
+        $this->data = (object) [
+            'table' => (object) [],
+            'fieldTable' => (object) [],
+            'fieldTableQuickAccess' => (object) [],
+        ];
+
+        $this->user = $user;
+
+        $this->metadata = $metadata;
+
+        if ($fieldManager) {
+            $this->fieldManager = $fieldManager;
+        }
+
+        if (!$this->user->isFetched()) {
+            throw new Error('User must be fetched before ACL check.');
+        }
+
+        if ($fileManager) {
+            $this->fileManager = $fileManager;
+        }
+        $this->valuePermissionList = $this->metadata->get('app.' . $this->type . '.defs.valuePermissionList', $this->valuePermissionList);
+
+        $this->initCacheFilePath();
+
+        if ($config && $config->get('useCache') && file_exists($this->cacheFilePath)) {
+            $cached = include $this->cacheFilePath;
+            $this->data = $cached;
+        } else {
+            $this->load();
+            if ($config && $fileManager && $config->get('useCache')) {
+                $this->buildCache();
+            }
+        }
+    }
+
+    protected function initCacheFilePath()
+    {
+        $this->cacheFilePath = 'data/cache/application/acl/' . $this->getUser()->id . '.php';
+    }
+
+    protected function getUser()
+    {
+        return $this->user;
+    }
+
+    protected function getMetadata()
+    {
+        return $this->metadata;
+    }
+
+    protected function getFieldManager()
+    {
+        return $this->fieldManager;
+    }
+
+    protected function getConfig()
+    {
+        return $this->config;
+    }
+
+    public function getMap()
+    {
+        return $this->data;
+    }
+
+    public function getScopeData($scope)
+    {
+        if (isset($this->data->table->$scope)) {
+            $data = $this->data->table->$scope;
+            if (is_string($data)) {
+                $data = $this->getScopeData($data);
+                return $data;
+            }
+            return $data;
+        }
+        return null;
+    }
+
+    public function get($permission)
+    {
+        if ($permission == 'table') {
+            return null;
+        }
+
+        if (isset($this->data->$permission)) {
+            return $this->data->$permission;
+        }
+        return null;
+    }
+
+    public function getLevel($scope, $action)
+    {
+        if (isset($this->data->table->$scope)) {
+            if (isset($this->data->table->$scope->$action)) {
+                return $this->data->table->$scope->$action;
+            }
+        }
+        return false;
+    }
+
+    private function load()
+    {
+        $valuePermissionLists = (object)[];
+        foreach ($this->valuePermissionList as $permission) {
+            $valuePermissionLists->$permission = [];
+        }
+
+        $aclTableList = [];
+        $fieldTableList = [];
+
+        if (!$this->getUser()->isAdmin()) {
+            $roleList = $this->getRoleList();
+
+            foreach ($roleList as $role) {
+                $aclTableList[] = $role->get('data');
+                $fieldTableList[] = $role->get('fieldData');
+                foreach ($this->valuePermissionList as $permission) {
+                    $valuePermissionLists->{$permission}[] = $role->get($permission);
+                }
+            }
+
+            $aclTable = $this->mergeTableList($aclTableList);
+            $fieldTable = $this->mergeFieldTableList($fieldTableList);
+
+            $this->applyDefault($aclTable, $fieldTable);
+            $this->applyDisabled($aclTable, $fieldTable);
+            $this->applyMandatory($aclTable, $fieldTable);
+            $this->applyAdditional($aclTable, $fieldTable, $valuePermissionLists);
+        } else {
+            $aclTable = (object) [];
+            foreach ($this->getScopeList() as $scope) {
+                if ($this->metadata->get("scopes.{$scope}.{$this->type}") === 'boolean') {
+                    $aclTable->$scope = true;
+                } else {
+                    if ($this->metadata->get("scopes.{$scope}.entity")) {
+                        $aclTable->$scope = (object) [];
+                        foreach ($this->actionList as $action) {
+                            $aclTable->$scope->$action = 'all';
+                            if (in_array($action, $this->booleanActionList)) {
+                                $aclTable->$scope->$action = 'yes';
+                            }
+                        }
+                    }
+                }
+            }
+            $fieldTable = (object) [];
+        }
+
+        foreach ($aclTable as $scope => $data) {
+            if (is_string($data)) {
+                if (isset($aclTable->$data)) {
+                    $aclTable->$scope = $aclTable->$data;
+                }
+            }
+        }
+
+        $this->data->table = $aclTable;
+        $this->data->fieldTable = $fieldTable;
+
+        $this->fillFieldTableQuickAccess();
+
+        if (!$this->getUser()->isAdmin()) {
+            foreach ($this->valuePermissionList as $permission) {
+                $this->data->$permission = $this->mergeValueList($valuePermissionLists->$permission, $this->metadata->get('app.'.$this->type.'.default.' . $permission, 'yes'));
+                if ($this->metadata->get('app.'.$this->type.'.mandatory.' . $permission)) {
+                    $this->data->$permission = $this->metadata->get('app.'.$this->type.'.mandatory.' . $permission);
+                }
+            }
+
+        } else {
+            foreach ($this->valuePermissionList as $permission) {
+                if (isset($this->valuePrtmissionHighestLevels[$permission])) {
+                    $this->data->$permission = $this->valuePrtmissionHighestLevels[$permission];
+                    continue;
+                }
+                $this->data->$permission = 'all';
+            }
+        }
+    }
+
+    protected function getRoleList()
+    {
+        $roleList = [];
+
+        $userRoleList = $this->getUser()->get('roles');
+        if (!(is_array($userRoleList) || $userRoleList instanceof \Traversable)) {
+            throw new Error();
+        }
+        foreach ($userRoleList as $role) {
+            $roleList[] = $role;
+        }
+
+        $teamList = $this->getUser()->get('teams');
+        if (!(is_array($teamList) || $teamList instanceof \Traversable)) {
+            throw new Error();
+        }
+        foreach ($teamList as $team) {
+            $teamRoleList = $team->get('roles');
+            foreach ($teamRoleList as $role) {
+                $roleList[] = $role;
+            }
+        }
+
+        return $roleList;
+    }
+
+    public function getScopeForbiddenAttributeList($scope, $action = 'read', $thresholdLevel = 'no')
+    {
+        $key = $scope . '_'. $action . '_' . $thresholdLevel;
+        if (isset($this->forbiddenAttributesCache[$key])) {
+            return $this->forbiddenAttributesCache[$key];
+        }
+
+        $fieldTableQuickAccess = $this->data->fieldTableQuickAccess;
+
+        if (!isset($fieldTableQuickAccess->$scope) || !isset($fieldTableQuickAccess->$scope->attributes) || !isset($fieldTableQuickAccess->$scope->attributes->$action)) {
+            $this->forbiddenAttributesCache[$key] = [];
+            return [];
+        }
+
+        $levelList = [];
+        foreach ($this->fieldLevelList as $level) {
+            if (array_search($level, $this->fieldLevelList) >= array_search($thresholdLevel, $this->fieldLevelList)) {
+                $levelList[] = $level;
+            }
+        }
+
+        $attributeList = [];
+
+        foreach ($levelList as $level) {
+            if (!isset($fieldTableQuickAccess->$scope->attributes->$action->$level)) continue;
+            foreach ($fieldTableQuickAccess->$scope->attributes->$action->$level as $attribute) {
+                if (in_array($attribute, $attributeList)) continue;
+                $attributeList[] = $attribute;
+            }
+        }
+
+        $this->forbiddenAttributesCache[$key] = $attributeList;
+
+        return $attributeList;
+    }
+
+    public function getScopeForbiddenFieldList($scope, $action = 'read', $thresholdLevel = 'no')
+    {
+        $key = $scope . '_'. $action . '_' . $thresholdLevel;
+        if (isset($this->forbiddenFieldsCache[$key])) {
+            return $this->forbiddenFieldsCache[$key];
+        }
+
+        $fieldTableQuickAccess = $this->data->fieldTableQuickAccess;
+
+        if (!isset($fieldTableQuickAccess->$scope) || !isset($fieldTableQuickAccess->$scope->fields) || !isset($fieldTableQuickAccess->$scope->fields->$action)) {
+            $this->forbiddenFieldsCache[$key] = [];
+            return [];
+        }
+
+        $levelList = [];
+        foreach ($this->fieldLevelList as $level) {
+            if (array_search($level, $this->fieldLevelList) >= array_search($thresholdLevel, $this->fieldLevelList)) {
+                $levelList[] = $level;
+            }
+        }
+
+        $fieldList = [];
+
+        foreach ($levelList as $level) {
+            if (!isset($fieldTableQuickAccess->$scope->fields->$action->$level)) continue;
+            foreach ($fieldTableQuickAccess->$scope->fields->$action->$level as $field) {
+                if (in_array($field, $fieldList)) continue;
+                $fieldList[] = $field;
+            }
+        }
+
+        $this->forbiddenFieldsCache[$key] = $fieldList;
+
+        return $fieldList;
+    }
+
+    protected function fillFieldTableQuickAccess()
+    {
+        $fieldTable = $this->data->fieldTable;
+
+        $fieldTableQuickAccess = (object) [];
+
+        foreach (get_object_vars($fieldTable) as $scope => $scopeData) {
+            $fieldTableQuickAccess->$scope = (object) [
+                'attributes' => (object) [],
+                'fields' => (object) []
+            ];
+
+            foreach ($this->fieldActionList as $action) {
+                $fieldTableQuickAccess->$scope->attributes->$action = (object) [];
+                $fieldTableQuickAccess->$scope->fields->$action = (object) [];
+                foreach ($this->fieldLevelList as $level) {
+                    $fieldTableQuickAccess->$scope->attributes->$action->$level = [];
+                    $fieldTableQuickAccess->$scope->fields->$action->$level = [];
+                }
+            }
+
+            foreach (get_object_vars($scopeData) as $field => $fieldData) {
+                $attributeList = $this->getFieldManager()->getAttributeList($scope, $field);
+
+                foreach ($this->fieldActionList as $action) {
+                    if (!isset($fieldData->$action)) continue;
+                    foreach ($this->fieldLevelList as $level) {
+                        if ($fieldData->$action === $level) {
+                            $fieldTableQuickAccess->$scope->fields->$action->{$level}[] = $field;
+                            foreach ($attributeList as $attribute) {
+                                $fieldTableQuickAccess->$scope->attributes->$action->{$level}[] = $attribute;
+                            }
+                        }
+                    }
+                }
+            }
+        }
+
+        $this->data->fieldTableQuickAccess = $fieldTableQuickAccess;
+    }
+
+    protected function applyDefault(&$table, &$fieldTable)
+    {
+        if ($this->getUser()->isAdmin()) {
+            return;
+        }
+
+        $data = $this->metadata->get('app.'.$this->type.'.default.scopeLevel', array());
+
+        foreach ($data as $scope => $item) {
+            if (isset($table->$scope)) continue;
+            $value = $item;
+            if (is_array($item)) {
+                $value = (object) $item;
+            }
+            $table->$scope = $value;
+        }
+
+        $defaultFieldData = $this->metadata->get('app.'.$this->type.'.default.fieldLevel', array());
+
+        foreach ($this->getScopeList() as $scope) {
+            if (isset($table->$scope) && $table->$scope === false) continue;
+            if (!$this->getMetadata()->get('scopes.' . $scope . '.entity')) continue;
+
+            $fieldList = array_keys($this->getMetadata()->get("entityDefs.{$scope}.fields", []));
+
+            $defaultScopeFieldData = $this->metadata->get('app.'.$this->type.'.default.scopeFieldLevel.' . $scope, array());
+
+            foreach (array_merge($defaultFieldData, $defaultScopeFieldData) as $field => $f) {
+                if (!in_array($field, $fieldList)) continue;
+                if (!isset($fieldTable->$scope)) {
+                    $fieldTable->$scope = (object) [];
+                }
+                if (isset($fieldTable->$scope->$field)) continue;
+                $fieldTable->$scope->$field = (object) [];
+                foreach ($this->fieldActionList as $action) {
+                    $level = 'no';
+                    if ($f === true) {
+                        $level = 'yes';
+                    } else {
+                        if (is_array($f) && isset($f[$action])) {
+                            $level = $f[$action];
+                        }
+                    }
+                    $fieldTable->$scope->$field->$action = $level;
+                }
+            }
+        }
+
+        foreach ($this->getScopeWithAclList() as $scope) {
+            if (!isset($table->$scope)) {
+                $aclType = $this->metadata->get('scopes.' . $scope . '.' . $this->type);
+                if ($aclType === true) {
+                    $aclType = $this->defaultAclType;
+                }
+                if (!empty($aclType)) {
+                    $defaultValue = $this->metadata->get('app.'.$this->type.'.scopeLevelTypesDefaults.' . $aclType, $this->metadata->get('app.'.$this->type.'.scopeLevelTypesDefaults.record'));
+                    if (is_array($defaultValue)) {
+                        $defaultValue = (object) $defaultValue;
+                    }
+                    $table->$scope = $defaultValue;
+                }
+            }
+        }
+    }
+
+    protected function applyMandatory(&$table, &$fieldTable)
+    {
+        if ($this->getUser()->isAdmin()) {
+            return;
+        }
+
+        $data = $this->metadata->get('app.'.$this->type.'.mandatory.scopeLevel', array());
+
+        foreach ($data as $scope => $item) {
+            $value = $item;
+            if (is_array($item)) {
+                $value = (object) $item;
+            }
+            $table->$scope = $value;
+        }
+
+        $mandatoryFieldData = $this->metadata->get('app.'.$this->type.'.mandatory.fieldLevel', array());
+
+        foreach ($this->getScopeList() as $scope) {
+            if (isset($table->$scope) && $table->$scope === false) continue;
+            if (!$this->getMetadata()->get('scopes.' . $scope . '.entity')) continue;
+
+            $fieldList = array_keys($this->getMetadata()->get("entityDefs.{$scope}.fields", []));
+
+            $mandatoryScopeFieldData = $this->metadata->get('app.'.$this->type.'.mandatory.scopeFieldLevel.' . $scope, array());
+
+            foreach (array_merge($mandatoryFieldData, $mandatoryScopeFieldData) as $field => $f) {
+                if (!in_array($field, $fieldList)) continue;
+                if (!isset($fieldTable->$scope)) {
+                    $fieldTable->$scope = (object) [];
+                }
+                $fieldTable->$scope->$field = (object) [];
+                foreach ($this->fieldActionList as $action) {
+                    $level = 'no';
+                    if ($f === true) {
+                        $level = 'yes';
+                    } else {
+                        if (is_array($f) && isset($f[$action])) {
+                            $level = $f[$action];
+                        }
+                    }
+                    $fieldTable->$scope->$field->$action = $level;
+                }
+            }
+        }
+    }
+
+    protected function applyDisabled(&$table, &$fieldTable)
+    {
+        if ($this->getUser()->isAdmin()) {
+            return;
+        }
+
+        foreach ($this->getScopeList() as $scope) {
+            if ($this->getMetadata()->get('scopes.' . $scope . '.disabled')) {
+                $table->$scope = false;
+                unset($fieldTable->$scope);
+            }
+        }
+    }
+
+    protected function applyAdditional(&$table, &$fieldTable, &$valuePermissionLists)
+    {
+        if ($this->getUser()->get('isPortalUser')) {
+            foreach ($this->getScopeList() as $scope) {
+                $table->$scope = false;
+                unset($fieldTable->$scope);
+            }
+            foreach ($this->valuePermissionList as $permission) {
+                $valuePermissionLists->{$permission}[] = 'no';
+            }
+        }
+    }
+
+    private function mergeValueList(array $list, $defaultValue)
+    {
+        $result = null;
+        foreach ($list as $level) {
+            if ($level != 'not-set') {
+                if (is_null($result)) {
+                    $result = $level;
+                    continue;
+                }
+                if (array_search($result, $this->levelList) > array_search($level, $this->levelList)) {
+                    $result = $level;
+                }
+            }
+        }
+        if (is_null($result)) {
+            $result = $defaultValue;
+        }
+        return $result;
+    }
+
+    protected function getScopeWithAclList()
+    {
+        $scopeList = [];
+        $scopes = $this->metadata->get('scopes');
+        foreach ($scopes as $scope => $d) {
+        	if (empty($d['acl'])) continue;
+        	$scopeList[] = $scope;
+        }
+        return $scopeList;
+    }
+
+    protected function getScopeList()
+    {
+        $scopeList = [];
+        $scopes = $this->metadata->get('scopes');
+        foreach ($scopes as $scope => $d) {
+            $scopeList[] = $scope;
+        }
+        return $scopeList;
+    }
+
+    private function mergeTableList(array $tableList)
+    {
+        $data = (object) [];
+        $scopeList = $this->getScopeWithAclList();
+
+        foreach ($tableList as $table) {
+            foreach ($scopeList as $scope) {
+            	if (!isset($table->$scope)) continue;
+
+            	$row = $table->$scope;
+
+                if ($row == false) {
+                    if (!isset($data->$scope)) {
+                        $data->$scope = false;
+                    }
+                } else if ($row === true) {
+                    $data->$scope = true;
+                } else {
+                    if (!isset($data->$scope)) {
+                        $data->$scope = (object) [];
+                    }
+                    if ($data->$scope === false) {
+                        $data->$scope = (object) [];
+                    }
+
+                    if (!is_object($row)) continue;
+
+                    foreach ($this->actionList as $i => $action) {
+                        if (isset($row->$action)) {
+                            $level = $row->$action;
+                            if (!isset($data->$scope->$action)) {
+                                $data->$scope->$action = $level;
+                            } else {
+                                if (array_search($data->$scope->$action, $this->levelList) > array_search($level, $this->levelList)) {
+                                    $data->$scope->$action = $level;
+                                }
+                            }
+                        } else {
+                            if ($i > 0) {
+                                // TODO remove it
+                                $previousAction = $this->actionList[$i - 1];
+                                if (in_array($action, $this->booleanActionList)) {
+                                    $data->$scope->$action = 'yes';
+                                } else {
+                                    if (isset($data->$scope->$previousAction)) {
+                                        $data->$scope->$action = $data->$scope->$previousAction;
+                                    }
+                                }
+                            }
+                        }
+                    }
+                }
+            }
+        }
+
+        return $data;
+    }
+
+    private function mergeFieldTableList(array $tableList)
+    {
+        $data = (object) [];
+        $scopeList = $this->getScopeWithAclList();
+
+        foreach ($tableList as $table) {
+            foreach ($scopeList as $scope) {
+                if (!isset($table->$scope)) continue;
+
+                if (!isset($data->$scope)) {
+                    $data->$scope = (object) [];
+                }
+
+                if (!is_object($table->$scope)) continue;
+
+                $fieldList = array_keys($this->getMetadata()->get("entityDefs.{$scope}.fields", []));
+
+                foreach (get_object_vars($table->$scope) as $field => $row) {
+                    if (!is_object($row)) continue;
+
+                    if (!in_array($field, $fieldList)) continue;
+
+                    if (!isset($data->$scope->$field)) {
+                        $data->$scope->$field = (object) [];
+                    }
+
+                    foreach ($this->fieldActionList as $i => $action) {
+                        if (!isset($row->$action)) continue;
+
+                        $level = $row->$action;
+                        if (!isset($data->$scope->$field->$action)) {
+                            $data->$scope->$field->$action = $level;
+                        } else {
+                            if (array_search($data->$scope->$field->$action, $this->fieldLevelList) > array_search($level, $this->fieldLevelList)) {
+                                $data->$scope->$field->$action = $level;
+                            }
+                        }
+                    }
+                }
+            }
+        }
+
+        return $data;
+    }
+
+    private function buildCache()
+    {
+        $contents = '<' . '?'. 'php return ' .  $this->varExport($this->data)  . ';';
+        $this->fileManager->putContents($this->cacheFilePath, $contents);
+    }
+
+    private function varExport($variable)
+    {
+        if ($variable instanceof \StdClass) {
+            $result = '(object) ' . $this->varExport(get_object_vars($variable), true);
+        } else if (is_array($variable)) {
+            $array = array();
+            foreach ($variable as $key => $value) {
+                $array[] = var_export($key, true).' => ' . $this->varExport($value, true);
+            }
+            $result = '['.implode(', ', $array).']';
+        } else {
+            $result = var_export($variable, true);
+        }
+
+        return $result;
+    }
+}
+
@@ -0,0 +1,274 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Core;
+
+use \Espo\Core\Exceptions\Error;
+
+use \Espo\ORM\Entity;
+use \Espo\Entities\User;
+use \Espo\Core\Utils\Util;
+
+class AclManager
+{
+    private $container;
+
+    private $metadata;
+
+    private $implementationHashMap = array();
+
+    private $tableHashMap = array();
+
+    protected $tableClassName = '\\Espo\\Core\\Acl\\Table';
+
+    public function __construct(Container $container)
+    {
+        $this->container = $container;
+        $this->metadata = $container->get('metadata');
+    }
+
+    protected function getContainer()
+    {
+        return $this->container;
+    }
+
+    protected function getMetadata()
+    {
+        return $this->metadata;
+    }
+
+    public function getImplementation($scope)
+    {
+        if (empty($this->implementationHashMap[$scope])) {
+            $normalizedName = Util::normilizeClassName($scope);
+
+            $className = '\\Espo\\Custom\\Acl\\' . $normalizedName;
+            if (!class_exists($className)) {
+                $moduleName = $this->metadata->getScopeModuleName($scope);
+                if ($moduleName) {
+                    $className = '\\Espo\\Modules\\' . $moduleName . '\\Acl\\' . $normalizedName;
+                } else {
+                    $className = '\\Espo\\Acl\\' . $normalizedName;
+                }
+                if (!class_exists($className)) {
+                    $className = '\\Espo\\Core\\Acl\\Base';
+                }
+            }
+
+            if (class_exists($className)) {
+                $acl = new $className($scope);
+                $dependencies = $acl->getDependencyList();
+                foreach ($dependencies as $name) {
+                    $acl->inject($name, $this->getContainer()->get($name));
+                }
+                $this->implementationHashMap[$scope] = $acl;
+            } else {
+                throw new Error();
+            }
+        }
+
+        return $this->implementationHashMap[$scope];
+    }
+
+    protected function getTable(User $user)
+    {
+        $key = $user->id;
+        if (empty($key)) {
+            $key = spl_object_hash($user);
+        }
+
+        if (empty($this->tableHashMap[$key])) {
+            $config = $this->getContainer()->get('config');
+            $fileManager = $this->getContainer()->get('fileManager');
+            $metadata = $this->getContainer()->get('metadata');
+            $fieldManager = $this->getContainer()->get('fieldManager');
+
+            $this->tableHashMap[$key] = new $this->tableClassName($user, $config, $fileManager, $metadata, $fieldManager);
+        }
+
+        return $this->tableHashMap[$key];
+    }
+
+    public function getMap(User $user)
+    {
+        return $this->getTable($user)->getMap();
+    }
+
+    public function getLevel(User $user, $scope, $action)
+    {
+        if ($user->isAdmin()) {
+            return 'all';
+        }
+        return $this->getTable($user)->getLevel($scope, $action);
+    }
+
+    public function get(User $user, $permission)
+    {
+        return $this->getTable($user)->get($permission);
+    }
+
+    public function checkReadOnlyTeam(User $user, $scope)
+    {
+        if ($user->isAdmin()) {
+            return false;
+        }
+        $data = $this->getTable($user)->getScopeData($scope);
+        return $this->getImplementation($scope)->checkReadOnlyTeam($user, $data);
+    }
+
+    public function checkReadOnlyOwn(User $user, $scope)
+    {
+        if ($user->isAdmin()) {
+            return false;
+        }
+        $data = $this->getTable($user)->getScopeData($scope);
+        return $this->getImplementation($scope)->checkReadOnlyOwn($user, $data);
+    }
+
+    public function check(User $user, $subject, $action = null)
+    {
+        if (is_string($subject)) {
+            return $this->checkScope($user, $subject, $action);
+        } else {
+            $entity = $subject;
+            if ($entity instanceof Entity) {
+                return $this->checkEntity($user, $entity, $action);
+            }
+        }
+    }
+
+    public function checkEntity(User $user, Entity $entity, $action = 'read')
+    {
+        $scope = $entity->getEntityType();
+
+        $data = $this->getTable($user)->getScopeData($scope);
+
+        $impl = $this->getImplementation($scope);
+
+        $methodName = 'checkEntity' . ucfirst($action);
+        if (method_exists($impl, $methodName)) {
+            return $impl->$methodName($user, $entity, $data);
+        }
+
+        return $impl->checkEntity($user, $entity, $data, $action);
+    }
+
+    public function checkIsOwner(User $user, Entity $entity)
+    {
+        return $this->getImplementation($entity->getEntityType())->checkIsOwner($user, $entity);
+    }
+
+    public function checkInTeam(User $user, Entity $entity)
+    {
+        return $this->getImplementation($entity->getEntityType())->checkInTeam($user, $entity);
+    }
+
+    public function checkScope(User $user, $scope, $action = null)
+    {
+        $data = $this->getTable($user)->getScopeData($scope);
+        return $this->getImplementation($scope)->checkScope($user, $data, $action);
+    }
+
+    public function checkUser(User $user, $permission, User $entity)
+    {
+        if ($user->isAdmin()) {
+            return true;
+        }
+        if ($this->get($user, $permission) === 'no') {
+            if ($entity->id !== $user->id) {
+                return false;
+            }
+        } else if ($this->get($user, $permission) === 'team') {
+            if ($entity->id != $user->id) {
+                $teamIdList1 = $user->getTeamIdList();
+                $teamIdList2 = $entity->getTeamIdList();
+
+                $inTeam = false;
+                foreach ($teamIdList1 as $id) {
+                    if (in_array($id, $teamIdList2)) {
+                        $inTeam = true;
+                        break;
+                    }
+                }
+                if (!$inTeam) {
+                    return false;
+                }
+            }
+        }
+        return true;
+    }
+
+    public function getScopeForbiddenAttributeList(User $user, $scope, $action = 'read', $thresholdLevel = 'no')
+    {
+        if ($user->isAdmin()) return [];
+        return $this->getTable($user)->getScopeForbiddenAttributeList($scope, $action, $thresholdLevel);
+    }
+
+    public function getScopeForbiddenFieldList(User $user, $scope, $action = 'read', $thresholdLevel = 'no')
+    {
+        if ($user->isAdmin()) return [];
+        return $this->getTable($user)->getScopeForbiddenFieldList($scope, $action, $thresholdLevel);
+    }
+
+    public function checkUserPermission(User $user, $target, $permissionType = 'userPermission')
+    {
+        $permission = $this->get($user, $permissionType);
+
+        if (is_object($target)) {
+            $userId = $target->id;
+        } else {
+            $userId = $target;
+        }
+
+        if ($user->id === $userId) return true;
+
+        if ($permission === 'no') {
+            return false;
+        }
+
+        if ($permission === 'yes') {
+            return true;
+        }
+
+        if ($permission === 'team') {
+            $teamIdList = $user->getLinkMultipleIdList('teams');
+            if (!$this->getContainer()->get('entityManager')->getRepository('User')->checkBelongsToAnyOfTeams($userId, $teamIdList)) {
+                return false;
+            }
+        }
+
+        return true;
+    }
+
+    public function checkAssignmentPermission(User $user, $target)
+    {
+        return $this->checkUserPermission($user, $target, 'assignmentPermission');
+    }
+}
+
@@ -0,0 +1,212 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Core\AclPortal;
+
+use \Espo\Entities\User;
+use \Espo\ORM\Entity;
+
+class Base extends \Espo\Core\Acl\Base
+{
+    public function checkScope(User $user, $data, $action = null, Entity $entity = null, $entityAccessData = array())
+    {
+        if ($user->isAdmin()) {
+            return true;
+        }
+
+        if (is_null($data)) {
+            return false;
+        }
+        if ($data === false) {
+            return false;
+        }
+        if ($data === true) {
+            return true;
+        }
+        if (is_string($data)) {
+            return true;
+        }
+
+        $isOwner = null;
+        if (isset($entityAccessData['isOwner'])) {
+            $isOwner = $entityAccessData['isOwner'];
+        }
+        $inAccount = null;
+        if (isset($entityAccessData['inAccount'])) {
+            $inAccount = $entityAccessData['inAccount'];
+        }
+        $isOwnContact = null;
+        if (isset($entityAccessData['isOwnContact'])) {
+            $isOwnContact = $entityAccessData['isOwnContact'];
+        }
+
+        if (is_null($action)) {
+            return true;
+        }
+
+        if (!isset($data->$action)) {
+            return true;
+        }
+
+        $value = $data->$action;
+
+        if ($value === 'all' || $value === 'yes' || $value === true) {
+            return true;
+        }
+
+        if (!$value || $value === 'no') {
+            return false;
+        }
+
+        if (is_null($isOwner)) {
+            if ($entity) {
+                $isOwner = $this->checkIsOwner($user, $entity);
+            } else {
+                return true;
+            }
+        }
+
+        if ($isOwner) {
+            if ($value === 'own' || $value === 'account' || $value === 'contact') {
+                return true;
+            }
+        }
+
+        if ($value === 'account') {
+            if (is_null($inAccount) && $entity) {
+                $inAccount = $this->checkInAccount($user, $entity);
+            }
+            if ($inAccount) {
+                return true;
+            }
+        }
+
+        if ($value === 'contact') {
+            if (is_null($isOwnContact) && $entity) {
+                $isOwnContact = $this->checkIsOwnContact($user, $entity);
+            }
+            if ($isOwnContact) {
+                return true;
+            }
+        }
+
+        return false;
+
+    }
+
+    public function checkReadOnlyAccount(User $user, $data)
+    {
+        if (empty($data) || !is_object($data) || !isset($data->read)) {
+            return false;
+        }
+        return $data->read === 'account';
+    }
+
+    public function checkReadOnlyContact(User $user, $data)
+    {
+        if (empty($data) || !is_object($data) || !isset($data->read)) {
+            return false;
+        }
+        return $data->read === 'contact';
+    }
+
+    public function checkIsOwner(User $user, Entity $entity)
+    {
+        if ($entity->hasAttribute('createdById')) {
+            if ($entity->has('createdById')) {
+                if ($user->id === $entity->get('createdById')) {
+                    return true;
+                }
+            }
+        }
+        return false;
+    }
+
+    public function checkInAccount(User $user, Entity $entity)
+    {
+        $accountIdList = $user->getLinkMultipleIdList('accounts');
+        if (count($accountIdList)) {
+            if ($entity->hasAttribute('accountId')) {
+                if (in_array($entity->get('accountId'), $accountIdList)) {
+                    return true;
+                }
+            }
+
+            if ($entity->hasRelation('accounts')) {
+                $repository = $this->getEntityManager()->getRepository($entity->getEntityType());
+                foreach ($accountIdList as $accountId) {
+                    if ($repository->isRelated($entity, 'accounts', $accountId)) {
+                        return true;
+                    }
+                }
+            }
+
+            if ($entity->hasAttribute('parentId') && $entity->hasRelation('parent')) {
+                if ($entity->get('parentType') === 'Account') {
+                    if (in_array($entity->get('parentId'), $accountIdList)) {
+                        return true;
+                    }
+                }
+            }
+        }
+
+        return false;
+    }
+
+    public function checkIsOwnContact(User $user, Entity $entity)
+    {
+        $contactId = $user->get('contactId');
+        if ($contactId) {
+            if ($entity->hasAttribute('contactId')) {
+                if ($entity->get('contactId') === $contactId) {
+                    return true;
+                }
+            }
+
+            if ($entity->hasRelation('contacts')) {
+                $repository = $this->getEntityManager()->getRepository($entity->getEntityType());
+                if ($repository->isRelated($entity, 'contacts', $contactId)) {
+                    return true;
+                }
+            }
+
+            if ($entity->hasAttribute('parentId') && $entity->hasRelation('parent')) {
+                if ($entity->get('parentType') === 'Contact') {
+                    if ($entity->get('parentId') === $contactId) {
+                        return true;
+                    }
+                }
+            }
+        }
+
+        return false;
+    }
+
+}
+
@@ -0,0 +1,135 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Core\AclPortal;
+
+use \Espo\Core\Exceptions\Error;
+
+use \Espo\ORM\Entity;
+use \Espo\Entities\User;
+use \Espo\Entities\Portal;
+
+use \Espo\Core\Utils\Config;
+use \Espo\Core\Utils\Metadata;
+use \Espo\Core\Utils\FieldManager;
+use \Espo\Core\Utils\File\Manager as FileManager;
+
+class Table extends \Espo\Core\Acl\Table
+{
+    protected $type = 'aclPortal';
+
+    protected $portal;
+
+    protected $defaultAclType = 'recordAllOwnNo';
+
+    protected $levelList = ['yes', 'all', 'account', 'contact', 'own', 'no'];
+
+    protected $valuePermissionList = [];
+
+    public function __construct(User $user, Portal $portal, Config $config = null, FileManager $fileManager = null, Metadata $metadata = null, FieldManager $fieldManager = null)
+    {
+        if (empty($portal)) {
+            throw new Error("No portal was passed to AclPortal\\Table constructor.");
+        }
+        $this->portal = $portal;
+        parent::__construct($user, $config, $fileManager, $metadata, $fieldManager);
+    }
+
+    protected function getPortal()
+    {
+        return $this->portal;
+    }
+
+    protected function initCacheFilePath()
+    {
+        $this->cacheFilePath = 'data/cache/application/acl-portal/'.$this->getPortal()->id.'/' . $this->getUser()->id . '.php';
+    }
+
+    protected function getRoleList()
+    {
+        $roleList = [];
+
+        $userRoleList = $this->getUser()->get('portalRoles');
+        if (!(is_array($userRoleList) || $userRoleList instanceof \Traversable)) {
+            throw new Error();
+        }
+        foreach ($userRoleList as $role) {
+            $roleList[] = $role;
+        }
+
+        $portalRoleList = $this->getPortal()->get('portalRoles');
+        if (!(is_array($portalRoleList) || $portalRoleList instanceof \Traversable)) {
+            throw new Error();
+        }
+        foreach ($portalRoleList as $role) {
+            $roleList[] = $role;
+        }
+
+        return $roleList;
+    }
+
+    protected function getScopeWithAclList()
+    {
+        $scopeList = [];
+        $scopes = $this->getMetadata()->get('scopes');
+        foreach ($scopes as $scope => $d) {
+            if (empty($d['acl'])) continue;
+            if (empty($d['aclPortal'])) continue;
+            $scopeList[] = $scope;
+        }
+        return $scopeList;
+    }
+
+    protected function applyDefault(&$table, &$fieldTable)
+    {
+        parent::applyDefault($table, $fieldTable);
+
+        foreach ($this->getScopeList() as $scope) {
+            if (!isset($table->$scope)) {
+                $table->$scope = false;
+            }
+        }
+    }
+
+    protected function applyDisabled(&$table, &$fieldTable)
+    {
+        foreach ($this->getScopeList() as $scope) {
+            $d = $this->getMetadata()->get('scopes.' . $scope);
+            if (!empty($d['disabled']) || !empty($d['portalDisabled'])) {
+                $table->$scope = false;
+                unset($fieldTable->$scope);
+            }
+        }
+    }
+
+    protected function applyAdditional(&$table, &$fieldTable, &$valuePermissionLists)
+    {
+    }
+}
+
@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,61 +18,68 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
 ************************************************************************/

