First stab at HTTP caching

Implemented cache policy: * the homepage is cached for 5 minutes by default. This time can be configured with the =home_cache_in_minutes= attribute in the environment. * non-profile pages are cached for 15 minutes by default. This time can be configured with the =general_cache_in_minutes= attribute in the environment. * profile pages are cached for 15 minutes by default. This time can be configured in the =profile_cache_in_minutes= attribute in the environment. * The account controller (/account/*) is not cached at all. * The environment administration area (/admin/*) is not cached at all. * The profile administration area (/myprofile/*) is not cached at all. * Since Varnish will not cache any request that involves cookies: * Authenticated users will not benefit from the cache. * Cookies are not allowed for unauthenticated users. So, when a response is being prepared for an unauthenticated user, all cookies are wiped out. The contents of the login block and the login/logout part of the header is now loaded via an AJAX call to /account/user_data. This way we can cache almost all pages without caching user-specific data. We are also changing substantially how the flash[:notice] messages work. From now on, instead of setting flash[:notice], we must set session[:flash]. It will work more or less like before, except that session[:notice] will be consumed by the AJAX call to /account/user_data that is done during all page loads instead of being consumed automatically by Rails. The only exception to this is the media_panel, because it uses a different layout. (ActionItem1608)

First stab at HTTP caching
Implemented cache policy: * the homepage is cached for 5 minutes by default. This time can be configured with the =home_cache_in_minutes= attribute in the environment. * non-profile pages are cached for 15 minutes by default. This time can be configured with the =general_cache_in_minutes= attribute in the environment. * profile pages are cached for 15 minutes by default. This time can be configured in the =profile_cache_in_minutes= attribute in the environment. * The account controller (/account/*) is not cached at all. * The environment administration area (/admin/*) is not cached at all. * The profile administration area (/myprofile/*) is not cached at all. * Since Varnish will not cache any request that involves cookies: * Authenticated users will not benefit from the cache. * Cookies are not allowed for unauthenticated users. So, when a response is being prepared for an unauthenticated user, all cookies are wiped out. The contents of the login block and the login/logout part of the header is now loaded via an AJAX call to /account/user_data. This way we can cache almost all pages without caching user-specific data. We are also changing substantially how the flash[:notice] messages work. From now on, instead of setting flash[:notice], we must set session[:flash]. It will work more or less like before, except that session[:notice] will be consumed by the AJAX call to /account/user_data that is done during all page loads instead of being consumed automatically by Rails. The only exception to this is the media_panel, because it uses a different layout. (ActionItem1608)
Antonio Terceiro
1 parent 9129ba2c
Showing 56 changed files with 458 additions and 179 deletions Show diff stats
app/controllers/admin/admin_panel_controller.rb
app/controllers/admin/environment_role_manager_controller.rb
app/controllers/admin/features_controller.rb
app/controllers/admin/role_controller.rb
app/controllers/box_organizer_controller.rb
app/controllers/my_profile/cms_controller.rb
app/controllers/my_profile/friends_controller.rb
app/controllers/my_profile/mailconf_controller.rb
app/controllers/my_profile/manage_products_controller.rb
app/controllers/my_profile/maps_controller.rb
app/controllers/my_profile/memberships_controller.rb
app/controllers/my_profile/profile_editor_controller.rb
app/controllers/my_profile/profile_members_controller.rb
app/controllers/my_profile/tasks_controller.rb
app/controllers/public/account_controller.rb
app/controllers/public/contact_controller.rb
app/controllers/public/content_viewer_controller.rb
app/controllers/public/invite_controller.rb
app/controllers/public/profile_controller.rb
app/models/environment.rb
@@ -40,7 +40,7 @@ class AdminPanelController &lt; AdminController
         end
         redirect_to :action => 'set_portal_folders'
       else
-        flash[:notice] = __('Community not found. You must insert the identifier of a community from this environment')
+        session[:notice] = __('Community not found. You must insert the identifier of a community from this environment')
       end
     end
   end
@@ -54,7 +54,7 @@ class AdminPanelController &lt; AdminController
        folders = params[:folders].map{|fid| Folder.find(:first, :conditions => {:profile_id => env.portal_community, :id => fid})} if params[:folders]
        env.portal_folders = folders
        if env.save
-         flash[:notice] = _('Saved the portal folders')
+         session[:notice] = _('Saved the portal folders')
          redirect_to :action => 'set_portal_news_amount'
        end
      end
@@ -63,7 +63,7 @@ class AdminPanelController &lt; AdminController
   def set_portal_news_amount
     if request.post?
       if @environment.update_attributes(params[:environment])
-        flash[:notice] = _('Saved the number of news on folders')
+        session[:notice] = _('Saved the number of news on folders')
         redirect_to :action => 'index'
       end
     end
@@ -14,9 +14,9 @@ class EnvironmentRoleManagerController &lt; AdminController
     @roles = params[:roles] ? Role.find(params[:roles]) : []
     @person = Person.find(params[:person])
     if @person.define_roles(@roles, environment)
-      flash[:notice] = _('Roles successfuly updated')
+      session[:notice] = _('Roles successfuly updated')
     else
-      flash[:notice] = _('Couldnt change the roles')
+      session[:notice] = _('Couldnt change the roles')
     end
     redirect_to :action => :index
   end
@@ -42,9 +42,9 @@ class EnvironmentRoleManagerController &lt; AdminController
   def remove_role
     @association = RoleAssignment.find(params[:id])
     if @association.destroy
-      flash[:notice] = _('Member succefully unassociated')
+      session[:notice] = _('Member succefully unassociated')
     else
-      flash[:notice] = _('Failed to unassociate member')
+      session[:notice] = _('Failed to unassociate member')
     end
     redirect_to :aciton => 'index'
   end
@@ -52,9 +52,9 @@ class EnvironmentRoleManagerController &lt; AdminController
   def unassociate
     @association = RoleAssignment.find(params[:id])
     if @association.destroy
-      flash[:notice] = _('Member succefully unassociated')
+      session[:notice] = _('Member succefully unassociated')
     else
-      flash[:notice] = _('Failed to unassociate member')
+      session[:notice] = _('Failed to unassociate member')
     end
     redirect_to :aciton => 'index'
   end
@@ -8,7 +8,7 @@ class FeaturesController &lt; AdminController
   post_only :update
   def update
     if @environment.update_attributes(params[:environment])
-      flash[:notice] = _('Features updated successfully.')
+      session[:notice] = _('Features updated successfully.')
       redirect_to :action => 'index'
     else
       render :action => 'index'
@@ -24,7 +24,7 @@ class FeaturesController &lt; AdminController
   def manage_person_fields
     environment.custom_person_fields = params[:person_fields]
     if environment.save!
-      flash[:notice] = _('Person fields updated successfully.')