 namespace Espo\Core;

-
 class Application
 {
-	private $metadata;
+    private $metadata;

-	private $container;
+    protected $container;

-	private $slim;
+    private $slim;

-	private $auth;
+    private $auth;

-	/**
-     * Constructor
-     */
    public function __construct()
    {
-    	$this->container = new Container();
+        date_default_timezone_set('UTC');

-		date_default_timezone_set('UTC');
+        $this->initContainer();

-		$GLOBALS['log'] = $this->container->get('log');
+        $GLOBALS['log'] = $this->getContainer()->get('log');
+
+        $this->initAutoloads();
    }

-	public function getSlim()
-	{
-		if (empty($this->slim)) {
-			$this->slim = $this->container->get('slim');
-		}
-		return $this->slim;
-	}
-
-	public function getMetadata()
-	{
-		if (empty($this->metadata)) {
-			$this->metadata = $this->container->get('metadata');
-		}
-		return $this->metadata;
-	}
-
-    protected function getAuth()
+    protected function initContainer()
    {
-    	if (empty($this->auth)) {
-    		$this->auth = new \Espo\Core\Utils\Auth($this->container);
-    	}
-    	return $this->auth;
+        $this->container = new Container();
    }

-	public function getContainer()
-	{
-		return $this->container;
-	}
+    public function getSlim()
+    {
+        if (empty($this->slim)) {
+            $this->slim = $this->container->get('slim');
+        }
+        return $this->slim;
+    }
+
+    public function getMetadata()
+    {
+        if (empty($this->metadata)) {
+            $this->metadata = $this->container->get('metadata');
+        }
+        return $this->metadata;
+    }
+
+    protected function createAuth()
+    {
+        return new \Espo\Core\Utils\Auth($this->container);
+    }
+
+    public function getContainer()
+    {
+        return $this->container;
+    }

    public function run($name = 'default')
    {
@@ -83,160 +90,245 @@ class Application

    public function runClient()
    {
-    	$config = $this->getContainer()->get('config');
-
-    	$html = file_get_contents('main.html');
-    	$html = str_replace('{{cacheTimestamp}}', $config->get('cacheTimestamp', 0), $html);
-    	$html = str_replace('{{useCache}}', $config->get('useCache') ? 'true' : 'false' , $html);
-    	echo $html;
-    	exit;
+        $this->getContainer()->get('clientManager')->display();
    }

-    public function runEntryPoint($entryPoint)
+    public function runEntryPoint($entryPoint, $data = array(), $final = false)
    {
-    	if (empty($entryPoint)) {
-    		throw new \Error();
-    	}
+        if (empty($entryPoint)) {
+            throw new \Error();
+        }

-    	$slim = $this->getSlim();
-    	$container = $this->getContainer();
+        $slim = $this->getSlim();
+        $container = $this->getContainer();

-		$slim->get('/', function() {});
+        $slim->any('.*', function() {});

-    	$entryPointManager = new \Espo\Core\EntryPointManager($container);
+        $entryPointManager = new \Espo\Core\EntryPointManager($container);

-    	$auth = $this->getAuth();
-    	$apiAuth = new \Espo\Core\Utils\Api\Auth($auth, $entryPointManager->checkAuthRequired($entryPoint), true);
-    	$slim->add($apiAuth);
+        try {
+            $authRequired = $entryPointManager->checkAuthRequired($entryPoint);
+            $authNotStrict = $entryPointManager->checkNotStrictAuth($entryPoint);
+            if ($authRequired && !$authNotStrict) {
+                if (!$final && $portalId = $this->detectedPortalId()) {
+                    $app = new \Espo\Core\Portal\Application($portalId);
+                    $app->setBasePath($this->getBasePath());
+                    $app->runEntryPoint($entryPoint, $data, true);
+                    exit;
+                }
+            }
+            $auth = new \Espo\Core\Utils\Auth($this->container, $authNotStrict);
+            $apiAuth = new \Espo\Core\Utils\Api\Auth($auth, $authRequired, true);
+            $slim->add($apiAuth);

-		$slim->hook('slim.before.dispatch', function () use ($entryPoint, $entryPointManager, $container) {
-			try {
-				$entryPointManager->run($entryPoint);
-			} catch (\Exception $e) {
-				$container->get('output')->processError($e->getMessage(), $e->getCode(), true);
-			}
-		});
+            $slim->hook('slim.before.dispatch', function () use ($entryPoint, $entryPointManager, $container, $data) {
+                $entryPointManager->run($entryPoint, $data);
+            });

-    	$slim->run();
+            $slim->run();
+        } catch (\Exception $e) {
+            $container->get('output')->processError($e->getMessage(), $e->getCode(), true);
+        }
    }

    public function runCron()
    {
-    	$auth = $this->getAuth();
-    	$auth->useNoAuth(true);
+        $auth = $this->createAuth();
+        $auth->useNoAuth(true);

-    	$cronManager = new \Espo\Core\CronManager($this->container);
-		$cronManager->run();
+        $cronManager = new \Espo\Core\CronManager($this->container);
+        $cronManager->run();
    }

    public function runRebuild()
    {
-    	$dataManager = $this->getContainer()->get('dataManager');
-		$dataManager->rebuild();
+        $dataManager = $this->getContainer()->get('dataManager');
+        $dataManager->rebuild();
+    }
+
+    public function runClearCache()
+    {
+        $dataManager = $this->getContainer()->get('dataManager');
+        $dataManager->clearCache();
    }

    public function isInstalled()
    {
-    	$config = $this->getContainer()->get('config');
+        $config = $this->getContainer()->get('config');

-    	if (file_exists($config->getConfigPath()) && $config->get('isInstalled')) {
-    		return true;
-    	}
+        if (file_exists($config->getConfigPath()) && $config->get('isInstalled')) {
+            return true;
+        }

-		return false;
+        return false;
    }

-	protected function routeHooks()
-	{
-		$container = $this->getContainer();
-		$slim = $this->getSlim();
+    protected function createApiAuth($auth)
+    {
+        return new \Espo\Core\Utils\Api\Auth($auth);
+    }

-		$auth = $this->getAuth();
+    protected function routeHooks()
+    {
+        $container = $this->getContainer();
+        $slim = $this->getSlim();

-		$apiAuth = new \Espo\Core\Utils\Api\Auth($auth);
-		$this->getSlim()->add($apiAuth);
+        try {
+            $auth = $this->createAuth();
+        } catch (\Exception $e) {
+            $container->get('output')->processError($e->getMessage(), $e->getCode());
+        }

-		$this->getSlim()->hook('slim.before.dispatch', function () use ($slim, $container) {
+        $apiAuth = $this->createApiAuth($auth);

-			$route = $slim->router()->getCurrentRoute();
-		    $conditions = $route->getConditions();
+        $this->getSlim()->add($apiAuth);
+        $this->getSlim()->hook('slim.before.dispatch', function () use ($slim, $container) {

-			if (isset($conditions['useController']) && $conditions['useController'] == false) {
-				return;
-			}
+            $route = $slim->router()->getCurrentRoute();
+            $conditions = $route->getConditions();

-			$routeOptions = call_user_func($route->getCallable());
-			$routeKeys = is_array($routeOptions) ? array_keys($routeOptions) : array();
+            if (isset($conditions['useController']) && $conditions['useController'] == false) {
+                return;
+            }

-			if (!in_array('controller', $routeKeys, true)) {
-				return $container->get('output')->render($routeOptions);
-			}
+            $routeOptions = call_user_func($route->getCallable());
+            $routeKeys = is_array($routeOptions) ? array_keys($routeOptions) : array();

-			$params = $route->getParams();
-			$data = $slim->request()->getBody();
+            if (!in_array('controller', $routeKeys, true)) {
+                return $container->get('output')->render($routeOptions);
+            }

-			foreach ($routeOptions as $key => $value) {
-				if (strstr($value, ':')) {
-					$paramName = str_replace(':', '', $value);
-					$value = $params[$paramName];
-				}
-				$controllerParams[$key] = $value;
-			}
+            $params = $route->getParams();
+            $data = $slim->request()->getBody();

-			$params = array_merge($params, $controllerParams);
+            foreach ($routeOptions as $key => $value) {
+                if (strstr($value, ':')) {
+                    $paramName = str_replace(':', '', $value);
+                    $value = $params[$paramName];
+                }
+                $controllerParams[$key] = $value;
+            }

-			$controllerName = ucfirst($controllerParams['controller']);
+            $params = array_merge($params, $controllerParams);

-			if (!empty($controllerParams['action'])) {
-				$actionName = $controllerParams['action'];
-			} else {
-				$httpMethod = strtolower($slim->request()->getMethod());
-				$crudList = $container->get('config')->get('crud');
-				$actionName = $crudList[$httpMethod];
-			}
+            $controllerName = ucfirst($controllerParams['controller']);

-			try {
-				$controllerManager = new \Espo\Core\ControllerManager($container);
-				$result = $controllerManager->process($controllerName, $actionName, $params, $data, $slim->request());
-				$container->get('output')->render($result);
-			} catch (\Exception $e) {
-				$container->get('output')->processError($e->getMessage(), $e->getCode());
-			}
-		});
+            if (!empty($controllerParams['action'])) {
+                $actionName = $controllerParams['action'];
+            } else {
+                $httpMethod = strtolower($slim->request()->getMethod());
+                $crudList = $container->get('config')->get('crud');
+                $actionName = $crudList[$httpMethod];
+            }

-		$this->getSlim()->hook('slim.after.router', function () use (&$slim) {
-			$slim->contentType('application/json');
+            try {
+                $controllerManager = new \Espo\Core\ControllerManager($container);
+                $result = $controllerManager->process($controllerName, $actionName, $params, $data, $slim->request());
+                $container->get('output')->render($result);
+            } catch (\Exception $e) {
+                $container->get('output')->processError($e->getMessage(), $e->getCode());
+            }
+        });

-			$res = $slim->response();
-			$res->header('Expires', '0');
-			$res->header('Last-Modified', gmdate("D, d M Y H:i:s") . " GMT");
-			$res->header('Cache-Control', 'no-store, no-cache, must-revalidate, post-check=0, pre-check=0');
-			$res->header('Pragma', 'no-cache');
-		});
-	}
+        $this->getSlim()->hook('slim.after.router', function () use (&$slim) {
+            $slim->contentType('application/json');
+
+            $res = $slim->response();
+            $res->header('Expires', '0');
+            $res->header('Last-Modified', gmdate("D, d M Y H:i:s") . " GMT");
+            $res->header('Cache-Control', 'no-store, no-cache, must-revalidate, post-check=0, pre-check=0');
+            $res->header('Pragma', 'no-cache');
+        });
+    }
+
+    protected function getRouteList()
+    {
+        $routes = new \Espo\Core\Utils\Route($this->getContainer()->get('config'), $this->getMetadata(), $this->getContainer()->get('fileManager'));


-	protected function initRoutes()
-	{
-		$routes = new \Espo\Core\Utils\Route($this->getContainer()->get('config'), $this->getMetadata(), $this->getContainer()->get('fileManager'));
-		$crudList = array_keys( $this->getContainer()->get('config')->get('crud') );
+        return $routes->getAll();
+    }

-		foreach ($routes->getAll() as $route) {
+    protected function initRoutes()
+    {
+        $crudList = array_keys($this->getContainer()->get('config')->get('crud'));

-			$method = strtolower($route['method']);
-			if (!in_array($method, $crudList)) {
-				$GLOBALS['log']->error('Route: Method ['.$method.'] does not exist. Please check your route ['.$route['route'].']');
-				continue;
-			}
+        foreach ($this->getRouteList() as $route) {
+            $method = strtolower($route['method']);
+            if (!in_array($method, $crudList)) {
+                $GLOBALS['log']->error('Route: Method ['.$method.'] does not exist. Please check your route ['.$route['route'].']');
+                continue;
+            }

            $currentRoute = $this->getSlim()->$method($route['route'], function() use ($route) {   //todo change "use" for php 5.4
-	        	return $route['params'];
-			});
+                return $route['params'];
+            });

-			if (isset($route['conditions'])) {
-            	$currentRoute->conditions($route['conditions']);
-			}
-		}
-	}
+            if (isset($route['conditions'])) {
+                $currentRoute->conditions($route['conditions']);
+            }
+        }
+    }
+
+    protected function initAutoloads()
+    {
+        $autoload = new \Espo\Core\Utils\Autoload($this->getContainer()->get('config'), $this->getMetadata(), $this->getContainer()->get('fileManager'));
+
+        try {
+            $autoloadList = $autoload->getAll();
+        } catch (\Exception $e) {} //bad permissions
+
+        if (empty($autoloadList)) {
+            return;
+        }
+
+        $namespacesPath = 'vendor/composer/autoload_namespaces.php';
+        $existingNamespaces = file_exists($namespacesPath) ? include($namespacesPath) : array();
+        if (!empty($existingNamespaces) && is_array($existingNamespaces)) {
+            $existingNamespaces = array_keys($existingNamespaces);
+        }
+
+        $classLoader = new \Composer\Autoload\ClassLoader();
+
+        foreach ($autoloadList as $prefix => $path) {
+            if (!in_array($prefix, $existingNamespaces)) {
+                $classLoader->add($prefix, $path);
+            }
+        }
+
+        $classLoader->register(true);
+    }
+
+    public function setBasePath($basePath)
+    {
+        $this->getContainer()->get('clientManager')->setBasePath($basePath);
+    }
+
+    public function getBasePath()
+    {
+        return $this->getContainer()->get('clientManager')->getBasePath();
+    }
+
+    public function detectedPortalId()
+    {
+        if (!empty($_GET['portalId'])) {
+            return $_GET['portalId'];
+        }
+        if (!empty($_COOKIE['auth-token'])) {
+            $token = $this->getContainer()->get('entityManager')->getRepository('AuthToken')->where(array('token' => $_COOKIE['auth-token']))->findOne();
+
+            if ($token && $token->get('portalId')) {
+                return $token->get('portalId');
+            }
+        }
+        return null;
+    }
+
+    public function setupSystemUser()
+    {
+        $user = $this->getContainer()->get('entityManager')->getEntity('User', 'system');
+        $this->getContainer()->setUser($user);
+        $this->getContainer()->get('entityManager')->setUser($user);
+    }
 }

@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,6 +18,13 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
 ************************************************************************/

 namespace Espo\Core;
@@ -25,199 +32,293 @@ namespace Espo\Core;
 class Container
 {

-	private $data = array();
+    private $data = array();


-	/**
+    /**
     * Constructor
     */
    public function __construct()
    {
-
    }

    public function get($name)
    {
-    	if (empty($this->data[$name])) {
-    		$this->load($name);
-    	}
-    	return $this->data[$name];
+        if (empty($this->data[$name])) {
+            $this->load($name);
+        }
+        if (isset($this->data[$name])) {
+            return $this->data[$name];
+        }
+        return null;
+    }
+
+    protected function set($name, $obj)
+    {
+        $this->data[$name] = $obj;
    }

    private function load($name)
    {
-    	$loadMethod = 'load' . ucfirst($name);
-    	if (method_exists($this, $loadMethod)) {
-    		$obj = $this->$loadMethod();
-    		$this->data[$name] = $obj;
-    	} else {
-            //external loader class \Espo\Core\Loaders\<className> or \Espo\Custom\Core\Loaders\<className> with load() method
-			$className = '\Espo\Custom\Core\Loaders\\'.ucfirst($name);
-            if (!class_exists($className)) {
-            	$className = '\Espo\Core\Loaders\\'.ucfirst($name);
+        $loadMethod = 'load' . ucfirst($name);
+        if (method_exists($this, $loadMethod)) {
+            $obj = $this->$loadMethod();
+            $this->data[$name] = $obj;
+        } else {
+
+            try {
+                $className = $this->get('metadata')->get('app.loaders.' . ucfirst($name));
+            } catch (\Exception $e) {}
+
+            if (!isset($className) || !class_exists($className)) {
+                $className = '\Espo\Custom\Core\Loaders\\'.ucfirst($name);
+                if (!class_exists($className)) {
+                    $className = '\Espo\Core\Loaders\\'.ucfirst($name);
+                }
            }

-			if (class_exists($className)) {
-            	 $loadClass = new $className($this);
-				 $this->data[$name] = $loadClass->load();
-			}
-    	}
+            if (class_exists($className)) {
+                 $loadClass = new $className($this);
+                 $this->data[$name] = $loadClass->load();
+            }
+        }

-		// TODO throw an exception
-    	return null;
+        return null;
    }

-    private function loadSlim()
+    protected function getServiceClassName($name, $default)
+    {
+        $metadata = $this->get('metadata');
+        $className = $metadata->get('app.serviceContainer.classNames.' . $name, $default);
+        return $className;
+    }
+
+    protected function loadLog()
+    {
+        $config = $this->get('config');
+
+        $path = $config->get('logger.path', 'data/logs/espo.log');
+        $rotation = $config->get('logger.rotation', true);
+
+        $log = new \Espo\Core\Utils\Log('Espo');
+        $levelCode = $log->getLevelCode($config->get('logger.level', 'WARNING'));
+
+        if ($rotation) {
+            $maxFileNumber = $config->get('logger.maxFileNumber', 30);
+            $handler = new \Espo\Core\Utils\Log\Monolog\Handler\RotatingFileHandler($path, $maxFileNumber, $levelCode);
+        } else {
+            $handler = new \Espo\Core\Utils\Log\Monolog\Handler\StreamHandler($path, $levelCode);
+        }
+        $log->pushHandler($handler);
+
+        $errorHandler = new \Monolog\ErrorHandler($log);
+        $errorHandler->registerExceptionHandler(null, false);
+        $errorHandler->registerErrorHandler(array(), false);
+
+        return $log;
+    }
+
+    protected function loadContainer()
+    {
+        return $this;
+    }
+
+    protected function loadSlim()
    {
-        //return new \Slim\Slim();
        return new \Espo\Core\Utils\Api\Slim();
    }

-	private function loadFileManager()
+    protected function loadFileManager()
    {
-    	return new \Espo\Core\Utils\File\Manager(
-			$this->get('config')
-		);
+        return new \Espo\Core\Utils\File\Manager(
+            $this->get('config')
+        );
    }

-	private function loadPreferences()
+    protected function loadPreferences()
    {
-    	return $this->get('entityManager')->getEntity('Preferences', $this->get('user')->id);
+        return $this->get('entityManager')->getEntity('Preferences', $this->get('user')->id);
    }

-	private function loadConfig()
+    protected function loadConfig()
    {
-    	return new \Espo\Core\Utils\Config(
-			new \Espo\Core\Utils\File\Manager()
-		);
+        return new \Espo\Core\Utils\Config(
+            new \Espo\Core\Utils\File\Manager()
+        );
    }

-	private function loadHookManager()
+    protected function loadHookManager()
    {
-    	return new \Espo\Core\HookManager(
-			$this
-		);
+        return new \Espo\Core\HookManager(
+            $this
+        );
    }

-	private function loadOutput()
+    protected function loadOutput()
    {
-    	return new \Espo\Core\Utils\Api\Output(
-			$this->get('slim')
-		);
+        return new \Espo\Core\Utils\Api\Output(
+            $this->get('slim')
+        );
    }

-	private function loadMailSender()
+    protected function loadMailSender()
    {
-    	return new \Espo\Core\Mail\Sender(
-			$this->get('config')
-		);
+        $className = $this->getServiceClassName('mailSernder', '\\Espo\\Core\\Mail\\Sender');
+        return new $className(
+            $this->get('config'),
+            $this->get('entityManager')
+        );
    }

-	private function loadDateTime()
+    protected function loadDateTime()
    {
-    	return new \Espo\Core\Utils\DateTime(
-			$this->get('config')->get('dateFormat'),
-			$this->get('config')->get('timeFormat'),
-			$this->get('config')->get('timeZone')
-		);
+        return new \Espo\Core\Utils\DateTime(
+            $this->get('config')->get('dateFormat'),
+            $this->get('config')->get('timeFormat'),
+            $this->get('config')->get('timeZone')
+        );
    }

-	private function loadServiceFactory()
+    protected function loadNumber()
    {
-    	return new \Espo\Core\ServiceFactory(
-			$this
-		);
+        return new \Espo\Core\Utils\Number(
+            $this->get('config')->get('decimalMark'),
+            $this->get('config')->get('thousandSeparator')
+        );
    }

-	private function loadSelectManagerFactory()
+    protected function loadServiceFactory()
    {
-    	return new \Espo\Core\SelectManagerFactory(
-			$this->get('entityManager'),
-			$this->get('user'),
-			$this->get('acl'),
-			$this->get('metadata')
-		);
+        return new \Espo\Core\ServiceFactory(
+            $this
+        );
    }

-	private function loadMetadata()
+    protected function loadSelectManagerFactory()
    {
-    	return new \Espo\Core\Utils\Metadata(
-			$this->get('config'),
-			$this->get('fileManager')
-		);
+        return new \Espo\Core\SelectManagerFactory(
+            $this->get('entityManager'),
+            $this->get('user'),
+            $this->get('acl'),
+            $this->get('aclManager'),
+            $this->get('metadata'),
+            $this->get('config')
+        );
    }

-	private function loadLayout()
+    protected function loadMetadata()
    {
-    	return new \Espo\Core\Utils\Layout(
-			$this->get('fileManager'),
-			$this->get('metadata')
-		);
+        return new \Espo\Core\Utils\Metadata(
+            $this->get('config'),
+            $this->get('fileManager')
+        );
    }

-	private function loadAcl()
-	{
-		return new \Espo\Core\Acl(
-			$this->get('user'),
-			$this->get('config'),
-			$this->get('fileManager')
-		);
-	}
+    protected function loadLayout()
+    {
+        return new \Espo\Core\Utils\Layout(
+            $this->get('fileManager'),
+            $this->get('metadata'),
+            $this->get('user')
+        );
+    }

-	private function loadSchema()
-	{
-		return new \Espo\Core\Utils\Database\Schema\Schema(
-			$this->get('config'),
-			$this->get('metadata'),
-			$this->get('fileManager'),
-			$this->get('entityManager'),
-			$this->get('classParser')
-		);
-	}
+    protected function loadAclManager()
+    {
+        $className = $this->getServiceClassName('acl', '\\Espo\\Core\\AclManager');
+        return new $className(
+            $this->get('container')
+        );
+    }

-	private function loadClassParser()
-	{
-		return new \Espo\Core\Utils\File\ClassParser(
-			$this->get('fileManager'),
-			$this->get('config'),
-			$this->get('metadata')
-		);
-	}
+    protected function loadAcl()
+    {
+        $className = $this->getServiceClassName('acl', '\\Espo\\Core\\Acl');
+        return new $className(
+            $this->get('aclManager'),
+            $this->get('user')
+        );
+    }

-	private function loadLanguage()
-	{
-		return new \Espo\Core\Utils\Language(
-			$this->get('fileManager'),
-			$this->get('config'),
-			$this->get('preferences')
-		);
-	}
+    protected function loadSchema()
+    {
+        return new \Espo\Core\Utils\Database\Schema\Schema(
+            $this->get('config'),
+            $this->get('metadata'),
+            $this->get('fileManager'),
+            $this->get('entityManager'),
+            $this->get('classParser')
+        );
+    }

-	private function loadScheduledJob()
-	{
-		return new \Espo\Core\Cron\ScheduledJob(
-			$this
-		);
-	}
+    protected function loadClassParser()
+    {
+        return new \Espo\Core\Utils\File\ClassParser(
+            $this->get('fileManager'),
+            $this->get('config'),
+            $this->get('metadata')
+        );
+    }

-	private function loadDataManager()
-	{
-		return new \Espo\Core\DataManager(
-			$this
-		);
-	}
+    protected function loadLanguage()
+    {
+        return new \Espo\Core\Utils\Language(
+            $this->get('fileManager'),
+            $this->get('config'),
+            $this->get('metadata'),
+            $this->get('preferences')
+        );
+    }

-	private function loadFieldManager()
-	{
-		return new \Espo\Core\Utils\FieldManager(
-			$this->get('metadata'),
-			$this->get('language')
-		);
-	}
+    protected function loadCrypt()
+    {
+        return new \Espo\Core\Utils\Crypt(
+            $this->get('config')
+        );
+    }

-	public function setUser($user)
-	{
-		$this->data['user'] = $user;
-	}
+    protected function loadScheduledJob()
+    {
+        return new \Espo\Core\Utils\ScheduledJob(
+            $this
+        );
+    }
+
+    protected function loadDataManager()
+    {
+        return new \Espo\Core\DataManager(
+            $this
+        );
+    }
+
+    protected function loadFieldManager()
+    {
+        return new \Espo\Core\Utils\FieldManager(
+            $this->get('metadata'),
+            $this->get('language'),
+            $this
+        );
+    }
+
+    protected function loadThemeManager()
+    {
+        return new \Espo\Core\Utils\ThemeManager(
+            $this->get('config'),
+            $this->get('metadata')
+        );
+    }
+
+    protected function loadClientManager()
+    {
+        return new \Espo\Core\Utils\ClientManager(
+            $this->get('config'),
+            $this->get('themeManager')
+        );
+    }
+
+    public function setUser(\Espo\Entities\User $user)
+    {
+        $this->set('user', $user);
+    }
 }

@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,6 +18,13 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
 ************************************************************************/

 namespace Espo\Core;
@@ -27,88 +34,97 @@ use \Espo\Core\Exceptions\NotFound;

 class ControllerManager
 {
-	private $config;
+    private $config;

-	private $metadata;
+    private $metadata;

-	private $container;
+    private $container;