+      session[:notice] = _('Person fields updated successfully.')
     else
       flash[:error] = _('Person fields not updated successfully.')
     end
@@ -34,7 +34,7 @@ class FeaturesController &lt; AdminController
   def manage_enterprise_fields
     environment.custom_enterprise_fields = params[:enterprise_fields]
     if environment.save!
-      flash[:notice] = __('Enterprise fields updated successfully.')
+      session[:notice] = __('Enterprise fields updated successfully.')
     else
       flash[:error] = __('Enterprise fields not updated successfully.')
     end
@@ -44,7 +44,7 @@ class FeaturesController &lt; AdminController
   def manage_community_fields
     environment.custom_community_fields = params[:community_fields]
     if environment.save!
-      flash[:notice] = _('Community fields updated successfully.')
+      session[:notice] = _('Community fields updated successfully.')
     else
       flash[:error] = _('Community fields not updated successfully.')
     end
@@ -19,7 +19,7 @@ class RoleController &lt; AdminController
     if @role.save
       redirect_to :action => 'show', :id => @role
     else
-      flash[:notice] = _('Failed to create role')
+      session[:notice] = _('Failed to create role')
       render :action => 'new'
     end
   end
@@ -33,7 +33,7 @@ class RoleController &lt; AdminController
     if @role.update_attributes(params[:role])
       redirect_to :action => 'show', :id => @role
     else
-      flash[:notice] = _('Failed to edit role')
+      session[:notice] = _('Failed to edit role')
       render :action => 'edit'
     end
   end
@@ -43,7 +43,7 @@ class RoleController &lt; AdminController
     if @role.destroy
       redirect_to :action => 'index'
     else
-      flash[:notice] = _('Failed to edit role')
+      session[:notice] = _('Failed to edit role')
       redirect_to :action => 'index'
     end
   end
@@ -96,7 +96,7 @@ class BoxOrganizerController &lt; ApplicationController
       expire_timeout_fragment(@block.cache_keys)
       redirect_to :action => 'index'
     else
-      flash[:notice] = _('Failed to remove block')
+      session[:notice] = _('Failed to remove block')
     end
   end
@@ -143,7 +143,7 @@ class CmsController &lt; MyProfileController
     @article = profile.articles.find(params[:id])
     profile.home_page = @article
     profile.save(false)
-    flash[:notice] = _('"%s" configured as home page.') % @article.name
+    session[:notice] = _('"%s" configured as home page.') % @article.name
     redirect_to :action => 'view', :id => @article.id
   end
@@ -232,7 +232,7 @@ class CmsController &lt; MyProfileController
         end
       end
       if @failed.blank?
-        flash[:notice] = _("Your publish request was sent successfully")
+        session[:notice] = _("Your publish request was sent successfully")
         if @back_to
           redirect_to @back_to
         else
@@ -14,7 +14,7 @@ class FriendsController &lt; MyProfileController
       # FIXME this shouldn't be in Person model?
       AddFriend.create!(:person => profile, :friend => @friend, :group_for_person => params[:group])
-      flash[:notice] = _('%s still needs to accept being your friend.') % @friend.name
+      session[:notice] = _('%s still needs to accept being your friend.') % @friend.name
       # FIXME shouldn't redirect to the friend's page?
       redirect_to :action => 'index' 
     end
@@ -20,20 +20,20 @@ class MailconfController &lt; MyProfileController
     @task = EmailActivation.new(:target => environment, :requestor => profile)
     begin
       @task.save!
-      flash[:notice] = _('Please fill your personal information below in order to get your mailbox approved by one of the administrators')
+      session[:notice] = _('Please fill your personal information below in order to get your mailbox approved by one of the administrators')
       redirect_to :controller => 'profile_editor', :action => 'edit'
     rescue Exception => ex
-      flash[:notice] = _('e-Mail was not enabled successfully.')
+      session[:notice] = _('e-Mail was not enabled successfully.')
       render :action => 'index'
     end
   end
   post_only :disable
   def disable
     if profile.user.disable_email!
-      flash[:notice] = _('e-Mail disabled successfully.')
+      session[:notice] = _('e-Mail disabled successfully.')
       redirect_to :controller => 'profile_editor'
     else
-      flash[:notice] = _('e-Mail was not disabled successfully.')
+      session[:notice] = _('e-Mail was not disabled successfully.')
       redirect_to :action => 'index'
     end
   end
@@ -43,7 +43,7 @@ class ManageProductsController &lt; ApplicationController
     @level = 0
     if request.post?
       if @product.save
-        flash[:notice] = _('Product succesfully created')
+        session[:notice] = _('Product succesfully created')
         render :partial => 'shared/redirect_via_javascript',
           :locals => { :url => url_for(:controller => 'manage_products', :action => 'show', :id => @product) }
       else
@@ -101,10 +101,10 @@ class ManageProductsController &lt; ApplicationController
   def destroy
     @product = @profile.products.find(params[:id])
     if @product.destroy
-      flash[:notice] = _('Product succesfully removed')
+      session[:notice] = _('Product succesfully removed')
       redirect_back_or_default :action => 'index'
     else
-      flash[:notice] = _('Could not remove the product')
+      session[:notice] = _('Could not remove the product')
       redirect_back_or_default :action => 'show', :id => @product
     end
   end
@@ -8,7 +8,7 @@ class MapsController &lt; MyProfileController
       begin
         Profile.transaction do
           if profile.update_attributes!(params[:profile_data])
-            flash[:notice] = _('Address was updated successfully!')
+            session[:notice] = _('Address was updated successfully!')
             redirect_to :action => 'edit_location'
           end
         end
@@ -29,7 +29,7 @@ class MembershipsController &lt; MyProfileController
     @community = Community.find(params[:id])
     if request.post?
       if @community.destroy
-        flash[:notice] = _('%s was removed.') % @community.short_name
+        session[:notice] = _('%s was removed.') % @community.short_name
         redirect_to :action => 'index'
       end
     end
@@ -25,7 +25,7 @@ class ProfileEditorController &lt; MyProfileController
         if profile.identifier.blank?