-	public function __construct(\Espo\Core\Container $container)
-	{
-		$this->container = $container;
+    public function __construct(\Espo\Core\Container $container)
+    {
+        $this->container = $container;

-		$this->config = $this->container->get('config');
-		$this->metadata = $this->container->get('metadata');
-	}
+        $this->config = $this->container->get('config');
+        $this->metadata = $this->container->get('metadata');
+    }

    protected function getConfig()
-	{
-		return $this->config;
-	}
+    {
+        return $this->config;
+    }

-	protected function getMetadata()
-	{
-		return $this->metadata;
-	}
+    protected function getMetadata()
+    {
+        return $this->metadata;
+    }

-	public function process($controllerName, $actionName, $params, $data, $request)
-	{
-		$customeClassName = '\\Espo\\Custom\\Controllers\\' . Util::normilizeClassName($controllerName);
-		if (class_exists($customeClassName)) {
-			$controllerClassName = $customeClassName;
-		} else {
-			$moduleName = $this->metadata->getScopeModuleName($controllerName);
-			if ($moduleName) {
-				$controllerClassName = '\\Espo\\Modules\\' . $moduleName . '\\Controllers\\' . Util::normilizeClassName($controllerName);
-			} else {
-				$controllerClassName = '\\Espo\\Controllers\\' . Util::normilizeClassName($controllerName);
-			}
-		}
+    public function process($controllerName, $actionName, $params, $data, $request)
+    {
+        $customeClassName = '\\Espo\\Custom\\Controllers\\' . Util::normilizeClassName($controllerName);
+        if (class_exists($customeClassName)) {
+            $controllerClassName = $customeClassName;
+        } else {
+            $moduleName = $this->metadata->getScopeModuleName($controllerName);
+            if ($moduleName) {
+                $controllerClassName = '\\Espo\\Modules\\' . $moduleName . '\\Controllers\\' . Util::normilizeClassName($controllerName);
+            } else {
+                $controllerClassName = '\\Espo\\Controllers\\' . Util::normilizeClassName($controllerName);
+            }
+        }

-		if ($data && stristr($request->getContentType(), 'application/json')) {
-			$data = json_decode($data);
-		}
+        if ($data && stristr($request->getContentType(), 'application/json')) {
+            $data = json_decode($data);
+        }


-		if ($data instanceof \stdClass) {
-			$data = get_object_vars($data);
-		}
+        if ($data instanceof \stdClass) {
+            $data = get_object_vars($data);
+        }

-		if (!class_exists($controllerClassName)) {
-			throw new NotFound("Controller '$controllerName' is not found");
-		}
+        if (!class_exists($controllerClassName)) {
+            throw new NotFound("Controller '$controllerName' is not found");
+        }

-		$controller = new $controllerClassName($this->container);
+        $controller = new $controllerClassName($this->container, $request->getMethod());

-		if ($actionName == 'index') {
-			$actionName = $controllerClassName::$defaultAction;
-		}
+        if ($actionName == 'index') {
+            $actionName = $controllerClassName::$defaultAction;
+        }

-		$actionNameUcfirst = ucfirst($actionName);
+        $actionNameUcfirst = ucfirst($actionName);

-		$beforeMethodName = 'before' . $actionNameUcfirst;
-		if (method_exists($controller, $beforeMethodName)) {
-			$controller->$beforeMethodName($params, $data, $request);
-		}
-		$actionMethodName = 'action' . $actionNameUcfirst;
+        $beforeMethodName = 'before' . $actionNameUcfirst;
+        $actionMethodName = 'action' . $actionNameUcfirst;
+        $afterMethodName = 'after' . $actionNameUcfirst;

-		if (!method_exists($controller, $actionMethodName)) {
-			throw new NotFound("Action '$actionMethodName' does not exist in controller '$controller'");
-		}
+        $fullActionMethodName = strtolower($request->getMethod()) . ucfirst($actionMethodName);

-		$result = $controller->$actionMethodName($params, $data, $request);
+        if (method_exists($controller, $fullActionMethodName)) {
+            $primaryActionMethodName = $fullActionMethodName;
+        } else {
+            $primaryActionMethodName = $actionMethodName;
+        }

-		$afterMethodName = 'after' . $actionNameUcfirst;
-		if (method_exists($controller, $afterMethodName)) {
-			$controller->$afterMethodName($params, $data, $request);
-		}
+        if (!method_exists($controller, $primaryActionMethodName)) {
+            throw new NotFound("Action '$actionName' (".$request->getMethod().") does not exist in controller '$controllerName'");
+        }

-		if (is_array($result) || is_bool($result)) {
-        	return \Espo\Core\Utils\Json::encode($result);
-		}
+        if (method_exists($controller, $beforeMethodName)) {
+            $controller->$beforeMethodName($params, $data, $request);
+        }

-		return $result;
-	}
+        $result = $controller->$primaryActionMethodName($params, $data, $request);
+
+        if (method_exists($controller, $afterMethodName)) {
+            $controller->$afterMethodName($params, $data, $request);
+        }
+
+        if (is_array($result) || is_bool($result) || $result instanceof \StdClass) {
+            return \Espo\Core\Utils\Json::encode($result);
+        }
+
+        return $result;
+    }

 }

@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,80 +18,112 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
- ************************************************************************/ 
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/

 namespace Espo\Core\Controllers;
-
 use \Espo\Core\Container;
 use \Espo\Core\ServiceFactory;
 use \Espo\Core\Utils\Util;

 abstract class Base
 {
-	protected $name;
-	
-	private $container;
-	
-	public static $defaultAction = 'index';
+    protected $name;

-	public function __construct(Container $container)
-	{
-		$this->container = $container;
-		
-		if (empty($this->name)) {
-			$name = get_class($this);
-			if (preg_match('@\\\\([\w]+)$@', $name, $matches)) {
-		    	$name = $matches[1];
-			}
-			$this->name = $name;
-    	}
-    	
-    	$this->checkControllerAccess();
-	}
-	
-	protected function checkControllerAccess()
-	{
-		return;
-	}
-	
-	protected function getContainer()
-	{
-		return $this->container;
-	}
-	
-	protected function getUser()
-	{
-		return $this->container->get('user');
-	}
-	
-	protected function getAcl()
-	{
-		return $this->container->get('acl');
-	}
-	
-	protected function getConfig()
-	{
-		return $this->container->get('config');
-	}
-	
-	protected function getPreferences()
-	{
-		return $this->container->get('preferences');
-	}
-	
-	protected function getMetadata()
-	{
-		return $this->container->get('metadata');
-	}
+    private $container;

-	protected function getServiceFactory()
-	{
-		return $this->container->get('serviceFactory');
-	}
-	
-	protected function getService($name)
-	{
-		return $this->getServiceFactory()->create($name);
-	}
+    private $requestMethod;
+
+    public static $defaultAction = 'index';
+
+    public function __construct(Container $container, $requestMethod = null)
+    {
+        $this->container = $container;
+
+        if (isset($requestMethod)) {
+            $this->setRequestMethod($requestMethod);
+        }
+
+        if (empty($this->name)) {
+            $name = get_class($this);
+            if (preg_match('@\\\\([\w]+)$@', $name, $matches)) {
+                $name = $matches[1];
+            }
+            $this->name = $name;
+        }
+
+        $this->checkControllerAccess();
+    }
+
+    protected function checkControllerAccess()
+    {
+        return;
+    }
+
+    protected function getContainer()
+    {
+        return $this->container;
+    }
+
+    /**
+     * Get request method name (Uppercase)
+     *
+     * @return string
+     */
+    protected function getRequestMethod()
+    {
+        return $this->requestMethod;
+    }
+
+    protected function setRequestMethod($requestMethod)
+    {
+        $this->requestMethod = strtoupper($requestMethod);
+    }
+
+    protected function getUser()
+    {
+        return $this->container->get('user');
+    }
+
+    protected function getAcl()
+    {
+        return $this->container->get('acl');
+    }
+
+    protected function getAclManager()
+    {
+        return $this->container->get('aclManager');
+    }
+
+    protected function getConfig()
+    {
+        return $this->container->get('config');
+    }
+
+    protected function getPreferences()
+    {
+        return $this->container->get('preferences');
+    }
+
+    protected function getMetadata()
+    {
+        return $this->container->get('metadata');
+    }
+
+    protected function getServiceFactory()
+    {
+        return $this->container->get('serviceFactory');
+    }
+
+    protected function getService($name)
+    {
+        return $this->getServiceFactory()->create($name);
+    }
 }

@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,286 +18,426 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
- ************************************************************************/ 
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/

 namespace Espo\Core\Controllers;

 use \Espo\Core\Exceptions\Error;
 use \Espo\Core\Exceptions\Forbidden;
 use \Espo\Core\Exceptions\NotFound;
+use \Espo\Core\Exceptions\BadRequest;
 use \Espo\Core\Utils\Util;

 class Record extends Base
 {
-	const MAX_SIZE_LIMIT = 200;
-	
-	public static $defaultAction = 'list';	
-	
-	protected function getEntityManager()
-	{
-		return $this->getContainer()->get('entityManager');
-	}
-	
-	protected function getRecordService($name = null)
-	{
-    	if (empty($name)) {
-    		$name = $this->name;
-    	}
-    	
-    	if ($this->getServiceFactory()->checkExists($name)) {
-    		$service = $this->getServiceFactory()->create($name);
-    	} else {
-    		$service = $this->getServiceFactory()->create('Record');
-    		$service->setEntityName($name);
-    	}		
-		
-		return $service;
-	}
+    const MAX_SIZE_LIMIT = 200;

-	public function actionRead($params)
-	{
-		$id = $params['id'];
-		$entity = $this->getRecordService()->getEntity($id);
-		
-		if (empty($entity)) {
-			throw new NotFound();
-		}
+    public static $defaultAction = 'list';

-		return $entity->toArray();
-	}
-	
-	public function actionPatch($params, $data)
-	{
-		return $this->actionUpdate($params, $data);
-	}
-	
-	public function actionCreate($params, $data)
-	{
-		if (!$this->getAcl()->check($this->name, 'edit')) {
-			throw new Forbidden();
-		}
+    protected $defaultRecordServiceName = 'Record';

-		$service = $this->getRecordService();
-		
-		if ($entity = $service->createEntity($data)) {
-			return $entity->toArray();
-		}
+    protected function getEntityManager()
+    {
+        return $this->getContainer()->get('entityManager');
+    }

-		throw new Error();
-	}
+    protected function getRecordService($name = null)
+    {
+        if (empty($name)) {
+            $name = $this->name;
+        }

-	public function actionUpdate($params, $data)
-	{
-		if (!$this->getAcl()->check($this->name, 'edit')) {
-			throw new Forbidden();
-		}
-	
-		$id = $params['id'];		
-		
-		if ($entity = $this->getRecordService()->updateEntity($id, $data)) {
-			return $entity->toArray();
-		}
+        if ($this->getServiceFactory()->checkExists($name)) {
+            $service = $this->getServiceFactory()->create($name);
+        } else {
+            $service = $this->getServiceFactory()->create($this->defaultRecordServiceName);
+            $service->setEntityType($name);
+        }

-		throw new Error();
-	}
+        return $service;
+    }

-	public function actionList($params, $data, $request)
-	{
-		if (!$this->getAcl()->check($this->name, 'read')) {
-			throw new Forbidden();
-		}
+    public function actionRead($params, $data, $request)
+    {
+        $id = $params['id'];
+        $entity = $this->getRecordService()->getEntity($id);

-		$where = $request->get('where');
-		$offset = $request->get('offset');
-		$maxSize = $request->get('maxSize');
-		$asc = $request->get('asc') === 'true';
-		$sortBy = $request->get('sortBy');
-		$q = $request->get('q');
-		
-		if (empty($maxSize)) {
-			$maxSize = self::MAX_SIZE_LIMIT;
-		}
-		if (!empty($maxSize) && $maxSize > self::MAX_SIZE_LIMIT) {
-			throw new Forbidden();
-		}
+        if (empty($entity)) {
+            throw new NotFound();
+        }

-		$result = $this->getRecordService()->findEntities(array(
-			'where' => $where,
-			'offset' => $offset,
-			'maxSize' => $maxSize,
-			'asc' => $asc,
-			'sortBy' => $sortBy,
-			'q' => $q,
-		));
-		
-		return array(
-			'total' => $result['total'],
-			'list' => $result['collection']->toArray()
-		);
-	}
-	
-	public function actionListLinked($params, $data, $request)
-	{
-		$id = $params['id'];
-		$link = $params['link'];		
+        return $entity->toArray();
+    }

-		$where = $request->get('where');
-		$offset = $request->get('offset');
-		$maxSize = $request->get('maxSize');
-		$asc = $request->get('asc') === 'true';
-		$sortBy = $request->get('sortBy');
-		$q = $request->get('q');
-		
-		if (empty($maxSize)) {
-			$maxSize = self::MAX_SIZE_LIMIT;
-		}
-		if (!empty($maxSize) && $maxSize > self::MAX_SIZE_LIMIT) {
-			throw new Forbidden();
-		}	
+    public function actionPatch($params, $data, $request)
+    {
+        return $this->actionUpdate($params, $data, $request);
+    }

-		$result = $this->getRecordService()->findLinkedEntities($id, $link, array(
-			'where' => $where,
-			'offset' => $offset,
-			'maxSize' => $maxSize,
-			'asc' => $asc,
-			'sortBy' => $sortBy,
-			'q' => $q,
-		));
-		
-		
-		return array(
-			'total' => $result['total'],
-			'list' => $result['collection']->toArray()
-		);
-	}
+    public function actionCreate($params, $data, $request)
+    {
+        if (!$request->isPost()) {
+            throw new BadRequest();
+        }

-	public function actionDelete($params)
-	{
-		$id = $params['id'];
+        if (!$this->getAcl()->check($this->name, 'create')) {
+            throw new Forbidden();
+        }

-		if ($this->getRecordService()->deleteEntity($id)) {
-			return true;
-		}
-		throw new Error();
-	}
-	
-	public function actionExport($params, $data, $request)
-	{
-		// TODO move to service
-		
-		if (!$this->getAcl()->check($this->name, 'read')) {
-			throw new Forbidden();
-		}		
-	
-		$ids = $request->get('ids');
-		$where = $request->get('where');
-		
-		return array(
-			'id' => $this->getRecordService()->export($ids, $where)
-		);		
-	}
+        $service = $this->getRecordService();

-	public function actionMassUpdate($params, $data)
-	{
-		if (!$this->getAcl()->check($this->name, 'edit')) {
-			throw new Forbidden();
-		}		
+        if ($entity = $service->createEntity($data)) {
+            return $entity->toArray();
+        }

-		$ids = $data['ids'];
-		$where = $data['where'];
-		$attributes = $data['attributes'];
+        throw new Error();
+    }

-		$idsUpdated = $this->getRecordService()->massUpdate($attributes, $ids, $where);
+    public function actionUpdate($params, $data, $request)
+    {
+        if (!$request->isPut() && !$request->isPatch()) {
+            throw new BadRequest();
+        }

-		return $idsUpdated;
-	}
+        if (!$this->getAcl()->check($this->name, 'edit')) {
+            throw new Forbidden();
+        }

-	public function actionMassDelete($params, $data)
-	{
-		if (!$this->getAcl()->check($this->name, 'delete')) {
-			throw new Forbidden();
-		}
+        $id = $params['id'];

-		$ids = $data['ids'];
-		$where = $data['where'];
+        if ($entity = $this->getRecordService()->updateEntity($id, $data)) {
+            return $entity->toArray();
+        }

-		$idsDeleted = $this->getRecordService()->massDelete($ids, $where);
+        throw new Error();
+    }

-		return $idsDeleted;
-	}
+    public function actionList($params, $data, $request)
+    {
+        if (!$this->getAcl()->check($this->name, 'read')) {
+            throw new Forbidden();
+        }