           profile.identifier = params[:profile]
         end
-        flash[:notice] = _('Cannot update profile')
+        session[:notice] = _('Cannot update profile')
       end
     end
   end
@@ -34,7 +34,7 @@ class ProfileEditorController &lt; MyProfileController
     @to_enable = profile
     if request.post? && params[:confirmation]
       unless @to_enable.update_attribute('enabled', true)
-        flash[:notice] = _('%s was not enabled.') % @to_enable.name
+        session[:notice] = _('%s was not enabled.') % @to_enable.name
       end
       redirect_to :action => 'index'
     end
@@ -44,7 +44,7 @@ class ProfileEditorController &lt; MyProfileController
     @to_disable = profile
     if request.post? && params[:confirmation]
       unless @to_disable.update_attribute('enabled', false)
-        flash[:notice] = _('%s was not disabled.') % @to_disable.name
+        session[:notice] = _('%s was not disabled.') % @to_disable.name
       end
       redirect_to :action => 'index'
     end
@@ -12,9 +12,9 @@ class ProfileMembersController &lt; MyProfileController
     @roles = @roles.select{|r| r.has_kind?('Profile') }
     @person = profile.members.find { |m| m.id == params[:person].to_i }
     if @person && @person.define_roles(@roles, profile)
-      flash[:notice] = _('Roles successfuly updated')
+      session[:notice] = _('Roles successfuly updated')
     else
-      flash[:notice] = _('Couldnt change the roles')
+      session[:notice] = _('Couldnt change the roles')
     end
     redirect_to :action => :index
   end
@@ -44,9 +44,9 @@ class ProfileMembersController &lt; MyProfileController
   def remove_role
     @association = RoleAssignment.find(:all, :conditions => {:id => params[:id], :target_id => profile.id})
     if @association.destroy
-      flash[:notice] = 'Member succefully unassociated'
+      session[:notice] = 'Member succefully unassociated'
     else
-      flash[:notice] = 'Failed to unassociate member'
+      session[:notice] = 'Failed to unassociate member'
     end
     render :layout => false
   end
@@ -56,9 +56,9 @@ class ProfileMembersController &lt; MyProfileController
     associations = member.find_roles(profile)
     RoleAssignment.transaction do
       if associations.map(&:destroy)
-        flash[:notice] = 'Member succefully unassociated'
+        session[:notice] = 'Member succefully unassociated'
       else
-        flash[:notice] = 'Failed to unassociate member'
+        session[:notice] = 'Failed to unassociate member'
       end
     end
     render :layout => false
@@ -20,7 +20,7 @@ class TasksController &lt; MyProfileController
       begin
         task.send(decision)
       rescue Exception => ex
-        flash[:notice] = ex.clean_message
+        session[:notice] = ex.clean_message
       end
     end
     redirect_to :action => 'index'
@@ -30,10 +30,10 @@ class AccountController &lt; ApplicationController
       end
       if redirect?
         go_to_initial_page
-        flash[:notice] = _("Logged in successfully")
+        session[:notice] = _("Logged in successfully")
       end
     else
-      flash[:notice] = _('Incorrect username or password') if redirect?
+      session[:notice] = _('Incorrect username or password') if redirect?
       redirect_to :back if redirect?
     end
   end
@@ -70,7 +70,7 @@ class AccountController &lt; ApplicationController
           invitation.update_attributes!({:friend => @user.person})
           invitation.finish
         end
-        flash[:notice] = _("Thanks for signing up!")
+        session[:notice] = _("Thanks for signing up!")
         if @wizard
           redirect_to :controller => 'search', :action => 'assets', :asset => 'communities', :wizard => true
           return
@@ -109,7 +109,7 @@ class AccountController &lt; ApplicationController
     end
     cookies.delete :auth_token
     reset_session
-    flash[:notice] = _("You have been logged out.")
+    session[:notice] = _("You have been logged out.")
     redirect_to :controller => 'home', :action => 'index'
   end
@@ -120,10 +120,10 @@ class AccountController &lt; ApplicationController
         @user.change_password!(params[:current_password],
                                params[:new_password],
                                params[:new_password_confirmation])
-        flash[:notice] = _('Your password has been changed successfully!')
+        session[:notice] = _('Your password has been changed successfully!')
         redirect_to :action => 'index'
       rescue User::IncorrectPassword => e
-        flash[:notice] = _('The supplied current password is incorrect.')
+        session[:notice] = _('The supplied current password is incorrect.')
         render :action => 'change_password'
       end
     else
@@ -235,6 +235,21 @@ class AccountController &lt; ApplicationController
     render :partial => 'identifier_status'
   end
+  def user_data
+    user_data =
+      if logged_in?
+        { "login" => current_user.login, "is_admin" => user.is_admin?(environment), 'since_month' => user.created_at.month, 'since_year' => user.created_at.year }
+      else
+        { }
+      end
+    if session[:notice]
+      user_data['notice'] = session[:notice]
+      session[:notice] = nil # consume the notice
+    end
+
+    render :text => user_data.to_json, :layout => false, :content_type => "application/javascript"
+  end
+
   protected
   def redirect?
@@ -12,10 +12,10 @@ class ContactController &lt; PublicController
       @contact.city = (!params[:city].blank? && City.exists?(params[:city])) ? City.find(params[:city]).name : nil
       @contact.state = (!params[:state].blank? && State.exists?(params[:state])) ? State.find(params[:state]).name : nil
       if @contact.deliver
-        flash[:notice] = _('Contact successfully sent')
+        session[:notice] = _('Contact successfully sent')
         redirect_to :action => 'new'
       else
-        flash[:notice] = _('Contact not sent')
+        session[:notice] = _('Contact not sent')
       end
     else
       @contact = user.build_contact(profile)
@@ -110,7 +110,7 @@ class ContentViewerController &lt; ApplicationController
     @comment = @page.comments.find(params[:remove_comment])
     if (user == @comment.author || user == @page.profile || user.has_permission?(:moderate_comments, @page.profile))
       @comment.destroy
-      flash[:notice] = _('Comment succesfully deleted')
+      session[:notice] = _('Comment succesfully deleted')
     end
     redirect_to :action => 'view_page', :profile => params[:profile], :page => @page.explode_path, :view => params[:view]
   end
@@ -22,7 +22,7 @@ class InviteController &lt; PublicController
           flash.now[:notice] = _('&lt;url&gt; is needed in invitation mail.')
         elsif !contacts_to_invite.empty?
           Invitation.invite(current_user.person, contacts_to_invite, params[:mail_template], profile)
-          flash[:notice] = _('Your invitations have been sent.')
+          session[:notice] = _('Your invitations have been sent.')
           if profile.person?
             redirect_to :controller => 'friends'
           else
@@ -76,7 +76,7 @@ class ProfileController &lt; PublicController
     @wizard = params[:wizard]
     if request.post? && params[:confirmation]
       profile.add_member(current_user.person)
-      flash[:notice] = _('%s administrator still needs to accept you as member.') % profile.name if profile.closed?
+      session[:notice] = _('%s administrator still needs to accept you as member.') % profile.name if profile.closed?
       if @wizard
         redirect_to :controller => 'search', :action => 'assets', :asset => 'communities', :wizard => true
       else
@@ -84,7 +84,7 @@ class ProfileController &lt; PublicController
       end
     else
       if current_user.person.memberships.include?(profile)
-        flash[:notice] = _('You are already a member of "%s"') % profile.name
+        session[:notice] = _('You are already a member of "%s"') % profile.name
         redirect_to profile.url
         return
       end
@@ -129,7 +129,7 @@ class ProfileController &lt; PublicController
   def unblock
     if current_user.person.is_admin?(profile.environment)
       profile.unblock
-      flash[:notice] = _("You have unblocked %s successfully. ") % profile.name
+      session[:notice] = _("You have unblocked %s successfully. ") % profile.name
       redirect_to :controller => 'profile', :action => 'index'
     else
       message = __('You are not allowed to unblock enterprises in this environment.')