-	public function actionCreateLink($params, $data)
-	{
-		$id = $params['id'];
-		$link = $params['link'];
-		
-		$foreignIds = array();		
-		if (isset($data['id'])) {
-			$foreignIds[] = $data['id'];
-		}		
-		if (isset($data['ids']) && is_array($data['ids'])) {
-			foreach ($data['ids'] as $foreignId) {
-				$foreignIds[] = $foreignId;
-			}
-		}		
-		
-		$result = false;
-		foreach ($foreignIds as $foreignId) {
-			if ($this->getRecordService()->linkEntity($id, $link, $foreignId)) {
-				$result = $result || true;
-			}
-		}
-		if ($result) {
-			return true;
-		}	
-		
-		throw new Error();		
-	}
-	
-	public function actionRemoveLink($params, $data)
-	{
-		$id = $params['id'];
-		$link = $params['link'];
-		
-		$foreignIds = array();		
-		if (isset($data['id'])) {
-			$foreignIds[] = $data['id'];
-		}		
-		if (isset($data['ids']) && is_array($data['ids'])) {
-			foreach ($data['ids'] as $foreignId) {
-				$foreignIds[] = $foreignId;
-			}
-		}
-		
-		$result = false;
-		foreach ($foreignIds as $foreignId) {
-			if ($this->getRecordService()->unlinkEntity($id, $link, $foreignId)) {
-				$result = $result || true;
-			}
-		}
-		if ($result) {
-			return true;
-		}	
-		
-		throw new Error();		
-	}
-	
-	public function actionFollow($params)
-	{
-		if (!$this->getAcl()->check($this->name, 'read')) {
-			throw new Forbidden();
-		}
-		$id = $params['id'];
-		return $this->getRecordService()->follow($id);		
-	}
-	
-	public function actionUnfollow($params)
-	{
-		if (!$this->getAcl()->check($this->name, 'read')) {
-			throw new Forbidden();
-		}
-		$id = $params['id'];
-		return $this->getRecordService()->unfollow($id);		
-	}
+        $where = $request->get('where');
+        $offset = $request->get('offset');
+        $maxSize = $request->get('maxSize');
+        $asc = $request->get('asc', 'true') === 'true';
+        $sortBy = $request->get('sortBy');
+        $q = $request->get('q');
+        $textFilter = $request->get('textFilter');
+
+        if (empty($maxSize)) {
+            $maxSize = self::MAX_SIZE_LIMIT;
+        }
+        if (!empty($maxSize) && $maxSize > self::MAX_SIZE_LIMIT) {
+            throw new Forbidden("Max should should not exceed " . self::MAX_SIZE_LIMIT . ". Use pagination (offset, limit).");
+        }
+
+        $params = array(
+            'where' => $where,
+            'offset' => $offset,
+            'maxSize' => $maxSize,
+            'asc' => $asc,
+            'sortBy' => $sortBy,
+            'q' => $q,
+            'textFilter' => $textFilter
+        );
+
+        $this->fetchListParamsFromRequest($params, $request, $data);
+
+        $result = $this->getRecordService()->findEntities($params);
+
+        return array(
+            'total' => $result['total'],
+            'list' => isset($result['collection']) ? $result['collection']->toArray() : $result['list']
+        );
+    }
+
+    protected function fetchListParamsFromRequest(&$params, $request, $data)
+    {
+        if ($request->get('primaryFilter')) {
+            $params['primaryFilter'] = $request->get('primaryFilter');
+        }
+        if ($request->get('boolFilterList')) {
+            $params['boolFilterList'] = $request->get('boolFilterList');
+        }
+    }
+
+    public function actionListLinked($params, $data, $request)
+    {
+        $id = $params['id'];
+        $link = $params['link'];
+
+        $where = $request->get('where');
+        $offset = $request->get('offset');
+        $maxSize = $request->get('maxSize');
+        $asc = $request->get('asc', 'true') === 'true';
+        $sortBy = $request->get('sortBy');
+        $q = $request->get('q');
+        $textFilter = $request->get('textFilter');
+
+        if (empty($maxSize)) {
+            $maxSize = self::MAX_SIZE_LIMIT;
+        }
+        if (!empty($maxSize) && $maxSize > self::MAX_SIZE_LIMIT) {
+            throw new Forbidden();
+        }
+
+        $params = array(
+            'where' => $where,
+            'offset' => $offset,
+            'maxSize' => $maxSize,
+            'asc' => $asc,
+            'sortBy' => $sortBy,
+            'q' => $q,
+            'textFilter' => $textFilter
+        );
+
+        $this->fetchListParamsFromRequest($params, $request, $data);
+
+        $result = $this->getRecordService()->findLinkedEntities($id, $link, $params);
+
+        return array(
+            'total' => $result['total'],
+            'list' => isset($result['collection']) ? $result['collection']->toArray() : $result['list']
+        );
+    }
+
+    public function actionDelete($params, $data, $request)
+    {
+        if (!$request->isDelete()) {
+            throw new BadRequest();
+        }
+
+        $id = $params['id'];
+
+        if ($this->getRecordService()->deleteEntity($id)) {
+            return true;
+        }
+        throw new Error();
+    }
+
+    public function actionExport($params, $data, $request)
+    {
+        if ($this->getConfig()->get('exportDisabled') && !$this->getUser()->isAdmin()) {
+            throw new Forbidden();
+        }
+
+        if (!$this->getAcl()->check($this->name, 'read')) {
+            throw new Forbidden();
+        }
+
+        $ids = $request->get('ids');
+        $where = $request->get('where');
+        $byWhere = $request->get('byWhere');
+
+        $params = array();
+        if ($byWhere) {
+            $params['where'] = $where;
+        } else {
+            $params['ids'] = $ids;
+        }
+
+        return array(
+            'id' => $this->getRecordService()->export($params)
+        );
+    }
+
+    public function actionMassUpdate($params, $data, $request)
+    {
+        if (!$request->isPut()) {
+            throw new BadRequest();
+        }
+
+        if (!$this->getAcl()->check($this->name, 'edit')) {
+            throw new Forbidden();
+        }
+        if (empty($data['attributes'])) {
+            throw new BadRequest();
+        }
+
+        $params = array();
+        if (array_key_exists('where', $data) && !empty($data['byWhere'])) {
+            $params['where'] = json_decode(json_encode($data['where']), true);
+        } else if (array_key_exists('ids', $data)) {
+            $params['ids'] = $data['ids'];
+        }
+
+        $attributes = $data['attributes'];
+
+        $idsUpdated = $this->getRecordService()->massUpdate($attributes, $params);
+
+        return $idsUpdated;
+    }
+
+    public function actionMassDelete($params, $data, $request)
+    {
+        if (!$request->isPost()) {
+            throw new BadRequest();
+        }
+        if (!$this->getAcl()->check($this->name, 'delete')) {
+            throw new Forbidden();
+        }
+
+        $params = array();
+        if (array_key_exists('where', $data) && !empty($data['byWhere'])) {
+            $where = json_decode(json_encode($data['where']), true);
+            $params['where'] = $where;
+        }
+        if (array_key_exists('ids', $data)) {
+            $params['ids'] = $data['ids'];
+        }
+
+        $idsRemoved = $this->getRecordService()->massRemove($params);
+
+        return $idsRemoved;
+    }
+
+    public function actionCreateLink($params, $data, $request)
+    {
+        if (!$request->isPost()) {
+            throw new BadRequest();
+        }
+
+        if (empty($params['id']) || empty($params['link'])) {
+            throw new BadRequest();
+        }
+
+        $id = $params['id'];
+        $link = $params['link'];
+
+        if (!empty($data['massRelate'])) {
+            if (!is_array($data['where'])) {
+                throw new BadRequest();
+            }
+            $where = json_decode(json_encode($data['where']), true);
+            return $this->getRecordService()->linkEntityMass($id, $link, $where);
+        } else {
+            $foreignIdList = array();
+            if (isset($data['id'])) {
+                $foreignIdList[] = $data['id'];
+            }
+            if (isset($data['ids']) && is_array($data['ids'])) {
+                foreach ($data['ids'] as $foreignId) {
+                    $foreignIdList[] = $foreignId;
+                }
+            }
+
+            $result = false;
+            foreach ($foreignIdList as $foreignId) {
+                if ($this->getRecordService()->linkEntity($id, $link, $foreignId)) {
+                    $result = true;
+                }
+            }
+            if ($result) {
+                return true;
+            }
+        }
+
+        throw new Error();
+    }
+
+    public function actionRemoveLink($params, $data, $request)
+    {
+        if (!$request->isDelete()) {
+            throw new BadRequest();
+        }
+
+        $id = $params['id'];
+        $link = $params['link'];
+
+        if (empty($params['id']) || empty($params['link'])) {
+            throw new BadRequest();
+        }
+
+        $foreignIds = array();
+        if (isset($data['id'])) {
+            $foreignIds[] = $data['id'];
+        }
+        if (isset($data['ids']) && is_array($data['ids'])) {
+            foreach ($data['ids'] as $foreignId) {
+                $foreignIds[] = $foreignId;
+            }
+        }
+
+        $result = false;
+        foreach ($foreignIds as $foreignId) {
+            if ($this->getRecordService()->unlinkEntity($id, $link, $foreignId)) {
+                $result = $result || true;
+            }
+        }
+        if ($result) {
+            return true;
+        }
+
+        throw new Error();
+    }
+
+    public function actionFollow($params, $data, $request)
+    {
+        if (!$request->isPut()) {
+            throw new BadRequest();
+        }
+        if (!$this->getAcl()->check($this->name, 'stream')) {
+            throw new Forbidden();
+        }
+        $id = $params['id'];
+        return $this->getRecordService()->follow($id);
+    }
+
+    public function actionUnfollow($params, $data, $request)
+    {
+        if (!$request->isDelete()) {
+            throw new BadRequest();
+        }
+        if (!$this->getAcl()->check($this->name, 'read')) {
+            throw new Forbidden();
+        }
+        $id = $params['id'];
+        return $this->getRecordService()->unfollow($id);
+    }
+
+    public function actionMerge($params, $data, $request)
+    {
+        if (!$request->isPost()) {
+            throw new BadRequest();
+        }
+
+        if (empty($data['targetId']) || empty($data['sourceIds']) || !is_array($data['sourceIds']) || !($data['attributes'] instanceof \StdClass)) {
+            throw new BadRequest();
+        }
+        $targetId = $data['targetId'];
+        $sourceIds = $data['sourceIds'];
+        $attributes = get_object_vars($data['attributes']);
+
+        if (!$this->getAcl()->check($this->name, 'edit')) {
+            throw new Forbidden();
+        }
+
+        return $this->getRecordService()->merge($targetId, $sourceIds, $attributes);
+    }
+
+    public function postActionGetDuplicateAttributes($params, $data, $request)
+    {
+        if (empty($data['id'])) {
+            throw new BadRequest();
+        }
+
+        if (!$this->getAcl()->check($this->name, 'create')) {
+            throw new Forbidden();
+        }
+        if (!$this->getAcl()->check($this->name, 'read')) {
+            throw new Forbidden();
+        }
+
+        return $this->getRecordService()->getDuplicateAttributes($data['id']);
+    }
 }

@@ -0,0 +1,65 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Core\Controllers;
+
+use \Espo\Core\Exceptions\Error;
+use \Espo\Core\Exceptions\Forbidden;
+use \Espo\Core\Exceptions\NotFound;
+use \Espo\Core\Exceptions\BadRequest;
+use \Espo\Core\Utils\Util;
+
+class RecordTree extends Record
+{
+    public static $defaultAction = 'list';
+
+    protected $defaultRecordServiceName = 'RecordTree';
+
+    public function actionListTree($params, $data, $request)
+    {
+        if (!$this->getAcl()->check($this->name, 'read')) {
+            throw new Forbidden();
+        }
+
+        $where = $request->get('where');
+        $parentId = $request->get('parentId');
+        $maxDepth = $request->get('maxDepth');
+        $onlyNotEmpty = $request->get('onlyNotEmpty');
+
+        $collection = $this->getRecordService()->getTree($parentId, array(
+            'where' => $where,
+            'onlyNotEmpty' => $onlyNotEmpty
+        ), 0, $maxDepth);
+        return array(
+            'list' => $collection->toArray(),
+            'path' => $this->getRecordService()->getTreeItemPath($parentId)
+        );
+    }
+}
+
@@ -1,185 +0,0 @@
-<?php
-/************************************************************************
- * This file is part of EspoCRM.
- *
- * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
- * Website: http://www.espocrm.com
- *
- * EspoCRM is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * EspoCRM is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
- ************************************************************************/
-
-namespace Espo\Core\Cron;
-
-use Espo\Core\Exceptions\NotFound,
-	Espo\Core\Utils\Util;
-
-class ScheduledJob
-{
-	private $container;
-	private $systemUtil;
-
-	protected $data = null;
-
-	protected $cacheFile = 'data/cache/application/jobs.php';
-
-	protected $cronFile = 'cron.php';
-
-	protected $allowedMethod = 'run';
-
-	/**
-	 * @var array - path to cron job files
-	 */
-	private $paths = array(
-		'corePath' => 'application/Espo/Jobs',
-		'modulePath' => 'application/Espo/Modules/{*}/Jobs',
-		'customPath' => 'custom/Espo/Custom/Jobs',
-	);
-
-	protected $cronSetup = array(
-		'linux' => '* * * * * {PHP-BIN-DIR} -f {CRON-FILE} > /dev/null 2>&1',
-		'windows' => '{PHP-BIN-DIR}.exe -f {CRON-FILE}',
-		'mac' => '* * * * * {PHP-BIN-DIR} -f {CRON-FILE} > /dev/null 2>&1',
-		'default' => '* * * * * {PHP-BIN-DIR} -f {CRON-FILE}',
-	);
-
-
-	public function __construct(\Espo\Core\Container $container)
-	{
-		$this->container = $container;
-		$this->systemUtil = new \Espo\Core\Utils\System();
-	}
-
-	protected function getContainer()
-	{
-		return $this->container;
-	}
-
-	protected function getEntityManager()
-	{
-		return $this->container->get('entityManager');
-	}
-
-	protected function getSystemUtil()
-	{
-		return $this->systemUtil;
-	}
-
-	public function run(array $job)
-	{
-		$jobName = $job['method'];
-
-		$className = $this->getClassName($jobName);
-		if ($className === false) {
-			throw new NotFound();
-		}
-
-		$jobClass = new $className($this->container);
-		$method = $this->allowedMethod;
-
-		$jobClass->$method();
-	}
-
-	/**
-	 * Get list of all jobs
-	 *
-	 * @return array
-	 */
-	public function getAll()
-	{
-		if (!isset($this->data)) {
-			$this->init();
-		}
-
-		return $this->data;
-	}
-
-	/**
-	 * Get class name of a job by name
-	 *
-	 * @param  string $name
-	 * @return string
-	 */
-	public function get($name)
-	{
-		return $this->getClassName($name);
-	}
-
-	/**
-	 * Get list of all job names
-	 *
-	 * @return array
-	 */
-	public function getAllNamesOnly()
-	{
-		$data = $this->getAll();
-
-		$namesOnly = array_keys($data);
-
-		return $namesOnly;
-	}
-
-	/**
-	 * Get class name of a job
-	 *
-	 * @param  string $name
-	 * @return string
-	 */
-	protected function getClassName($name)
-	{
-		$name = Util::normilizeClassName($name);
-
-		$data = $this->getAll();
-
-		$name = ucfirst($name);
-		if (isset($data[$name])) {
-			return $data[$name];
-		}
-
-		return false;
-	}
-
-	/**
-	 * Load scheduler classes. It loads from ...Jobs, ex. \Espo\Jobs
-	 * @return null
-	 */
-	protected function init()
-	{
-		$classParser = $this->getContainer()->get('classParser');
-		$classParser->setAllowedMethods( array($this->allowedMethod) );
-		$this->data = $classParser->getData($this->paths, $this->cacheFile);
-	}
-
-
-	public function getSetupMessage()
-	{
-		$language = $this->getContainer()->get('language');
-
-		$OS = $this->getSystemUtil()->getOS();
-		$phpBin = $this->getSystemUtil()->getPhpBin();
-		$cronFile = Util::concatPath($this->getSystemUtil()->getRootDir(), $this->cronFile);
-		$desc = $language->translate('cronSetup', 'options', 'ScheduledJob');
-
-		$message = isset($desc[$OS]) ? $desc[$OS] : $desc['default'];
-
-		$command = isset($this->cronSetup[$OS]) ? $this->cronSetup[$OS] : $this->cronSetup['default'];
-		$command = str_replace(array('{PHP-BIN-DIR}', '{CRON-FILE}'), array($phpBin, $cronFile), $command);
-
-		return array(
-			'message' => $message,
-			'command' => $command,
-		);
-	}
-
-}
@@ -1,67 +0,0 @@
-<?php
-/************************************************************************
- * This file is part of EspoCRM.
- *
- * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
- * Website: http://www.espocrm.com
- *
- * EspoCRM is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * EspoCRM is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
- ************************************************************************/ 
-
-namespace Espo\Core\Cron;
-
-use Espo\Core\Utils\Json,
-	Espo\Core\Exceptions\NotFound;
-
-class Service
-{
-	private $serviceFactory;
-
-	public function __construct(\Espo\Core\ServiceFactory $serviceFactory)
-	{
-		$this->serviceFactory = $serviceFactory;
-	}
-
-	protected function getServiceFactory()
-	{
-		return $this->serviceFactory;
-	}
-
-
-
-	public function run($job)
-	{
-		$serviceName = $job['service_name'];
-
-		if (!$this->getServiceFactory()->checkExists($serviceName)) {
-			throw new NotFound(); 										
-		}
-
-		$service = $this->getServiceFactory()->create($serviceName);	
-		$serviceMethod = $job['method'];	
-
-		if (!method_exists($service, $serviceMethod)) {
-			throw new NotFound();					
-		}	
-
-		$data = $job['data'];
-		if (Json::isJSON($data)) {
-			$data = Json::decode($data, true);
-		}
-
-		$service->$serviceMethod($data);		
-	}
-
-}
@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,195 +18,311 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
 ************************************************************************/

 namespace Espo\Core;
+use \PDO;
+use Espo\Core\Utils\Json;
+use Espo\Core\Exceptions\NotFound;

 class CronManager
 {
-	private $container;
-	private $config;
-	private $fileManager;
+    private $container;

-	private $scheduledJobCron;
-	private $serviceCron;
+    private $config;

-	private $jobService;
-	private $scheduledJobService;
+    private $fileManager;

-	protected $lastRunTime = 'data/cache/application/cronLastRunTime.php';
+    private $entityManager;

+    private $scheduledJobUtil;

-	public function __construct(\Espo\Core\Container $container)
-	{
-		$this->container = $container;
+    const PENDING = 'Pending';

-		$this->config = $this->container->get('config');
-		$this->fileManager = $this->container->get('fileManager');
+    const RUNNING = 'Running';

-		$this->scheduledJobCron = $this->container->get('scheduledJob');
-		$this->serviceCron = new \Espo\Core\Cron\Service( $this->container->get('serviceFactory'));
+    const SUCCESS = 'Success';

-		$this->jobService = $this->container->get('serviceFactory')->create('job');
-		$this->scheduledJobService = $this->container->get('serviceFactory')->create('scheduledJob');
-	}
+    const FAILED = 'Failed';

-	protected function getContainer()
-	{
-		return $this->container;
-	}
+    protected $lastRunTime = 'data/cache/application/cronLastRunTime.php';

-	protected function getConfig()
-	{
-		return $this->config;
-	}
+    public function __construct(\Espo\Core\Container $container)
+    {
+        $this->container = $container;

-	protected function getFileManager()
-	{
-		return $this->fileManager;
-	}
+        $this->config = $this->container->get('config');
+        $this->fileManager = $this->container->get('fileManager');
+        $this->entityManager = $this->container->get('entityManager');
+        $this->serviceFactory = $this->container->get('serviceFactory');

-	protected function getJobService()
-	{
-		return $this->jobService;
-	}
+        $this->scheduledJobUtil = $this->container->get('scheduledJob');
+        $this->cronJob = new \Espo\Core\Utils\Cron\Job($this->config, $this->entityManager);
+        $this->cronScheduledJob = new \Espo\Core\Utils\Cron\ScheduledJob($this->config, $this->entityManager);
+    }

-	protected function getScheduledJobService()
-	{
-		return $this->scheduledJobService;
-	}
+    protected function getContainer()
+    {
+        return $this->container;
+    }

-	protected function getScheduledJobCron()
-	{
-		return $this->scheduledJobCron;
-	}
+    protected function getConfig()
+    {
+        return $this->config;
+    }

-	protected function getServiceCron()
-	{
-		return $this->serviceCron;
-	}
+    protected function getFileManager()
+    {
+        return $this->fileManager;
+    }

+    protected function getEntityManager()
+    {
+        return $this->entityManager;
+    }

-	protected function getLastRunTime()
-	{
-		$lastRunTime = $this->getFileManager()->getContents($this->lastRunTime);
-		if (!is_int($lastRunTime)) {
-			$lastRunTime = time() - (intval($this->getConfig()->get('cron.minExecutionTime')) + 60);
-		}
+    protected function getServiceFactory()
+    {
+        return $this->serviceFactory;
+    }

-		return $lastRunTime;
-	}
+    protected function getScheduledJobUtil()
+    {
+        return $this->scheduledJobUtil;
+    }

-	protected function setLastRunTime($time)
-	{
-		return $this->getFileManager()->putContentsPHP($this->lastRunTime, $time);
-	}
+    protected function getCronJob()
+    {
+        return $this->cronJob;
+    }

-	protected function checkLastRunTime()
-	{
-		$currentTime = time();
-		$lastRunTime = $this->getLastRunTime();
-		$minTime = $this->getConfig()->get('cron.minExecutionTime');
+    protected function getCronScheduledJob()
+    {
+        return $this->cronScheduledJob;
+    }

-		if ($currentTime > ($lastRunTime + $minTime) ) {
-			return true;
-		}
+    protected function getLastRunTime()
+    {
+        $lastRunData = $this->getFileManager()->getPhpContents($this->lastRunTime);

-		return false;
-	}
+        $lastRunTime = time() - intval($this->getConfig()->get('cron.minExecutionTime')) - 1;
+        if (is_array($lastRunData) && !empty($lastRunData['time'])) {
+            $lastRunTime = $lastRunData['time'];
+        }

+        return $lastRunTime;
+    }

-	public function run()
-	{
-		if (!$this->checkLastRunTime()) {
-			$GLOBALS['log']->info('Cron Manager: Stop cron running, too frequency execution');
-			return; //stop cron running, too frequency execution
-		}
+    protected function setLastRunTime($time)
+    {
+        $data = array(
+            'time' => $time,
+        );
+        return $this->getFileManager()->putPhpContents($this->lastRunTime, $data);
+    }

-		$this->setLastRunTime(time());
+    protected function checkLastRunTime()
+    {
+        $currentTime = time();
+        $lastRunTime = $this->getLastRunTime();
+        $minTime = $this->getConfig()->get('cron.minExecutionTime');

-		//Check scheduled jobs and create related jobs
-		$this->createJobsFromScheduledJobs();
+        if ($currentTime > ($lastRunTime + $minTime) ) {
+            return true;
+        }

+        return false;
+    }

-		$pendingJobs = $this->getJobService()->getPendingJobs();
+    /**
+     * Run Cron
+     *
+     * @return void
+     */
+    public function run()
+    {
+        if (!$this->checkLastRunTime()) {
+            $GLOBALS['log']->info('CronManager: Stop cron running, too frequent execution.');
+            return;
+        }

-		foreach ($pendingJobs as $job) {
+        $this->setLastRunTime(time());

-			$this->getJobService()->updateEntity($job['id'], array(
-				'status' => 'Running',
-			));
+        $this->getCronJob()->markFailedJobs();
+        $this->getCronJob()->updateFailedJobAttempts();
+        $this->createJobsFromScheduledJobs();
+        $this->getCronJob()->removePendingJobDuplicates();

-			$isSuccess = true;
+        $pendingJobList = $this->getCronJob()->getPendingJobList();

-			try {
-				if (!empty($job['scheduled_job_id'])) {
-					$this->getScheduledJobCron()->run($job);
-				} else {
-					$this->getServiceCron()->run($job);
-				}
-			} catch (\Exception $e) {
-				$isSuccess = false;
-				$GLOBALS['log']->error('Failed job running, job ['.$job['id'].']. Error Details: '.$e->getMessage());
-			}
+        foreach ($pendingJobList as $job) {
+            $jobEntity = $this->getEntityManager()->getEntity('Job', $job['id']);

-			$status = $isSuccess ? 'Success' : 'Failed';
+            if (!isset($jobEntity)) {
+                $GLOBALS['log']->error('CronManager: empty Job entity ['.$job['id'].'].');
+                continue;
+            }