@@ -643,5 +643,9 @@ class Environment &lt; ActiveRecord::Base
     Product.find(:all, {:conditions => {:highlighted => true, :enterprise_id => self.enterprises.find(:all, :select => :id) }, :joins => :image}.merge(options))
   end
+  settings_items :home_cache_in_minutes, :type => :integer, :default => 5
+  settings_items :general_cache_in_minutes, :type => :integer, :default => 15
+  settings_items :profile_cache_in_minutes, :type => :integer, :default => 15
+
 end
@@ -10,11 +10,7 @@ class LoginBlock &lt; Block
   def content
     lambda do
-      if logged_in?
-        render :file => 'account/user_info'
-      else
-        render :file => 'account/login_block'
-      end
+      render :file => 'blocks/login_block'
     end
   end
@@ -6,7 +6,7 @@
     <div class="login-box-content">
 <%
-  @user = User.new  if ! @user
+  @user ||= User.new
 %>
     <% labelled_form_for :user, @user,
@@ -1,16 +0,0 @@
-<div class="logged-user-info">
-
-<h2><%= _('Logged in as %s') % user.identifier %></h2>
-
-<ul>
-  <li><%= _('User since %{year}/%{month}') % { :year => user.created_at.year, :month => user.created_at.month } %></li>
-  <li><%= link_to_homepage _('Homepage') %></li>
-</ul>
-
-<div class="user-actions">
-<%= lightbox_link_to content_tag('span', _('Logout')),
-    { :controller => 'account', :action => 'logout_popup' },
-    :class => 'button with-text icon-menu-logout' %>
-</div>
-
-</div>
@@ -0,0 +1,13 @@
+<div class="logged-user-info" style='display: none;'>
+  <h2><%= _('Logged in as %s') % '%{login}' %></h2>
+  <ul>
+    <li><%= _('User since %{year}/%{month}') %></li>
+    <li><%= link_to _('Homepage'), '/%{login}' %></li>
+  </ul>
+  <div class="user-actions">
+    <%= link_to content_tag('span', _('Logout')), { :controller => 'account', :action => 'logout' }, :class => 'button with-text icon-menu-logout' %>
+  </div>
+</div>
+<div class='not-logged-user' style='display: none;'>
+  <%= render :file => 'account/login_block' %>
+</div>
@@ -33,7 +33,7 @@
     <div id="notice" onclick="Element.hide('notice');" style="display:none">
       <% unless flash[:notice].nil? %>
-        <%= flash[:notice] unless flash[:notice].nil? %>
+        <%= flash[:notice] %>
         <%= javascript_tag(visual_effect( :appear, 'notice')) %>
       <% end %>
     </div>
@@ -41,24 +41,18 @@
       </div>
       <div id="wrap-2">
         <div id="user">
-          <% if logged_in? %>
-            <%= _('Welcome, %s.') % link_to('<i></i><strong>' + user.identifier + '</strong>', user.url, :id => "homepage-link", :title => _('Go to your homepage')) %>
-            <% if user.is_admin?(environment) %>
-              <%= link_to('<i class="icon-menu-admin"></i><strong>' + _('Administration') + '</strong>', { :controller => 'admin_panel', :action => 'index' }, :id => "controlpanel", :title => _("Configure the environment")) %>
-            <% end %>
-            <% if (user.environment == environment) %>
-              <%= link_to('<i class="icon-menu-ctrl-panel"></i><strong>' + _('Control panel') + '</strong>', user.admin_url, :id => "controlpanel", :title => _("Configure your personal account and content")) %>
-            <% end %>
+          <span class='logged-in' style='display: none;'>
+            <%= _('Welcome, %s.') % link_to('<i></i><strong>%{login}</strong>', '/%{login}', :id => "homepage-link", :title => _('Go to your homepage')) %>
+            <%= link_to('<i class="icon-menu-admin"></i><strong>' + _('Administration') + '</strong>', { :controller => 'admin_panel', :action => 'index' }, :id => "controlpanel", :title => _("Configure the environment"), :class => 'admin-link') %>
+            <%= link_to('<i class="icon-menu-ctrl-panel"></i><strong>' + _('Control panel') + '</strong>', '/myprofile/%{login}', :id => "controlpanel", :title => _("Configure your personal account and content")) %>
             <%= link_to('<i class="icon-menu-logout"></i><strong>' + _('Logout') + '</strong>', { :controller => 'account', :action => 'logout'} , :id => "logout", :title => _("Leave the system")) %>
-          <% else %>
-            <% if params[:controller] != 'account' || params[:action] != 'signup' %>
+          </span>
+          <span class='not-logged-in' style='display: none'>
               <%= _('%s or %s') % [thickbox_inline_popup_link('<i class="icon-menu-login"></i><strong>' + _('Login') + '</strong>', login_url, 'inlineLoginBox', :id => 'link_login'), link_to('<strong>' + _('Register') + '</strong>', :controller => 'account', :action => 'signup') ] %>
               <div id='inlineLoginBox' style='display: none;'>
                 <%= render :file => 'account/login', :locals => { :is_thickbox => true } %>
               </div>
-            <% end %>
-          <% end %>
-
+          </span>
           <form action="/search" class="search_form" method="get" class="clean">
             <input name="query" size="15" value="<%=_('Search...')%>"
                 onfocus="this.form.className='focused';
-    <% unless flash[:notice].nil? %>
-      <div id="notice" onclick="Element.hide('notice');" style="display:none">
-        <%= flash[:notice] %>
-        <%= javascript_tag(
-          visual_effect( :appear,    'notice', :duration => 1.5, :to => 0.8, :queue => :end ) +
-          'setTimeout(function() { %s }, 5000)' % visual_effect( :fade,      'notice', :duration => 1.0, :from => 0.8, :queue => :end )
-        ) %>
-      </div>
-    <% end %>
-
     <% if is_testing_theme %>
       <%= render :file => 'shared/theme_test_panel' %>
     <% end %>
@@ -9,7 +9,7 @@
 #
 # It's strongly recommended to check this file into your version control system.
-ActiveRecord::Schema.define(:version => 20100730141134) do
+ActiveRecord::Schema.define(:version => 20100811211216) do
   create_table "article_versions", :force => true do |t|
     t.integer  "article_id"
@@ -10,7 +10,7 @@ Feature: blog
     And I am logged in as "joaosilva"
   Scenario: create a blog
-    Given I follow "Control panel"
+    Given I go to the Control panel
     And I follow "Create blog"
     Then I should see "My Blog"
     When I fill in "Title" with "My Blog"
@@ -19,7 +19,7 @@ Feature: blog
     Then I should see "Configure blog"
   Scenario: redirect to blog after create blog from control panel
-    Given I follow "Control panel"
+    Given I go to the Control panel
     And I follow "Create blog"
     Then I should see "My Blog"
     When I fill in "Title" with "My Blog"
@@ -27,7 +27,7 @@ Feature: blog
     Then I should be on /joaosilva/my-blog
   Scenario: redirect to blog after create blog from cms
-    Given I follow "Control panel"
+    Given I go to the Control panel
     And I follow "Manage Content"
     When I follow "New Blog"
     And I fill in "Title" with "Blog from cms"
@@ -35,12 +35,12 @@ Feature: blog
     Then I should be on /joaosilva/blog-from-cms
   Scenario: create multiple blogs
-    Given I follow "Control panel"
+    Given I go to the Control panel
     And I follow "Manage Content"
     And I follow "New Blog"
     And I fill in "Title" with "Blog One"
     And I press "Save"
-    Then I follow "Control panel"
+    Then I go to the Control panel
     And I follow "Manage Content"
     And I follow "New Blog"
     And I fill in "Title" with "Blog Two"
@@ -49,16 +49,16 @@ Feature: blog
     And I should be on /joaosilva/blog-two
   Scenario: cancel button back to cms
-    Given I follow "Control panel"
+    Given I go to the Control panel
     And I follow "Manage Content"
     And I follow "New Blog"
-    When I follow "Cancel"
+    When I follow "Cancel" within ".main-block"
     Then I should be on /myprofile/joaosilva/cms
   Scenario: cancel button back to myprofile
-    Given I follow "Control panel"
+    Given I go to the Control panel
     And I follow "Create blog"
-    When I follow "Cancel"
+    When I follow "Cancel" within ".main-block"
     Then I should be on /myprofile/joaosilva
   Scenario: configure blog link to cms
@@ -66,7 +66,7 @@ Feature: blog
       | owner     | name     |
       | joaosilva | Blog One |
       | joaosilva | Blog Two |
-    And I follow "Control panel"
+    And I go to the Control panel
     When I follow "Configure blog"
     Then I should be on /myprofile/joaosilva/cms
@@ -74,7 +74,7 @@ Feature: blog
     Given the following blogs
        | owner     | name     |
        | joaosilva | Blog One |
-    And I follow "Control panel"
+    And I go to the Control panel
     When I follow "Configure blog"
     Then I should be on edit "Blog One" by joaosilva
@@ -82,7 +82,7 @@ Feature: blog
     Given the following blogs
       | owner     | name     |
       | joaosilva | Blog One |
-    And I follow "Control panel"
+    And I go to the Control panel
     And I follow "Configure blog"
     And I fill in "Address" with "blog-two"
     And I press "Save"
@@ -90,7 +90,7 @@ Feature: blog
     Then I should see "Blog One"
   Scenario: display tag list field when creating new blog
-    Given I follow "Control panel"
+    Given I go to the Control panel
     And I follow "Manage Content"
     When I follow "New blog"
     Then I should see "Tag list"
@@ -11,7 +11,7 @@ Feature: create community
   Scenario: a user creates a community
     Given I am logged in as "joaosilva"
     And feature "admin_must_approve_new_communities" is disabled on environment
-    And I follow "Control panel"
+    And I go to the Control panel
     And I follow "Manage my groups"
     When I follow "Create a new community"
     And I fill in "Name" with "Fancy community"
@@ -21,7 +21,7 @@ Feature: create community
   Scenario: a user creates a community when environment moderates it
     Given I am logged in as "joaosilva"
     And feature "admin_must_approve_new_communities" is enabled on environment
-    When I follow "Control panel"
+    When I go to the Control panel
     And I follow "Manage my groups"
     And I follow "Create a new community"
     And I fill in "Name" with "Community for moderation"
@@ -31,7 +31,7 @@ Feature: create community
   Scenario: a user tries to create a community without a name
     Given I am logged in as "joaosilva"
     And feature "admin_must_approve_new_communities" is disabled on environment
-    And I follow "Control panel"
+    And I go to the Control panel
     And I follow "Manage my groups"
     When I follow "Create a new community"
     And I press "Create"
@@ -41,20 +41,20 @@ Feature: create community
     Given I am logged in as admin
     And feature "admin_must_approve_new_communities" is enabled on environment
     When I create community "Community for approval"
-    And I follow "Control Panel"
+    And I go to the Control panel
     Then I should see "admin_user wants to create community Community for approval"
   Scenario: environment admin accepts new community task
     Given I am logged in as admin
     And feature "admin_must_approve_new_communities" is enabled on environment
     When I create community "Community for approval"
-    And I follow "Control Panel"
+    And I go to the Control panel
     And I follow "Process requests"
     And I should see "admin_user wants to create community Community for approval"
     And I choose "Approve"
     When I press "Ok!"
     Then I should not see "admin_user wants to create community Community for approval"
-    When I follow "Control panel"
+    When I go to the Control panel
     And I follow "Manage my groups"
     Then I should see "Community for approval"
@@ -62,13 +62,13 @@ Feature: create community
     Given I am logged in as admin
     And feature "admin_must_approve_new_communities" is enabled on environment
     When I create community "Community for approval"
-    And I follow "Control Panel"
+    And I go to the Control panel
     And I follow "Process requests"
     And I should see "admin_user wants to create community Community for approval"
     And I choose "Reject"
     When I press "Ok!"