-			$this->getJobService()->updateEntity($job['id'], array(
-				'status' => $status,
-			));
+            $jobEntity->set('status', self::RUNNING);
+            $this->getEntityManager()->saveEntity($jobEntity);

-			//set status in the schedulerJobLog
-			if (!empty($job['scheduled_job_id'])) {
-				$this->getScheduledJobService()->addLogRecord($job['scheduled_job_id'], $status);
-			}
-		}
+            $isSuccess = true;

-	}
+            try {
+                if (!empty($job['scheduled_job_id'])) {
+                    $this->runScheduledJob($job);
+                } else {
+                    $this->runService($job);
+                }
+            } catch (\Exception $e) {
+                $isSuccess = false;
+                $GLOBALS['log']->error('CronManager: Failed job running, job ['.$job['id'].']. Error Details: '.$e->getMessage());
+            }

-	/**
-	 * Check scheduled jobs and create related jobs
-	 * @return array List of created Jobs
-	 */
-	protected function createJobsFromScheduledJobs()
-	{
-		$activeScheduledJobs = $this->getScheduledJobService()->getActiveJobs();
+            $status = $isSuccess ? self::SUCCESS : self::FAILED;

-		$createdJobs = array();
-		foreach ($activeScheduledJobs as $scheduledJob) {
+            $jobEntity->set('status', $status);
+            $this->getEntityManager()->saveEntity($jobEntity);

-			$scheduling = $scheduledJob['scheduling'];
+            if (!empty($job['scheduled_job_id'])) {
+                $this->getCronScheduledJob()->addLogRecord($job['scheduled_job_id'], $status, null, $job['target_id'], $job['target_type']);
+            }
+        }
+    }

-			$cronExpression = \Cron\CronExpression::factory($scheduling);
+    /**
+     * Run Scheduled Job
+     *
+     * @param  array  $job
+     *
+     * @return void
+     */
+    protected function runScheduledJob(array $job)
+    {
+        $jobName = $job['method'];

-			try {
-				//$nextDate = $cronExpression->getNextRunDate()->format('Y-m-d H:i:s');
-				$prevDate = $cronExpression->getPreviousRunDate()->format('Y-m-d H:i:s');
-			} catch (\Exception $e) {
-				$GLOBALS['log']->error('ScheduledJob ['.$scheduledJob['id'].']: CronExpression - Impossible CRON expression ['.$scheduling.']');
-				continue;
-			}
+        $className = $this->getScheduledJobUtil()->get($jobName);
+        if ($className === false) {
+            throw new NotFound();
+        }

-			if ($cronExpression->isDue()) {
-				$prevDate = date('Y-m-d H:i:00');
-			}
+        $jobClass = new $className($this->container);
+        $method = 'run';
+        if (!method_exists($jobClass, $method)) {
+            throw new NotFound();
+        }

-			$existsJob = $this->getJobService()->getJobByScheduledJob($scheduledJob['id'], $prevDate);
+        $data = null;
+        if (!empty($job['data'])) {
+            $data = $job['data'];
+            if (Json::isJSON($data)) {
+                $data = Json::decode($data, true);
+            }
+        }

-			if (!isset($existsJob) || empty($existsJob)) {
-				//create a job
-				$data = array(
-					'name' => $scheduledJob['name'],
-					'status' => 'Pending',
-					'scheduledJobId' => $scheduledJob['id'],
-					'executeTime' => $prevDate,
-					'method' => $scheduledJob['job'],
-				);
-				$createdJobs[] = $this->getJobService()->createEntity($data);
-			}
-		}
+        $jobClass->$method($data, $job['target_id'], $job['target_type']);
+    }

-		return $createdJobs;
-	}
+    /**
+     * Run Service
+     *
+     * @param  array  $job
+     *
+     * @return void
+     */
+    protected function runService(array $job)
+    {
+        $serviceName = $job['service_name'];
+
+        if (!$this->getServiceFactory()->checkExists($serviceName)) {
+            throw new NotFound();
+        }
+
+        $service = $this->getServiceFactory()->create($serviceName);
+        $serviceMethod = $job['method'];
+
+        if (!method_exists($service, $serviceMethod)) {
+            throw new NotFound();
+        }
+
+        $data = $job['data'];
+        if (Json::isJSON($data)) {
+            $data = Json::decode($data, true);
+        }
+
+        $service->$serviceMethod($data, $job['target_id'], $job['target_type']);
+    }
+
+    /**
+     * Check scheduled jobs and create related jobs
+     *
+     * @return array  List of created Jobs
+     */
+    protected function createJobsFromScheduledJobs()
+    {
+        $activeScheduledJobList = $this->getCronScheduledJob()->getActiveScheduledJobList();
+
+        $runningScheduledJobIdList = $this->getCronJob()->getRunningScheduledJobIdList();
+
+        $createdJobIdList = array();
+        foreach ($activeScheduledJobList as $scheduledJob) {
+            $scheduling = $scheduledJob['scheduling'];
+
+            try {
+                $cronExpression = \Cron\CronExpression::factory($scheduling);
+            } catch (\Exception $e) {
+                $GLOBALS['log']->error('CronManager (ScheduledJob ['.$scheduledJob['id'].']): Scheduling string error - '. $e->getMessage() . '.');
+                continue;
+            }
+
+            try {
+                $previousDate = $cronExpression->getPreviousRunDate()->format('Y-m-d H:i:s');
+            } catch (\Exception $e) {
+                $GLOBALS['log']->error('CronManager (ScheduledJob ['.$scheduledJob['id'].']): Unsupported CRON expression ['.$scheduling.']');
+                continue;
+            }
+
+            if ($cronExpression->isDue()) {
+                $previousDate = date('Y-m-d H:i:s');
+            }
+
+            $existingJob = $this->getCronJob()->getJobByScheduledJob($scheduledJob['id'], $previousDate);
+            if ($existingJob) continue;
+
+            $className = $this->getScheduledJobUtil()->get($scheduledJob['job']);
+            if ($className) {
+                if (method_exists($className, 'prepare')) {
+                    $implementation = new $className($this->container);
+                    $implementation->prepare($scheduledJob, $previousDate);
+                    continue;
+                }
+            }
+
+            if (in_array($scheduledJob['id'], $runningScheduledJobIdList)) {
+                continue;
+            }
+
+            $jobEntity = $this->getEntityManager()->getEntity('Job');
+            $jobEntity->set(array(
+                'name' => $scheduledJob['name'],
+                'status' => self::PENDING,
+                'scheduledJobId' => $scheduledJob['id'],
+                'executeTime' => $previousDate,
+                'method' => $scheduledJob['job']
+            ));
+            $this->getEntityManager()->saveEntity($jobEntity);
+
+            $createdJobIdList[] = $jobEntity->id;
+        }
+
+        return $createdJobIdList;
+    }
 }

@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,111 +18,118 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
 ************************************************************************/

 namespace Espo\Core;
-
 class DataManager
 {
-	private $container;
+    private $container;

-	private $cachePath = 'data/cache';
+    private $cachePath = 'data/cache';


-	public function __construct(Container $container)
-	{
-		$this->container = $container;
-	}
+    public function __construct(Container $container)
+    {
+        $this->container = $container;
+    }

-	protected function getContainer()
-	{
-		return $this->container;
-	}
+    protected function getContainer()
+    {
+        return $this->container;
+    }

-	/**
-	 * Rebuild the system with metadata, database and cache clearing
-	 *
-	 * @return bool
-	 */
-	public function rebuild($entityList = null)
-	{
-		$result = $this->clearCache();
+    /**
+     * Rebuild the system with metadata, database and cache clearing
+     *
+     * @return bool
+     */
+    public function rebuild($entityList = null)
+    {
+        $result = $this->clearCache();

-		$result &= $this->rebuildMetadata();
+        $result &= $this->rebuildMetadata();

-		$result &= $this->rebuildDatabase($entityList);
+        $result &= $this->rebuildDatabase($entityList);

-		return $result;
-	}
+        return $result;
+    }

-	/**
-	 * Clear a cache
-	 *
-	 * @return bool
-	 */
-	public function clearCache()
-	{
-		$result = $this->getContainer()->get('fileManager')->removeInDir($this->cachePath);
+    /**
+     * Clear a cache
+     *
+     * @return bool
+     */
+    public function clearCache()
+    {
+        $result = $this->getContainer()->get('fileManager')->removeInDir($this->cachePath);

-		if ($result === false) {
-			throw new Exceptions\Error("Error while clearing cache");
-		}
+        if ($result != true) {
+            throw new Exceptions\Error("Error while clearing cache");
+        }

-		$this->updateCacheTimestamp();
+        $this->updateCacheTimestamp();

-		return $result;
-	}
+        return $result;
+    }

-	/**
-	 * Rebuild database
-	 *
-	 * @return bool
-	 */
-	public function rebuildDatabase($entityList = null)
-	{
-		try {
-			$result = $this->getContainer()->get('schema')->rebuild($entityList);
-		} catch (\Exception $e) {
-			$result = false;
-			$GLOBALS['log']->error('Fault to rebuild database schema'.'. Details: '.$e->getMessage());
-		}
+    /**
+     * Rebuild database
+     *
+     * @return bool
+     */
+    public function rebuildDatabase($entityList = null)
+    {
+        try {
+            $result = $this->getContainer()->get('schema')->rebuild($entityList);
+        } catch (\Exception $e) {
+            $result = false;
+            $GLOBALS['log']->error('Fault to rebuild database schema'.'. Details: '.$e->getMessage());
+        }

-		if ($result === false) {
-			throw new Exceptions\Error("Error while rebuilding database. See log file for details.");
-		}
+        if ($result != true) {
+            throw new Exceptions\Error("Error while rebuilding database. See log file for details.");
+        }

-		$this->updateCacheTimestamp();
+        $this->updateCacheTimestamp();

-		return $result;
-	}
+        return $result;
+    }

-	/**
-	 * Rebuild metadata
-	 *
-	 * @return bool
-	 */
-	public function rebuildMetadata()
-	{
-		$metadata = $this->getContainer()->get('metadata');
+    /**
+     * Rebuild metadata
+     *
+     * @return bool
+     */
+    public function rebuildMetadata()
+    {
+        $metadata = $this->getContainer()->get('metadata');

-		$metadata->init(true);
+        $metadata->init(true);

-		$ormMeta = $metadata->getOrmMetadata(true);
+        $ormMeta = $metadata->getOrmMetadata(true);

-		$this->updateCacheTimestamp();
+        $this->updateCacheTimestamp();

-		return empty($ormMeta) ? false : true;
-	}
+        return empty($ormMeta) ? false : true;
+    }

-	/**
-	 * Update cache timestamp
-	 *
-	 * @return bool
-	 */
-	public function updateCacheTimestamp()
-	{
-		return $this->getContainer()->get('config')->updateCacheTimestamp();
-	}
+    /**
+     * Update cache timestamp
+     *
+     * @return bool
+     */
+    public function updateCacheTimestamp()
+    {
+        $this->getContainer()->get('config')->updateCacheTimestamp();
+        $this->getContainer()->get('config')->save();
+        return true;
+    }
+}

-
-}
@@ -0,0 +1,50 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Core\Entities;
+
+class CategoryTreeItem extends \Espo\Core\ORM\Entity
+{
+    public function toArray()
+    {
+        $data = parent::toArray();
+        $childList = $this->get('childList');
+        if (is_null($childList)) {
+            $data['childList'] = null;
+        } else {
+            $arr = [];
+            foreach ($childList as $entity) {
+                $arr[] = $entity->toArray();
+            }
+            $data['childList'] = $arr;
+        }
+        return $data;
+    }
+}
+
@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,36 +18,41 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
- ************************************************************************/ 
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/

 namespace Espo\Core\Entities;

 class Person extends \Espo\Core\ORM\Entity
 {
-	public static $person = true;
-	
-	public function setLastName($value)
-	{
-		$this->setValue('lastName', $value);
-		
-		$firstName = $this->get('firstName');
-		if (empty($firstName)) {
-			$this->setValue('name', $value);
-		} else {
-			$this->setValue('name', $firstName . ' ' . $value);
-		}
-	}
-	
-	public function setFirstName($value)
-	{
-		$this->setValue('firstName', $value);
-		
-		$lastName = $this->get('lastName');
-		if (empty($lastName)) {
-			$this->setValue('name', $value);
-		} else {
-			$this->setValue('name', $value . ' ' . $lastName);
-		}
-	}
+    public function _setLastName($value)
+    {
+        $this->setValue('lastName', $value);
+
+        $firstName = $this->get('firstName');
+        if (empty($firstName)) {
+            $this->setValue('name', $value);
+        } else {
+            $this->setValue('name', $firstName . ' ' . $value);
+        }
+    }
+
+    public function _setFirstName($value)
+    {
+        $this->setValue('firstName', $value);
+
+        $lastName = $this->get('lastName');
+        if (empty($lastName)) {
+            $this->setValue('name', $value);
+        } else {
+            $this->setValue('name', $value . ' ' . $lastName);
+        }
+    }
 }

@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,98 +18,112 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
 ************************************************************************/ 

 namespace Espo\Core;
-
 use \Espo\Core\Exceptions\NotFound,
-	\Espo\Core\Utils\Util;
+    \Espo\Core\Utils\Util;


 class EntryPointManager
 {
-	private $container;	
-	
-	private $fileManager;	
+    private $container;

-	protected $data = null;
+    private $fileManager;

-	protected $cacheFile = 'data/cache/application/entryPoints.php';
+    protected $data = null;

-	protected $allowedMethods = array(
-		'run',
-	);	
+    protected $cacheFile = 'data/cache/application/entryPoints.php';

-	/**
+    protected $allowedMethods = array(
+        'run',
+    );
+
+    /**
     * @var array - path to entryPoint files
     */
-	private $paths = array(
-		'corePath' => 'application/Espo/EntryPoints',
-    	'modulePath' => 'application/Espo/Modules/{*}/EntryPoints',
-    	'customPath' => 'custom/Espo/Custom/EntryPoints',	                              			
-	);
+    private $paths = array(
+        'corePath' => 'application/Espo/EntryPoints',
+        'modulePath' => 'application/Espo/Modules/{*}/EntryPoints',
+        'customPath' => 'custom/Espo/Custom/EntryPoints',
+    );


-	public function __construct(\Espo\Core\Container $container)
-	{
-		$this->container = $container;		
-		$this->fileManager = $container->get('fileManager');		
-	}
+    public function __construct(\Espo\Core\Container $container)
+    {
+        $this->container = $container;
+        $this->fileManager = $container->get('fileManager');
+    }

-	protected function getContainer()
-	{
-		return $this->container;
-	}
+    protected function getContainer()
+    {
+        return $this->container;
+    }

-	protected function getFileManager()
-	{
-		return $this->fileManager;
-	}
+    protected function getFileManager()
+    {
+        return $this->fileManager;
+    }

-	public function checkAuthRequired($name)
-	{
-		$className = $this->getClassName($name);
-		if ($className === false) {
-			throw new NotFound();
-		}
-		return $className::$authRequired;		
-	}
+    public function checkAuthRequired($name)
+    {
+        $className = $this->getClassName($name);
+        if (!$className) {
+            throw new NotFound();
+        }
+        return $className::$authRequired;
+    }

-	public function run($name) 
-	{
-		$className = $this->getClassName($name);
-		if ($className === false) {
-			throw new NotFound();
-		}
-		$entryPoint = new $className($this->container);
+    public function checkNotStrictAuth($name)
+    {
+        $className = $this->getClassName($name);
+        if (!$className) {
+            throw new NotFound();
+        }
+        return $className::$notStrictAuth;
+    }

-		$entryPoint->run();
-	}
+    public function run($name, $data = array())
+    {
+        $className = $this->getClassName($name);
+        if (!$className) {
+            throw new NotFound();
+        }
+        $entryPoint = new $className($this->container);

-	protected function getClassName($name)
-	{
-		$name = Util::normilizeClassName($name);
-		
-		if (!isset($this->data)) {
-			$this->init();
-		}
+        $entryPoint->run($data);
+    }

-		$name = ucfirst($name);
-		if (isset($this->data[$name])) {
-			return $this->data[$name];
-		}
-		
-        return false; 
-	}
+    protected function getClassName($name)
+    {
+        $name = Util::normilizeClassName($name);
+
+        if (!isset($this->data)) {
+            $this->init();
+        }
+
+        $name = ucfirst($name);
+        if (isset($this->data[$name])) {
+            return $this->data[$name];
+        }
+
+        return false;
+    }


-	protected function init()
-	{
-		$classParser = $this->getContainer()->get('classParser');
-		$classParser->setAllowedMethods($this->allowedMethods);
-		$this->data = $classParser->getData($this->paths, $this->cacheFile);
-	}	
-	 
+    protected function init()
+    {
+        $classParser = $this->getContainer()->get('classParser');
+        $classParser->setAllowedMethods($this->allowedMethods);
+        $this->data = $classParser->getData($this->paths, $this->cacheFile);
+    }

 }

@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,7 +18,14 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
- ************************************************************************/ 
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/

 namespace Espo\Core\EntryPoints;

@@ -28,51 +35,76 @@ use \Espo\Core\Exceptions\Forbidden;

 abstract class Base
 {
-	private $container;
-	
-	public static $authRequired = true;
-	
-	protected function getContainer()
-	{
-		return $this->container;
-	}
-	
-	protected function getUser()
-	{
-		return $this->getContainer()->get('user');
-	}
-	
-	protected function getAcl()
-	{
-		return $this->getContainer()->get('acl');
-	}
-	
-	protected function getEntityManager()
-	{
-		return $this->getContainer()->get('entityManager');
-	}
-	
-	protected function getServiceFactory()
-	{
-		return $this->getContainer()->get('serviceFactory');
-	}	
-	
-	protected function getConfig()
-	{
-		return $this->getContainer()->get('config');
-	}
-	
-	protected function getMetadata()
-	{
-		return $this->getContainer()->get('metadata');
-	}	
-	
-	public function __construct(Container $container)
-	{
-		$this->container = $container;
-	}
-	
-	abstract public function run();	
+    private $container;
+
+    public static $authRequired = true;
+
+    public static $notStrictAuth = false;
+
+    protected function getContainer()
+    {
+        return $this->container;
+    }
+
+    protected function getUser()
+    {
+        return $this->getContainer()->get('user');
+    }
+
+    protected function getAcl()
+    {
+        return $this->getContainer()->get('acl');
+    }
+
+    protected function getEntityManager()
+    {
+        return $this->getContainer()->get('entityManager');
+    }
+
+    protected function getServiceFactory()
+    {
+        return $this->getContainer()->get('serviceFactory');
+    }
+
+    protected function getConfig()
+    {
+        return $this->getContainer()->get('config');
+    }
+
+    protected function getMetadata()
+    {
+        return $this->getContainer()->get('metadata');
+    }
+
+    protected function getDateTime()
+    {
+        return $this->getContainer()->get('dateTime');
+    }
+
+    protected function getNumber()
+    {
+        return $this->getContainer()->get('number');
+    }
+
+    protected function getFileManager()
+    {
+        return $this->getContainer()->get('fileManager');
+    }
+
+    protected function getLanguage()
+    {
+        return $this->getContainer()->get('language');
+    }
+
+    protected function getClientManager()
+    {
+        return $this->getContainer()->get('clientManager');
+    }
+
+    public function __construct(Container $container)
+    {
+        $this->container = $container;
+    }

 }

@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,13 +18,20 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
 ************************************************************************/ 

 namespace Espo\Core\Exceptions;

 class BadRequest extends \Exception
 {
-	protected $code = 400;
+    protected $code = 400;

 }

@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,13 +18,20 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
 ************************************************************************/ 

 namespace Espo\Core\Exceptions;

 class Conflict extends \Exception
 {
-	protected $code = 409;
+    protected $code = 409;

 }

@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,6 +18,13 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
 ************************************************************************/ 

 namespace Espo\Core\Exceptions;
@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,13 +18,20 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
 ************************************************************************/ 

 namespace Espo\Core\Exceptions;

 class Forbidden extends \Exception
 {
-	protected $code = 403;
+    protected $code = 403;

 }

@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,12 +18,19 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
 ************************************************************************/ 

 namespace Espo\Core\Exceptions;

 class InternalServerError extends \Exception
 {
-	protected $code = 500;
+    protected $code = 500;

 }
@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,13 +18,20 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
 ************************************************************************/ 

 namespace Espo\Core\Exceptions;

 class NotFound extends \Exception
 {
-	protected $code = 404;
+    protected $code = 404;

 }

@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,13 +18,20 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
 ************************************************************************/ 

 namespace Espo\Core\Exceptions;

 class Unauthorized extends \Exception
 {
-	protected $code = 401;
+    protected $code = 401;

 }

@@ -0,0 +1,47 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Core;
+
+class ExtensionManager extends Upgrades\Base
+{
+    protected $name = 'Extension';
+
+    protected $params = array(
+        'packagePath' => 'data/upload/extensions',
+        'backupPath' => 'data/.backup/extensions',
+
+        'scriptNames' => array(
+            'before' => 'BeforeInstall',
+            'after' => 'AfterInstall',
+            'beforeUninstall' => 'BeforeUninstall',
+            'afterUninstall' => 'AfterUninstall',
+        )
+    );
+}
@@ -0,0 +1,132 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Core\ExternalAccount;
+
+use \Espo\Core\Exceptions\Error;
+use \Espo\Core\Exceptions\Forbidden;
+use \Espo\Core\Exceptions\NotFound;
+
+class ClientManager
+{
+    protected $entityManager;
+
+    protected $metadata;
+
+    protected $clientMap = array();
+
+    public function __construct($entityManager, $metadata, $config)
+    {
+        $this->entityManager = $entityManager;
+        $this->metadata = $metadata;
+        $this->config = $config;
+    }
+
+    protected function getMetadata()
+    {
+        return $this->metadata;
+    }
+
+    protected function getEntityManager()
+    {
+        return $this->entityManager;
+    }
+
+    protected function getConfig()
+    {
+        return $this->config;
+    }
+
+    public function storeAccessToken($hash, $data)
+    {
+        if (!empty($this->clientMap[$hash]) && !empty($this->clientMap[$hash]['externalAccountEntity'])) {
+            $externalAccountEntity = $this->clientMap[$hash]['externalAccountEntity'];
+            $externalAccountEntity->set('accessToken', $data['accessToken']);
+            $externalAccountEntity->set('tokenType', $data['tokenType']);
+            $this->getEntityManager()->saveEntity($externalAccountEntity);
+        }
+    }
+
+    public function create($integration, $userId)
+    {
+        $authMethod = $this->getMetadata()->get("integrations.{$integration}.authMethod");
+        $methodName = 'create' . ucfirst($authMethod);
+        return $this->$methodName($integration, $userId);
+    }
+
+    protected function createOAuth2($integration, $userId)
+    {
+        $integrationEntity = $this->getEntityManager()->getEntity('Integration', $integration);
+        $externalAccountEntity = $this->getEntityManager()->getEntity('ExternalAccount', $integration . '__' . $userId);
+
+        $className = $this->getMetadata()->get("integrations.{$integration}.clientClassName");
+
+        $redirectUri = $this->getConfig()->get('siteUrl') . '?entryPoint=oauthCallback'; // TODO move to client class
+
+        if (!$externalAccountEntity) {
+            throw new Error("External Account {$integration} not found for {$userId}");
+        }
+
+        if (!$integrationEntity->get('enabled')) {
+            return null;
+        }
+        if (!$externalAccountEntity->get('enabled')) {
+            return null;
+        }
+
+        $oauth2Client = new \Espo\Core\ExternalAccount\OAuth2\Client();
+
+        $client = new $className($oauth2Client, array(
+            'endpoint' => $this->getMetadata()->get("integrations.{$integration}.params.endpoint"),
+            'tokenEndpoint' => $this->getMetadata()->get("integrations.{$integration}.params.tokenEndpoint"),
+            'clientId' => $integrationEntity->get('clientId'),
+            'clientSecret' => $integrationEntity->get('clientSecret'),
+            'redirectUri' => $redirectUri,
+            'accessToken' => $externalAccountEntity->get('accessToken'),
+            'refreshToken' => $externalAccountEntity->get('refreshToken'),
+            'tokenType' => $externalAccountEntity->get('tokenType'),
+        ), $this);
+
+        $this->addToClientMap($client, $integrationEntity, $externalAccountEntity, $userId);
+
+        return $client;
+    }
+
+    protected function addToClientMap($client, $integrationEntity, $externalAccountEntity, $userId)
+    {
+        $this->clientMap[spl_object_hash($client)] = array(
+            'client' => $client,
+            'userId' => $userId,
+            'integration' => $integrationEntity->id,
+            'integrationEntity' => $integrationEntity,
+            'externalAccountEntity' => $externalAccountEntity,
+        );
+    }
+}
+
@@ -0,0 +1,41 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Core\ExternalAccount\Clients;
+
+use \Espo\Core\Exceptions\Error;
+
+class Google extends OAuth2Abstract
+{
+    protected function getPingUrl()
+    {
+        return 'https://www.googleapis.com/calendar/v3/users/me/calendarList';
+    }
+}
+
@@ -0,0 +1,42 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Core\ExternalAccount\Clients;
+
+interface IClient
+{
+    public function getParam($name);
+    
+    public function setParam($name, $value);
+    
+    public function setParams(array $params);
+
+    public function ping();
+}
+
@@ -0,0 +1,228 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Core\ExternalAccount\Clients;
+
+use \Espo\Core\Exceptions\Error;
+
+use \Espo\Core\ExternalAccount\OAuth2\Client;
+
+abstract class OAuth2Abstract implements IClient
+{
+    protected $client = null;
+
+    protected $manager = null;
+
+    protected $paramList = array(
+        'endpoint',
+        'tokenEndpoint',
+        'clientId',
+        'clientSecret',
+        'tokenType',
+        'accessToken',
+        'refreshToken',
+        'redirectUri',
+    );
+
+    protected $clientId = null;
+
+    protected $clientSecret = null;
+
+    protected $accessToken = null;
+
+    protected $refreshToken = null;
+
+    protected $redirectUri = null;
+
+    public function __construct($client, array $params = array(), $manager = null)
+    {
+        $this->client = $client;
+
+        $this->setParams($params);
+
+        $this->manager = $manager;
+    }
+
+    public function getParam($name)
+    {
+        if (in_array($name, $this->paramList)) {
+            return $this->$name;
+        }
+    }
+
+    public function setParam($name, $value)
+    {
+        if (in_array($name, $this->paramList)) {
+            $methodName = 'set' . ucfirst($name);
+            if (method_exists($this->client, $methodName)) {
+                $this->client->$methodName($value);
+            }
+            $this->$name = $value;
+        }
+    }
+
+    public function setParams(array $params)
+    {
+        foreach ($this->paramList as $name) {
+            if (!empty($params[$name])) {
+                $this->setParam($name, $params[$name]);
+            }
+        }
+    }
+
+    protected function afterTokenRefreshed($data)
+    {
+        if ($this->manager) {
+            $this->manager->storeAccessToken(spl_object_hash($this), $data);
+        }
+    }
+
+    public function getAccessTokenFromAuthorizationCode($code)
+    {
+        $r = $this->client->getAccessToken($this->getParam('tokenEndpoint'), Client::GRANT_TYPE_AUTHORIZATION_CODE, array(
+            'code' => $code,
+            'redirect_uri' => $this->getParam('redirectUri')
+        ));
+
+        if ($r['code'] == 200) {
+            $data = array();
+            if (!empty($r['result'])) {
+                $data['accessToken'] = $r['result']['access_token'];
+                $data['tokenType'] = $r['result']['token_type'];
+                $data['refreshToken'] = $r['result']['refresh_token'];
+            }
+            return $data;
+        }
+        return null;
+    }
+
+    abstract protected function getPingUrl();
+
+    public function ping()
+    {
+        if (empty($this->accessToken) || empty($this->clientId) || empty($this->clientSecret)) {
+            return false;
+        }
+
+        $url = $this->getPingUrl();
+
+        try {
+            $this->request($url);
+            return true;
+        } catch (\Exception $e) {
+            return false;
+        }
+    }
+
+    public function request($url, $params = null, $httpMethod = Client::HTTP_METHOD_GET, $contentType = null, $allowRenew = true)
+    {
+        $httpHeaders = array();
+        if (!empty($contentType)) {
+            $httpHeaders['Content-Type'] = $contentType;
+            switch ($contentType) {
+                case Client::CONTENT_TYPE_MULTIPART_FORM_DATA:
+                    $httpHeaders['Content-Length'] = strlen($params);
+                    break;
+                case Client::CONTENT_TYPE_APPLICATION_JSON:
+                    $httpHeaders['Content-Length'] = strlen($params);
+                    break;
+            }
+        }
+
+        $r = $this->client->request($url, $params, $httpMethod, $httpHeaders);
+
+        $code = null;
+        if (!empty($r['code'])) {
+            $code = $r['code'];
+        }
+
+        if ($code >= 200 && $code < 300) {
+            return $r['result'];
+        } else {
+            $handledData = $this->handleErrorResponse($r);
+
+            if ($allowRenew && is_array($handledData)) {
+                if ($handledData['action'] == 'refreshToken') {
+                    if ($this->refreshToken()) {
+                        return $this->request($url, $params, $httpMethod, $contentType, false);
+                    }
+                } else if ($handledData['action'] == 'renew') {
+                    return $this->request($url, $params, $httpMethod, $contentType, false);
+                }
+            }
+        }
+
+        throw new Error("Error after requesting {$httpMethod} {$url}.", $code);
+    }
+
+    protected function refreshToken()
+    {
+        if (!empty($this->refreshToken)) {
+            $r = $this->client->getAccessToken($this->getParam('tokenEndpoint'), Client::GRANT_TYPE_REFRESH_TOKEN, array(
+                'refresh_token' => $this->refreshToken,
+            ));
+            if ($r['code'] == 200) {
+                if (is_array($r['result'])) {
+                    if (!empty($r['result']['access_token'])) {
+                        $data = array();
+                        $data['accessToken'] = $r['result']['access_token'];
+                        $data['tokenType'] = $r['result']['token_type'];
+
+                        $this->setParams($data);
+                        $this->afterTokenRefreshed($data);
+                        return true;
+                    }
+                }
+            }
+        }
+    }
+
+    protected function handleErrorResponse($r)
+    {
+        if ($r['code'] == 401 && !empty($r['result'])) {
+            $result = $r['result'];
+            if (strpos($r['header'], 'error=invalid_token') !== false) {
+                return array(
+                    'action' => 'refreshToken'
+                );
+            } else {
+                return array(
+                    'action' => 'renew'
+                );
+            }
+        } else if ($r['code'] == 400 && !empty($r['result'])) {
+            if ($r['result']['error'] == 'invalid_token') {
+                return array(
+                    'action' => 'refreshToken'
+                );
+            }
+        }
+    }
+}
+
@@ -0,0 +1,260 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Core\ExternalAccount\OAuth2;
+
+class Client
+{
+    const AUTH_TYPE_URI = 0;
+    const AUTH_TYPE_AUTHORIZATION_BASIC = 1;
+    const AUTH_TYPE_FORM = 2;
+
+    const TOKEN_TYPE_URI = 'Uri';
+    const TOKEN_TYPE_BEARER = 'Bearer';
+    const TOKEN_TYPE_OAUTH = 'OAuth';
+
+    const CONTENT_TYPE_APPLICATION_X_WWW_FORM_URLENENCODED = 'application/x-www-form-urlencoded';
+    const CONTENT_TYPE_MULTIPART_FORM_DATA = 'multipart/form-data';
+    const CONTENT_TYPE_APPLICATION_JSON = 'application/json';
+
+    const HTTP_METHOD_GET = 'GET';
+    const HTTP_METHOD_POST = 'POST';
+    const HTTP_METHOD_PUT = 'PUT';
+
+    const HTTP_METHOD_DELETE = 'DELETE';
+    const HTTP_METHOD_HEAD = 'HEAD';
+    const HTTP_METHOD_PATCH = 'PATCH';
+
+    const GRANT_TYPE_AUTHORIZATION_CODE = 'authorization_code';
+    const GRANT_TYPE_REFRESH_TOKEN = 'refresh_token';
+    const GRANT_TYPE_PASSWORD = 'password';
+    const GRANT_TYPE_CLIENT_CREDENTIALS = 'client_credentials';
+
+    protected $clientId = null;
+
+    protected $clientSecret = null;
+
+    protected $accessToken = null;
+
+    protected $authType = self::AUTH_TYPE_URI;
+
+    protected $tokenType = self::TOKEN_TYPE_URI;
+
+    protected $accessTokenSecret = null;
+
+    protected $accessTokenParamName = 'access_token';
+
+    protected $certificateFile = null;
+
+    protected $curlOptions = array();
+
+    public function __construct(array $params = array())
+    {
+        if (!extension_loaded('curl')) {
+            throw new \Exception('CURL extension not found.');
+        }
+    }
+
+    public function setClientId($clientId)
+    {
+        $this->clientId = $clientId;
+    }
+
+    public function setClientSecret($clientSecret)
+    {
+        $this->clientSecret = $clientSecret;
+    }
+
+    public function setAccessToken($accessToken)
+    {
+        $this->accessToken = $accessToken;
+    }
+
+    public function setAuthType($authType)
+    {
+        $this->authType = $authType;
+    }
+
+    public function setCertificateFile($certificateFile)
+    {
+        $this->certificateFile = $certificateFile;
+    }
+
+    public function setCurlOption($option, $value)
+    {
+        $this->curlOptions[$option] = $value;
+    }
+
+    public function setCurlOptions($options)
+    {
+        $this->curlOptions = array_merge($this->curlOptions, $options);
+    }
+
+    public function setTokenType($tokenType)
+    {
+        $this->tokenType = $tokenType;
+    }
+
+    public function setAccessTokenSecret($accessTokenSecret)
+    {
+        $this->accessTokenSecret = $accessTokenSecret;
+    }
+
+    public function request($url, $params = null, $httpMethod = self::HTTP_METHOD_GET, array $httpHeaders = array())
+    {
+        if ($this->accessToken) {
+            switch ($this->tokenType) {
+                case self::TOKEN_TYPE_URI:
+                    $params[$this->accessTokenParamName] = $this->accessToken;
+                    break;
+                case self::TOKEN_TYPE_BEARER:
+                    $httpHeaders['Authorization'] = 'Bearer ' . $this->accessToken;
+                    break;
+                case self::TOKEN_TYPE_OAUTH:
+                    $httpHeaders['Authorization'] = 'OAuth ' . $this->accessToken;
+                    break;
+                default:
+                    throw new \Exception('Unknown access token type.');
+
+            }
+        }
+
+        return $this->execute($url, $params, $httpMethod, $httpHeaders);
+    }
+
+    private function execute($url, $params = null, $httpMethod, array $httpHeaders = array())
+    {
+        $curlOptions = array(
+            CURLOPT_RETURNTRANSFER => true,
+            CURLOPT_SSL_VERIFYPEER => true,
+            CURLOPT_CUSTOMREQUEST => $httpMethod
+        );
+
+        switch ($httpMethod) {
+            case self::HTTP_METHOD_POST:
+                $curlOptions[CURLOPT_POST] = true;
+            case self::HTTP_METHOD_PUT:
+            case self::HTTP_METHOD_PATCH:
+                if (is_array($params)) {
+                    $postFields = http_build_query($params, null, '&');
+                } else {
+                    $postFields = $params;
+                }
+                $curlOptions[CURLOPT_POSTFIELDS] = $postFields;
+                break;
+            case self::HTTP_METHOD_HEAD:
+                $curlOptions[CURLOPT_NOBODY] = true;
+            case self::HTTP_METHOD_DELETE:
+            case self::HTTP_METHOD_GET:
+                if (strpos($url, '?') === false) {
+                    $url .= '?';
+                }
+                if (is_array($params)) {
+                    $url .= http_build_query($params, null, '&');
+                }
+                break;
+            default:
+                break;
+        }
+
+        $curlOptions[CURLOPT_URL] = $url;
+
+        $curlOptHttpHeader = array();
+        foreach ($httpHeaders as $key => $value) {
+             $curlOptHttpHeader[] = "{$key}: {$value}";
+        }
+        $curlOptions[CURLOPT_HTTPHEADER] = $curlOptHttpHeader;
+
+        $ch = curl_init();
+        curl_setopt_array($ch, $curlOptions);
+
+        curl_setopt($ch, CURLOPT_HEADER, 1);
+
+        if (!empty($this->certificateFile)) {
+            curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, true);
+            curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);
+            curl_setopt($ch, CURLOPT_CAINFO, $this->certificateFile);
+        } else {
+            curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+            curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
+        }
+
+        if (!empty($this->curlOptions)) {
+            curl_setopt_array($ch, $this->curlOptions);
+        }
+
+        $response = curl_exec($ch);
+
+        $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+        $contentType = curl_getinfo($ch, CURLINFO_CONTENT_TYPE);
+        $headerSize = curl_getinfo($ch, CURLINFO_HEADER_SIZE);
+
+        $responceHeader = substr($response, 0, $headerSize);
+        $responceBody = substr($response, $headerSize);
+
+        $resultArray = null;
+
+        if ($curlError = curl_error($ch)) {
+            throw new \Exception($curlError);
+        } else {
+            $resultArray = json_decode($responceBody, true);
+        }
+        curl_close($ch);
+
+        return array(
+            'result' => (null !== $resultArray) ? $resultArray: $responceBody,
+            'code' => intval($httpCode),
+            'contentType' => $contentType,
+            'header' => $responceHeader,
+        );
+    }
+
+    public function getAccessToken($url, $grantType, array $params)
+    {
+        $params['grant_type'] = $grantType;
+
+        $httpHeaders = array();
+        switch ($this->tokenType) {
+            case self::AUTH_TYPE_URI:
+            case self::AUTH_TYPE_FORM:
+                $params['client_id'] = $this->clientId;
+                $params['client_secret'] = $this->clientSecret;
+                break;
+            case self::AUTH_TYPE_AUTHORIZATION_BASIC:
+                $params['client_id'] = $this->clientId;
+                $httpHeaders['Authorization'] = 'Basic ' . base64_encode($this->clientId .  ':' . $this->clientSecret);
+                break;
+            default:
+                throw new \Exception();
+        }
+
+        return $this->execute($url, $params, self::HTTP_METHOD_POST, $httpHeaders);
+    }
+}
+
@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,167 +18,178 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
 ************************************************************************/

 namespace Espo\Core;
-
 use \Espo\Core\Exceptions\Error,
-	\Espo\Core\Utils\Util;
+    \Espo\Core\Utils\Util;

 class HookManager
 {
-	private $container;
+    private $container;

-	private $data;
+    private $data;

-	private $hooks;
+    private $hooks;

-	protected $cacheFile = 'data/cache/application/hooks.php';
+    protected $cacheFile = 'data/cache/application/hooks.php';

-	/**
+    /**
     * List of defined hooks
     *
     * @var array
     */
-	protected $hookList = array(
-		'beforeSave',
-		'afterSave',
-		'beforeRemove',
-		'afterRemove',
-	);
+    protected $hookList = array(
+        'beforeSave',
+        'afterSave',
+        'beforeRemove',
+        'afterRemove',
+    );

-	protected $paths = array(
-		'corePath' => 'application/Espo/Hooks',
-    	'modulePath' => 'application/Espo/Modules/{*}/Hooks',
-    	'customPath' => 'custom/Espo/Custom/Hooks',
-	);
+    protected $paths = array(
+        'corePath' => 'application/Espo/Hooks',
+        'modulePath' => 'application/Espo/Modules/{*}/Hooks',
+        'customPath' => 'custom/Espo/Custom/Hooks',
+    );


    public function __construct(Container $container)
    {
-    	$this->container = $container;
-    	$this->loadHooks();
+        $this->container = $container;
+        $this->loadHooks();
    }

    protected function getConfig()
    {
-    	return $this->container->get('config');
+        return $this->container->get('config');
    }

-	protected function getFileManager()
-	{
-		return $this->container->get('fileManager');
-	}
+    protected function getFileManager()
+    {
+        return $this->container->get('fileManager');
+    }

    protected function loadHooks()
    {
-    	if ($this->getConfig()->get('useCache') && file_exists($this->cacheFile)) {
-    		$this->data = $this->getFileManager()->getContents($this->cacheFile);
-    		return;
-    	}
+        if ($this->getConfig()->get('useCache') && file_exists($this->cacheFile)) {
+            $this->data = $this->getFileManager()->getPhpContents($this->cacheFile);
+            return;
+        }