     Then I should not see "admin_user wants to create community Community for approval"
-    When I follow "Control panel"
+    When I go to the Control panel
     And I follow "Manage my groups"
     Then I should not see "Community for approval"
@@ -77,7 +77,7 @@ Feature: create community
     And feature "admin_must_approve_new_communities" is enabled on environment
     When I create community "Community for approval"
     And I approve community "Community for approval"
-    When I follow "Control panel"
+    When I go to the Control panel
     And I follow "Manage my groups"
     Then I should see "Community for approval"
@@ -86,7 +86,7 @@ Feature: create community
     And feature "admin_must_approve_new_communities" is enabled on environment
     When I create community "Community for approval"
     And I reject community "Community for approval"
-    When I follow "Control panel"
+    When I go to the Control panel
     And I follow "Manage my groups"
     Then I should not see "Community for approval"
@@ -31,27 +31,27 @@ Feature: edit article
     And I should be on /joaosilva/my-folder
   Scenario: cancel button back to cms
-    Given I follow "Control panel"
+    Given I go to the Control panel
     And I follow "Manage Content"
     And I follow "New Folder"
-    When I follow "Cancel"
+    When I follow "Cancel" within ".main-block"
     Then I should be on Joao Silva's cms
   Scenario: display tag list field when creating event
-    Given I follow "Control panel"
+    Given I go to the Control panel
     And I follow "Manage Content"
     And I follow "New article"
     When I follow "Event"
     Then I should see "Tag list"
   Scenario: display tag list field when creating folder
-    Given I follow "Control panel"
+    Given I go to the Control panel
     And I follow "Manage Content"
     When I follow "New folder"
     Then I should see "Tag list"
   Scenario: create new article with tags
-    Given I follow "Control panel"
+    Given I go to the Control panel
     And I follow "Manage Content"
     And I follow "New article"
     When I follow "Text article with Textile markup language"
@@ -85,7 +85,7 @@ Feature: edit article
     Given I am on Joao Silva's sitemap
     And I follow "Save the whales"
     And I follow "Edit"
-    When I follow "Cancel"
+    When I follow "Cancel" within ".main-block"
     Then I should be on /joaosilva/save-the-whales
   Scenario: create an article inside a folder
@@ -111,6 +111,6 @@ Feature: edit article
     Then I should be on /joaosilva/my-folder
     When I follow "New article"
     And I follow "Text article with visual editor"
-    When I follow "Cancel"
+    When I follow "Cancel" within ".no-boxes"
     And I should be on /joaosilva/my-folder
@@ -0,0 +1,60 @@
+Feature: HTTP caching
+
+  As a sysdamin
+  I want Noosfero to provide appropriate cache headers
+  So that Varnish can serve content from the cache, everything works faster and everyone is happy
+
+  Background:
+    Given the following user
+      | login | name |
+      | joao | João Silva |
+
+  Scenario: home page, default configuration
+    When I go to the homepage
+    Then the response should be valid for 5 minutes
+    And the cache should be public
+
+  Scenario: home page, custom configuration
+    Given the following environment configuration
+      | home_cache_in_minutes | 10 |
+    When I go to the homepage
+    Then the response should be valid for 10 minutes
+
+  Scenario: search results, default configuration
+    Given I am on the search page
+    When I fill in "query" with "anything"
+    And I press "Search"
+    Then the response should be valid for 15 minutes
+
+  Scenario: search results, custom configuration
+    Given the following environment configuration
+      | general_cache_in_minutes | 90 |
+    When I go to the search page
+    And I fill in "query" with "anything"
+    And I press "Search"
+    Then the response should be valid for 90 minutes
+
+  Scenario: profile pages, default configuaration
+    When I go to João Silva's homepage
+    Then the response should be valid for 15 minutes
+
+  Scenario: profile pages, custom configuration
+    Given the following environment configuration
+      | profile_cache_in_minutes | 90 |
+    When I go to João Silva's homepage
+    Then the response should be valid for 90 minutes
+
+  Scenario: account controller should not be cached at all
+    When I go to /account/login
+    Then there must be no cache at all
+
+  Scenario: profile administration
+    Given I am logged in as "joao"
+    When I go to João Silva's control panel
+    Then there must be no cache at all
+
+  Scenario: environment administration
+    Given I am logged in as admin
+    When I go to /admin
+    Then there must be no cache at all
+
@@ -92,32 +92,32 @@ Feature: invitation
     And I fill in "mail_template" with "Follow this link <url>"
     And I press "Invite my friends!"
     When I am logged in as "josesantos"
-    And I follow "Control Panel"
+    And I go to the Control panel
     And I should see "josesilva invites you to join the community 26 Bsslines."
   Scenario: noosfero user accepts to join community
     Given I invite email "santos@invalid.br" to join community "26 Bsslines"
     When I am logged in as "josesantos"
-    And I follow "Control panel"
+    And I go to the Control panel
     And I follow "Process requests"
     And I should see "josesilva invites you to join the community 26 Bsslines."
     And I choose "Accept"
     When I press "Ok!"
     Then I should not see "josesilva invites you to join the community 26 Bsslines."
-    When I follow "Control panel"
+    When I go to the Control panel
     And I follow "Manage my groups"
     Then I should see "26 Bsslines"
   Scenario: noosfero user rejects to join community
     Given I invite email "santos@invalid.br" to join community "26 Bsslines"
     When I am logged in as "josesantos"
-    And I follow "Control panel"
+    And I go to the Control panel
     And I follow "Process requests"
     And I should see "josesilva invites you to join the community 26 Bsslines."
     And I choose "Reject"
     When I press "Ok!"
     Then I should not see "josesilva invites you to join the community 26 Bsslines."
-    When I follow "Control panel"
+    When I go to the Control panel
     And I follow "Manage my groups"
     Then I should not see "26 Bsslines"
@@ -130,31 +130,31 @@ Feature: invitation
     And I fill in "mail_template" with "Follow this link <url>"
     And I press "Invite my friends!"
     When I am logged in as "josesantos"
-    And I follow "Control Panel"
+    And I go to the Control panel
     And I should see "josesilva wants to be your friend."
   Scenario: noosfero user accepts to be friend
     Given I invite email "santos@invalid.br" to be my friend
     When I am logged in as "josesantos"
-    And I follow "Control panel"
+    And I go to the Control panel
     And I follow "Process requests"
     And I should see "josesilva wants to be your friend."
     And I choose "Accept"
     When I press "Ok!"
     And I should not see "josesilva wants to be your friend."
-    When I follow "Control panel"
+    When I go to the Control panel
     And I follow "Manage friends"
     Then I should see "josesilva"
   Scenario: noosfero user rejects to be friend
     Given I invite email "santos@invalid.br" to be my friend
     When I am logged in as "josesantos"
-    And I follow "Control panel"
+    And I go to the Control panel
     And I follow "Process requests"
     And I should see "josesilva wants to be your friend."
     And I choose "Ignore"
     When I press "Ok!"
     And I should not see "josesilva wants to be your friend."
-    When I follow "Control panel"
+    When I go to the Control panel
     And I follow "Manage friends"
     Then I should not see "josesilva"
@@ -48,7 +48,7 @@ Feature: join a community
     And I go to Sample Community's homepage
     And I press "Yes"
     And I follow "New user"
-    And I fill in the following:
+    And I fill in the following within ".no-boxes":
       | e-mail | jose@domain.br |
       | Username | joseoliveira |
       | Password | 123456 |
@@ -16,7 +16,7 @@ Feature: Location
       | state    |
       | city     |
       | zip_code |
-    And I follow "Control panel"
+    And I go to the Control panel
     And I follow "Location"
     When I fill in "Address" with "Rua Marechal Floriano, 28"
     And I select "Brazil" from "Country"
@@ -9,7 +9,7 @@ Feature: organization custom fields
       | joaosilva | Joao Silva |
     And I am logged in as "joaosilva"
     And feature "enterprise_registration" is enabled on environment
-    And I follow "Control panel"
+    And I go to the Control panel
   Scenario Outline: organization active fields are not displayed on creation
     Given the following <organization> fields are active fields
@@ -110,9 +110,11 @@ Feature: publish article
     And I am on Sample Community's control panel
     And I follow "Tasks"
     And I press "Ok!"