-    	$metadata = $this->container->get('metadata');
+        $metadata = $this->container->get('metadata');

-		$this->data = $this->getHookData($this->paths['corePath']);
+        $this->data = $this->getHookData($this->paths['corePath']);

-    	foreach ($metadata->getModuleList() as $moduleName) {
-    		$modulePath = str_replace('{*}', $moduleName, $this->paths['modulePath']);
-			$this->data = array_merge($this->data, $this->getHookData($modulePath));
-    	}
+        foreach ($metadata->getModuleList() as $moduleName) {
+            $modulePath = str_replace('{*}', $moduleName, $this->paths['modulePath']);
+            $this->data = array_merge_recursive($this->data, $this->getHookData($modulePath));
+        }

-    	$this->data = array_merge($this->data, $this->getHookData($this->paths['customPath']));
+        $this->data = array_merge_recursive($this->data, $this->getHookData($this->paths['customPath']));

-    	if ($this->getConfig()->get('useCache')) {
-			$this->getFileManager()->putContentsPHP($this->cacheFile, $this->data);
-    	}
+        if ($this->getConfig()->get('useCache')) {
+            $this->getFileManager()->putPhpContents($this->cacheFile, $this->data);
+        }
    }

-    public function process($scope, $hookName, $injection = null)
+    public function process($scope, $hookName, $injection = null, array $options = array())
    {
-    	if ($scope != 'Common') {
-    		$this->process('Common', $hookName, $injection);
-    	}
+        if ($scope != 'Common') {
+            $this->process('Common', $hookName, $injection, $options);
+        }

-    	if (!empty($this->data[$scope])) {
-    		if (!empty($this->data[$scope][$hookName])) {
-    			foreach ($this->data[$scope][$hookName] as $className) {
-    				if (empty($this->hooks[$className])) {
-    					$this->hooks[$className] = $this->createHookByClassName($className);
-    				}
-    				$hook = $this->hooks[$className];
-    				$hook->$hookName($injection);
-    			}
-    		}
-    	}
+        if (!empty($this->data[$scope])) {
+            if (!empty($this->data[$scope][$hookName])) {
+                foreach ($this->data[$scope][$hookName] as $className) {
+                    if (empty($this->hooks[$className])) {
+                        $this->hooks[$className] = $this->createHookByClassName($className);
+                        if (empty($this->hooks[$className])) {
+                            continue;
+                        }
+                    }
+                    $hook = $this->hooks[$className];
+                    $hook->$hookName($injection, $options);
+                }
+            }
+        }
    }

-	public function createHookByClassName($className)
-	{
-    	if (class_exists($className)) {
-    		$hook = new $className();
-    		$dependencies = $hook->getDependencyList();
-    		foreach ($dependencies as $name) {
-    			$hook->inject($name, $this->container->get($name));
-    		}
-    		return $hook;
-    	}
-    	throw new Error("Class '$className' does not exist");
-	}
+    public function createHookByClassName($className)
+    {
+        if (class_exists($className)) {
+            $hook = new $className();
+            $dependencies = $hook->getDependencyList();
+            foreach ($dependencies as $name) {
+                $hook->inject($name, $this->container->get($name));
+            }
+            return $hook;
+        }
+        $GLOBALS['log']->error("Hook class '{$className}' does not exist.");
+    }

    /**
     * Get and merge hook data by checking the files exist in $hookDirs
-	 *
-	 * @param array $hookDirs - it can be an array('Espo/Hooks', 'Espo/Custom/Hooks', 'Espo/Modules/Crm/Hooks')
-	 *
-	 * @return array
-	 */
-	protected function getHookData($hookDirs)
-	{
-		if (is_string($hookDirs)) {
-			$hookDirs = (array) $hookDirs;
-		}
+     *
+     * @param array $hookDirs - it can be an array('Espo/Hooks', 'Espo/Custom/Hooks', 'Espo/Modules/Crm/Hooks')
+     *
+     * @return array
+     */
+    protected function getHookData($hookDirs)
+    {
+        if (is_string($hookDirs)) {
+            $hookDirs = (array) $hookDirs;
+        }

-		$hooks = array();
+        $hooks = array();

-		foreach ($hookDirs as $hookDir) {
+        foreach ($hookDirs as $hookDir) {

-			if (file_exists($hookDir)) {
-	        	$fileList = $this->getFileManager()->getFileList($hookDir, 1, '\.php$', 'file');
+            if (file_exists($hookDir)) {
+                $fileList = $this->getFileManager()->getFileList($hookDir, 1, '\.php$', true);

-	            foreach ($fileList as $scopeName => $hookFiles) {
+                foreach ($fileList as $scopeName => $hookFiles) {

-					$hookScopeDirPath = Util::concatPath($hookDir, $scopeName);
+                    $hookScopeDirPath = Util::concatPath($hookDir, $scopeName);

-					$scopeHooks = array();
-					foreach($hookFiles as $hookFile) {
-						$hookFilePath = Util::concatPath($hookScopeDirPath, $hookFile);
-	                	$className = Util::getClassName($hookFilePath);
+                    $scopeHooks = array();
+                    foreach($hookFiles as $hookFile) {
+                        $hookFilePath = Util::concatPath($hookScopeDirPath, $hookFile);
+                        $className = Util::getClassName($hookFilePath);

-						foreach($this->hookList as $hookName) {
-							if (method_exists($className, $hookName)) {
-								$scopeHooks[$hookName][$className::$order][] = $className;
-							}
-						}
-					}
+                        foreach($this->hookList as $hookName) {
+                            if (method_exists($className, $hookName)) {
+                                $scopeHooks[$hookName][$className::$order][] = $className;
+                            }
+                        }
+                    }

-					//sort hooks by order
-	                foreach ($scopeHooks as $hookName => $hookList) {
-						ksort($hookList);
+                    //sort hooks by order
+                    foreach ($scopeHooks as $hookName => $hookList) {
+                        ksort($hookList);

-						$sortedHookList = array();
-						foreach($hookList as $hookDetails) {
-	                    	$sortedHookList = array_merge($sortedHookList, $hookDetails);
-						}
+                        $sortedHookList = array();
+                        foreach($hookList as $hookDetails) {
+                            $sortedHookList = array_merge($sortedHookList, $hookDetails);
+                        }

-                        $hooks[$scopeName][$hookName] = isset($hooks[$scopeName][$hookName]) ? array_merge($hooks[$scopeName][$hookName], $sortedHookList) : $sortedHookList;
-					}
-	            }
-			}
+                        $normalizedScopeName = Util::normilizeScopeName($scopeName);

-		}
+                        $hooks[$normalizedScopeName][$hookName] = isset($hooks[$normalizedScopeName][$hookName]) ? array_merge($hooks[$normalizedScopeName][$hookName], $sortedHookList) : $sortedHookList;
+                    }
+                }
+            }

-		return $hooks;
-	}
+        }
+
+        return $hooks;
+    }

 }

@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,78 +18,108 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
 ************************************************************************/

 namespace Espo\Core\Hooks;

-use \Espo\Core\Interfaces\Injectable;
+use Espo\Core\Interfaces\Injectable;

-class Base implements Injectable
+abstract class Base implements Injectable
 {
-	protected $dependencies = array(
-		'entityManager',
-		'config',
-		'metadata',
-		'acl',
-		'user',
-	);
+    protected $dependencies = array(
+        'container',
+        'entityManager',
+        'config',
+        'metadata',
+        'aclManager',
+        'user',
+    );

-	protected $injections = array();
+    protected $injections = array();

-	public static $order = 9;
+    public static $order = 9;

-	public function __construct()
-	{
-		$this->init();
-	}
+    public function __construct()
+    {
+        $this->init();
+    }

-	protected function init()
-	{
-	}
+    protected function init()
+    {
+    }

-	public function getDependencyList()
-	{
-		return $this->dependencies;
-	}
+    public function getDependencyList()
+    {
+        return $this->dependencies;
+    }

-	protected function getInjection($name)
-	{
-		return $this->injections[$name];
-	}
+    protected function addDependencyList(array $list)
+    {
+        foreach ($list as $item) {
+            $this->addDependency($item);
+        }
+    }

-	public function inject($name, $object)
-	{
-		$this->injections[$name] = $object;
-	}
+    protected function addDependency($name)
+    {
+        $this->dependencies[] = $name;
+    }

-	protected function getEntityManager()
-	{
-		return $this->injections['entityManager'];
-	}
+    protected function getInjection($name)
+    {
+        return $this->injections[$name];
+    }

-	protected function getUser()
-	{
-		return $this->injections['user'];
-	}
+    public function inject($name, $object)
+    {
+        $this->injections[$name] = $object;
+    }

-	protected function getAcl()
-	{
-		return $this->injections['acl'];
-	}
+    protected function getContainer()
+    {
+        return $this->getInjection('container');
+    }

-	protected function getConfig()
-	{
-		return $this->injections['config'];
-	}
+    protected function getEntityManager()
+    {
+        return $this->getInjection('entityManager');
+    }

-	protected function getMetadata()
-	{
-		return $this->injections['metadata'];
-	}
+    protected function getUser()
+    {
+        return $this->getInjection('user');
+    }

-	protected function getRepository()
-	{
-		return $this->getEntityManager()->getRepository($this->entityName);
-	}
+    protected function getAcl()
+    {
+        return $this->getContainer()->get('acl');
+    }
+
+    protected function getAclManager()
+    {
+        return $this->getInjection('aclManager');
+    }
+
+    protected function getConfig()
+    {
+        return $this->getInjection('config');
+    }
+
+    protected function getMetadata()
+    {
+        return $this->getInjection('metadata');
+    }
+
+    protected function getRepository()
+    {
+        return $this->getEntityManager()->getRepository($this->entityName);
+    }
 }

@@ -0,0 +1,195 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Core\Htmlizer;
+
+use Espo\ORM\Entity;
+use Espo\Core\Exceptions\Error;
+
+use Espo\Core\Utils\File\Manager as FileManager;
+use Espo\Core\Utils\DateTime;
+use Espo\Core\Utils\Number;
+
+require('vendor/zordius/lightncandy/src/lightncandy.php');
+
+class Htmlizer
+{
+    protected $fileManager;
+
+    protected $dateTime;
+
+    protected $config;
+
+    protected $acl;
+
+    public function __construct(FileManager $fileManager, DateTime $dateTime, Number $number, $acl = null)
+    {
+        $this->fileManager = $fileManager;
+        $this->dateTime = $dateTime;
+        $this->number = $number;
+        $this->acl = $acl;
+    }
+
+    protected function getAcl()
+    {
+        return $this->acl;
+    }
+
+    protected function formatNumber($value)
+    {
+        return $this->number->format($value);
+    }
+
+    protected function format($value)
+    {
+        if (is_float($value) || is_int($value)) {
+            $value = $this->formatNumber($value);
+        } else if (is_string($value)) {
+            $value = nl2br($value);
+        }
+        return $value;
+    }
+
+    protected function getDataFromEntity(Entity $entity, $skipLinks = false)
+    {
+        $data = $entity->toArray();
+
+        $fieldDefs = $entity->getFields();
+        $fieldList = array_keys($fieldDefs);
+
+        $forbidenAttributeList = [];
+
+        if ($this->getAcl()) {
+            $forbidenAttributeList = $this->getAcl()->getScopeForbiddenAttributeList($entity->getEntityType(), 'read');
+        }
+
+        foreach ($fieldList as $field) {
+            if (in_array($field, $forbidenAttributeList)) continue;
+
+
+            $type = $entity->getAttributeType($field);
+
+            if ($type == Entity::DATETIME) {
+                if (!empty($data[$field])) {
+                    $data[$field] = $this->dateTime->convertSystemDateTime($data[$field]);
+                }
+            } else if ($type == Entity::DATE) {
+                if (!empty($data[$field])) {
+                    $data[$field] = $this->dateTime->convertSystemDate($data[$field]);
+                }
+            } else if ($type == Entity::JSON_ARRAY) {
+                if (!empty($data[$field])) {
+                    $list = $data[$field];
+                    $newList = [];
+                    foreach ($list as $item) {
+                        $v = $item;
+                        if ($item instanceof \StdClass) {
+                            $v = get_object_vars($v);
+                        }
+                        foreach ($v as $k => $w) {
+                            $v[$k] = $this->format($v[$k]);
+                        }
+                        $newList[] = $v;
+                    }
+                    $data[$field] = $newList;
+                }
+            } else if ($type == Entity::JSON_OBJECT) {
+                if (!empty($data[$field])) {
+                    $value = $data[$field];
+                    if ($value instanceof \StdClass) {
+                        $data[$field] = get_object_vars($value);
+                    }
+                    foreach ($data[$field] as $k => $w) {
+                        $data[$field][$k] = $this->format($data[$field][$k]);
+                    }
+                }
+            } else if ($type === Entity::PASSWORD) {
+                unset($data[$field]);
+            }
+
+            if (array_key_exists($field, $data)) {
+               $data[$field] = $this->format($data[$field]);
+            }
+        }
+
+        if (!$skipLinks) {
+            $relationDefs = $entity->getRelations();
+            foreach ($entity->getRelationList() as $relation) {
+                if (
+                    !empty($relationDefs[$relation]['type'])
+                    &&
+                    ($entity->getRelationType($relation) === 'belongsTo' || $entity->getRelationType($relation) === 'belongsToParent')
+                ) {
+                    $relatedEntity = $entity->get($relation);
+                    if (!$relatedEntity) continue;
+                    if ($this->getAcl()) {
+                        if (!$this->getAcl()->check($relatedEntity, 'read')) continue;
+                    }
+
+                    $data[$relation] = $this->getDataFromEntity($relatedEntity, true);
+                }
+            }
+        }
+
+        return $data;
+    }
+
+    public function render(Entity $entity, $template, $id = null, $additionalData = array(), $skipLinks = false)
+    {
+        $code = \LightnCandy::compile($template);
+
+        $toRemove = false;
+        if ($id === null) {
+            $id = uniqid('', true);
+            $toRemove = true;
+        }
+
+        $fileName = 'data/cache/templates/' . $id . '.php';
+
+        $this->fileManager->putContents($fileName, $code);
+        $renderer = $this->fileManager->getPhpContents($fileName);
+
+        if ($toRemove) {
+            $this->fileManager->removeFile($fileName);
+        }
+
+        $data = $this->getDataFromEntity($entity, $skipLinks);
+
+        foreach ($additionalData as $k => $value) {
+            $data[$k] = $value;
+        }
+
+        $html = $renderer($data);
+
+        $html = str_replace('?entryPoint=attachment&amp;', '?entryPoint=attachment&', $html);
+        $html = preg_replace('/\?entryPoint=attachment\&id=(.*)/', 'data/upload/$1', $html);
+
+        return $html;
+    }
+}
@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,14 +18,21 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
- ************************************************************************/ 
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/

 namespace Espo\Core\Interfaces;

 interface Injectable
 {
-	public function getDependencyList();
-	
-	public function inject($name, $object);
+    public function getDependencyList();
+
+    public function inject($name, $object);
 }

@@ -0,0 +1,36 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Core\Interfaces;
+
+interface Loader
+{
+    public function load();
+}
+
@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,53 +18,57 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
 ************************************************************************/

 namespace Espo\Core\Jobs;

 use \Espo\Core\Container;

-
 abstract class Base
 {
-	private $container;
+    private $container;

-	protected function getContainer()
-	{
-		return $this->container;
-	}
+    protected function getContainer()
+    {
+        return $this->container;
+    }

-	protected function getEntityManager()
-	{
-		return $this->getContainer()->get('entityManager');
-	}
+    protected function getEntityManager()
+    {
+        return $this->getContainer()->get('entityManager');
+    }

-	protected function getServiceFactory()
-	{
-		return $this->getContainer()->get('serviceFactory');
-	}
+    protected function getServiceFactory()
+    {
+        return $this->getContainer()->get('serviceFactory');
+    }

-	protected function getConfig()
-	{
-		return $this->getContainer()->get('config');
-	}
+    protected function getConfig()
+    {
+        return $this->getContainer()->get('config');
+    }

-	protected function getMetadata()
-	{
-		return $this->getContainer()->get('metadata');
-	}
+    protected function getMetadata()
+    {
+        return $this->getContainer()->get('metadata');
+    }

-	protected function getUser()
-	{
-		return $this->getContainer()->get('user');
-	}
+    protected function getUser()
+    {
+        return $this->getContainer()->get('user');
+    }

-	public function __construct(Container $container)
-	{
-		$this->container = $container;
-	}
-
-	abstract public function run();
+    public function __construct(Container $container)
+    {
+        $this->container = $container;
+    }

 }

@@ -0,0 +1,45 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Core\Loaders;
+
+abstract class Base implements \Espo\Core\Interfaces\Loader
+{
+    private $container;
+
+    public function __construct(\Espo\Core\Container $container)
+    {
+        $this->container = $container;
+    }
+
+    protected function getContainer()
+    {
+        return $this->container;
+    }
+}
@@ -0,0 +1,43 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Core\Loaders;
+
+class EmailFilterManager extends Base
+{
+    public function load()
+    {
+        $emailFilterManager = new \Espo\Core\Utils\EmailFilterManager(
+            $this->getContainer()->get('entityManager')
+        );
+
+        return $emailFilterManager;
+    }
+}
+
@@ -3,7 +3,7 @@
 * This file is part of EspoCRM.
 *
 * EspoCRM - Open Source CRM application.
- * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
 * Website: http://www.espocrm.com
 *
 * EspoCRM is free software: you can redistribute it and/or modify
@@ -18,47 +18,42 @@
 *
 * You should have received a copy of the GNU General Public License
 * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
 ************************************************************************/

 namespace Espo\Core\Loaders;

-use Doctrine\ORM\Tools\Setup,
-    Espo\Core\Doctrine\ORM\Mapping\Driver\EspoPHPDriver;
-
-class EntityManager
+class EntityManager extends Base
 {
-	private $container;
+    public function load()
+    {
+        $config = $this->getContainer()->get('config');

-	public function __construct(\Espo\Core\Container $container)
-	{
-		$this->container = $container;
-	}
+        $params = array(
+            'host' => $config->get('database.host'),
+            'port' => $config->get('database.port'),
+            'dbname' => $config->get('database.dbname'),
+            'user' => $config->get('database.user'),
+            'charset' => $config->get('database.charset', 'utf8'),
+            'password' => $config->get('database.password'),
+            'metadata' => $this->getContainer()->get('metadata')->getOrmMetadata(),
+            'repositoryFactoryClassName' => '\\Espo\\Core\\ORM\\RepositoryFactory',
+            'driver' => $config->get('database.driver'),
+            'platform' => $config->get('database.platform')
+        );

-	protected function getContainer()
-	{
-    	return $this->container;
-	}
+        $entityManager = new \Espo\Core\ORM\EntityManager($params);
+        $entityManager->setEspoMetadata($this->getContainer()->get('metadata'));
+        $entityManager->setHookManager($this->getContainer()->get('hookManager'));
+        $entityManager->setContainer($this->getContainer());

-	public function load()
-	{
-		$config = $this->getContainer()->get('config');
-
-		$params = array(
-			'host' => $config->get('database.host'),
-			'port' => $config->get('database.port'),
-			'dbname' => $config->get('database.dbname'),
-			'user' => $config->get('database.user'),
-			'password' => $config->get('database.password'),
-			'metadata' => $this->getContainer()->get('metadata')->getOrmMetadata(),
-			'repositoryFactoryClassName' => '\\Espo\\Core\\ORM\\RepositoryFactory',
-		);
-
-		$entityManager = new \Espo\Core\ORM\EntityManager($params);
-		$entityManager->setEspoMetadata($this->getContainer()->get('metadata'));
-		$entityManager->setHookManager($this->getContainer()->get('hookManager'));
-		$entityManager->setContainer($this->getContainer());
-
-		return $entityManager;
-	}
+        return $entityManager;
+    }
 }

@@ -0,0 +1,45 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+namespace Espo\Core\Loaders;
+
+class EntityManagerUtil extends Base
+{
+    public function load()
+    {
+        $entityManager = new \Espo\Core\Utils\EntityManager(
+            $this->getContainer()->get('metadata'),
+            $this->getContainer()->get('language'),
+            $this->getContainer()->get('fileManager')
+        );
+
+        return $entityManager;
+    }
+}
+
--- a/Show More
+++ b/Show More