-    And I should not see "The title (article name) is already being used by another article, please use another title."
-    When I press "Ok!"
-    Then I should see "The title (article name) is already being used by another article, please use another title."
+    And I press "Ok!"
+    Then I should see "wants to publish"
+    When I fill in "Name for publishing" with "other title"
+    And I press "Ok!"
+    Then I should not see "wants to publish"
   Scenario: ask to publish an article that was deleted before approval
     Given I am logged in as "joaosilva"
@@ -92,7 +92,7 @@ Feature: register enterprise
     And I press "Next"
     Then I should see "Enterprise registration completed"
     And I am logged in as admin
-    And I follow "Control panel"
+    And I go to the Control panel
     When I follow "Tasks"
     Then I should see /Processing task: Enterprise registration: "My Enterprise"/
     And the first mail is to admin_user@example.com
@@ -118,7 +118,7 @@ Feature: register enterprise
     And I press "Next"
     Then I should see "Enterprise registration completed"
     And I am logged in as admin
-    And I follow "Control panel"
+    And I go to the Control panel
     When I follow "Tasks"
     Then I should see /Processing task: Enterprise registration: "My Enterprise"/
     And the first mail is to admin_user@example.com
@@ -0,0 +1,22 @@
+Feature: session and cookies handling
+
+  As a Noosfero system administrator
+  I want Noosfero to manage well it usage of sessions and cookies
+  So that we can use HTTP caching effectively
+
+  Scenario: home page, logged in
+    Given the following users
+      | login     |
+      | joaosilva |
+    When I am logged in as "joaosilva" 
+    And I go to the homepage
+    Then there must be a cookie "_noosfero_session"
+
+  Scenario: home page, not logged in
+    When I go to the homepage
+    Then there must be no cookies
+
+  Scenario: logout
+    Given I am logged in as "joao"
+    When I go to /logout
+    Then there must be a cookie "auth_token"
@@ -7,13 +7,14 @@ Feature: signup
     Given I am on the homepage
     When I follow "Login"
     And I follow "New user"
-    And I fill in "e-Mail" with "josesilva@example.com"
-    And I fill in "Username" with "josesilva"
-    And I fill in "Password" with "secret"
-    And I fill in "Password confirmation" with "secret"
-    And I fill in "Name" with "José da Silva"
+    And I fill in the following within ".no-boxes":
+      | e-Mail                | josesilva@example.com |
+      | Username              | josesilva             |
+      | Password              | secret                |
+      | Password confirmation | secret                |
+      | Name                  | José da Silva         |
     And I press "Sign up"
-    Then I should see "Thanks for signing up!"
+    Then I should be logged in as "josesilva"
   Scenario: be redirected if user goes to signup page and is logged
     Given the following users
 Given /^I create community "(.+)"$/ do |community|
-  click_link('Control panel')
+  Given 'I go to the Control panel'
   click_link('Manage my groups')
   click_link('Create a new community')
   fill_in("Name", :with => community)
@@ -8,7 +8,7 @@ end
 Given /^I approve community "(.+)"$/ do |community|
    task = CreateCommunity.all.select {|c| c.name == community}.first
-   click_link('Control Panel')
+   Given 'I go to the Control panel'
    click_link('Process requests')
    choose("decision-finish-#{task.id}")
    click_button('OK!')
@@ -16,7 +16,7 @@ end
 Given /^I reject community "(.+)"$/ do |community|
    task = CreateCommunity.all.select {|c| c.name == community}.first
-   click_link('Control Panel')
+   Given 'I go to the Control panel'
    click_link('Process requests')
    choose("decision-cancel-#{task.id}")
    click_button('OK!')
@@ -18,3 +18,15 @@ When /^I select &quot;([^\&quot;]*)&quot;$/ do |value|
     selenium.wait_for_ajax
   end
 end
+
+When /^I fill in the following within "([^\"]*)":$/ do |parent, fields|
+  fields.rows_hash.each do |name, value|
+    When %{I fill in "#{name}" with "#{value}" within "#{parent}"}
+  end
+end
+
+When /^I fill in "([^\"]*)" with "([^\"]*)" within "([^\"]*)"$/ do |field, value, parent|
+  within(parent) do |content|
+    content.fill_in(field, :with => value)
+  end
+end
@@ -0,0 +1,21 @@
+Then /^the response should be valid for (.+) minutes$/ do |n|
+  response.headers['Cache-Control'].split(/,\s*/).should include("max-age=#{n.to_i * 60}")
+end
+
+Then /^the cache should be public/ do
+  response.headers['Cache-Control'].split(/,\s*/).should include("public")
+end
+
+Then /^there must be no cache at all$/ do
+  parts = response.headers['Cache-Control'].split(/,\s*/)
+  parts.should include('must-revalidate')
+  parts.should include('max-age=0')
+end
+
+Then 'there must be no cookies' do
+  cookies.should == {}
+end
+
+Then /^there must be a cookie "(.+)"$/ do |cookie_name|
+  cookies.keys.should include(cookie_name)
+end
@@ -9,7 +9,7 @@ Given /^I invite email &quot;(.+)&quot; to join community &quot;(.+)&quot;$/ do |email, community|
 end
 Given /^I invite email "(.+)" to be my friend$/ do |email|
-  click_link('Control panel')
+  Given "I go to the Control panel"
   click_link('Manage friends')
   click_link('Invite people from my e-mail contacts')
   click_button('Next')
@@ -231,3 +231,15 @@ Given /^the (.+) mail (.+) is like (.+)$/ do |position, field, regexp|
     re =~ ActionMailer::Base.deliveries.send(position)[field.to_sym]
   end
 end
+
+Given /^the following environment configuration$/ do |table|
+  env = Environment.default
+  table.raw.each do |item|
+    env.send("#{item[0]}=", item[1])
+  end
+  env.save
+end
+
+Then /^I should be logged in as "(.+)"$/ do |login|
+  User.find(session[:user]).login.should == login
+end
@@ -42,6 +42,9 @@ module NavigationHelpers
     when /^(.*)'s control panel$/
       '/myprofile/%s' % Profile.find_by_name($1).identifier
+    when /^the Control panel$/
+      '/myprofile/%s' % User.find_by_id(session[:user]).login
+
     when /^the search page$/
       '/search'
@@ -22,7 +22,7 @@ Feature: tags
   Scenario: viewing a single tag
     When I go to /tag
-    And I follow "environment"
+    And I follow "environment" within ".no-boxes"
     Then I should see "save the whales"
     And I should see "the Amazon is being destroyed"
@@ -263,3 +263,27 @@ jQuery(document).ready(function() {
   jQuery('body').click(function() { hideAllSubmenus(); });
   jQuery('.menu-submenu-trigger').click(function(e) { e.stopPropagation(); });
 });
+
+// controls the display of the login/logout stuff
+jQuery(function($) {
+  $.getJSON('/account/user_data', function(data) {
+    if (data.login) {
+      // logged in
+     $('#user .logged-in, .login-block .logged-user-info').each(function() {
+       $(this).find('a[href]').each(function() {
+         $(this).attr('href', $(this).attr('href').replace('%{login}', data.login))
+       });
+       var html = $(this).html().replace('%{login}', data.login).replace('%{month}', data.since_month).replace('%{year}', data.since_year);
+       $(this).html(html).fadeIn();
+     });
+    } else {
+      // not logged in
+      $('#user .not-logged-in, .login-block .not-logged-user').fadeIn();
+    }
+    if (data.notice) {
+      var $noticeBox = $('<div id="notice"></div>').html(data.notice).appendTo('body').fadeTo('fast', 0.8);
+      $noticeBox.click(function() { $(this).hide(); });
+      setTimeout(function() { $noticeBox.fadeOut('fast'); }, 5000);
+    }
+  });
+});
@@ -2342,6 +2342,10 @@ div#activation_enterprise div {
   margin: auto;
 }
+.login-block {
+  min-height: 100px;
+}
+
 .login-block .login-box {
 }
@@ -36,7 +36,7 @@ class FeaturesControllerTest &lt; Test::Unit::TestCase
     uses_host 'anhetegua.net'
     post :update, :environment => { :enabled_features => [ 'feature1', 'feature2' ] }
     assert_redirected_to :action => 'index'
-    assert_kind_of String, flash[:notice]
+    assert_kind_of String, session[:notice]
     v = Environment.find(environments(:anhetegua_net).id)
     assert v.enabled?('feature2')
     assert v.enabled?('feature2') 
@@ -47,7 +47,7 @@ class FeaturesControllerTest &lt; Test::Unit::TestCase
     uses_host 'anhetegua.net'
     post :update # no features
     assert_redirected_to :action => 'index'
-    assert_kind_of String, flash[:notice]
+    assert_kind_of String, session[:notice]
     v = Environment.find(environments(:anhetegua_net).id)
     assert !v.enabled?('feature1')
     assert !v.enabled?('feature2')
@@ -64,7 +64,7 @@ class FeaturesControllerTest &lt; Test::Unit::TestCase
     uses_host 'anhetegua.net'
     post :update, :environment => { :organization_approval_method => 'region' }
     assert_redirected_to :action => 'index'
-    assert_kind_of String, flash[:notice]
+    assert_kind_of String, session[:notice]
     v = Environment.find(environments(:anhetegua_net).id)
     assert_equal :region, v.organization_approval_method
   end
@@ -112,7 +112,7 @@ class MailconfControllerTest &lt; Test::Unit::TestCase
   should 'display notice after saving' do
     login_as('ze')
     post :enable, :profile => 'ze'
-    assert_kind_of String, flash[:notice]
+    assert_kind_of String, session[:notice]
   end
   should 'link back to control panel' do
@@ -183,7 +183,7 @@ class ProfileControllerTest &lt; Test::Unit::TestCase
     community = Community.create!(:name => 'my test community')
     community.add_admin(@profile)
     get :index, :profile => community.identifier
-    assert_tag :tag => 'a', :attributes => { :href => /\/myprofile\/#{@profile.identifier}/ }, :content => 'Control panel'
+    assert_tag :tag => 'a', :attributes => { :href => /\/myprofile\/%\{login\}/ }, :content => 'Control panel'
   end
   should 'show create community in own profile' do
@@ -42,7 +42,7 @@ class RoleControllerTest &lt; Test::Unit::TestCase
     Role.any_instance.stubs(:valid?).returns(true)
     post 'create'
     assert !assigns(:role).new_record?
-    assert_nil flash[:notice]
+    assert_nil session[:notice]
     assert_response :redirect
   end
@@ -50,7 +50,7 @@ class RoleControllerTest &lt; Test::Unit::TestCase
     Role.any_instance.stubs(:valid?).returns(false)
     post 'create'
     assert assigns(:role).new_record?
-    assert_not_nil flash[:notice]
+    assert_not_nil session[:notice]
     assert_response :success
   end
@@ -65,7 +65,7 @@ class RoleControllerTest &lt; Test::Unit::TestCase
     post 'update', :id => @role.id
     assert_response :redirect
     assert_not_nil assigns(:role)
-    assert_nil flash[:notice]
+    assert_nil session[:notice]
   end
   def test_should_not_update_to_invalid_paramters
@@ -73,7 +73,7 @@ class RoleControllerTest &lt; Test::Unit::TestCase
     post 'update', :id => @role.id
     assert_response :success
     assert_not_nil assigns(:role)
-    assert_not_nil flash[:notice]
+    assert_not_nil session[:notice]
   end
   def test_should_destroy
@@ -1005,4 +1005,73 @@ class EnvironmentTest &lt; Test::Unit::TestCase
     assert_not_includes env.users, user_from_other_environment
   end
+  should 'provide cache time for home page' do
+    env = Environment.new
+    assert env.respond_to?(:home_cache_in_minutes)
+  end
+
+  should 'store cache time for home page' do
+    env = Environment.new(:home_cache_in_minutes => 99)
+    assert_equal 99, env.home_cache_in_minutes
+  end
+
+  should 'retrieve cache time for home page' do
+    env = fast_create(Environment)
+    env.home_cache_in_minutes = 33
+    env.save!
+
+    assert_equal 33, Environment.find(env.id).home_cache_in_minutes
+  end
+
+  should 'cache home page for 5 minutes by default' do
+    env = Environment.new
+    assert_equal 5, env.home_cache_in_minutes
+  end
+
+  should 'provide cache time for general content' do
+    env = Environment.new
+    assert env.respond_to?(:general_cache_in_minutes)
+  end
+
+  should 'store cache time for general content' do
+    env = Environment.new(:general_cache_in_minutes => 99)
+    assert_equal 99, env.general_cache_in_minutes
+  end
+
+  should 'retrieve cache time for general content' do
+    env = fast_create(Environment)
+    env.general_cache_in_minutes = 33
+    env.save!
+
+    assert_equal 33, Environment.find(env.id).general_cache_in_minutes
+  end
+
+  should 'cache general content for 15 minutes by default' do
+    env = Environment.new
+    assert_equal 15, env.general_cache_in_minutes
+  end
+
+  should 'provide cache time for profile content' do
+    env = Environment.new
+    assert env.respond_to?(:profile_cache_in_minutes)
+  end
+
+  should 'store cache time for profile content' do
+    env = Environment.new(:profile_cache_in_minutes => 99)
+    assert_equal 99, env.profile_cache_in_minutes
+  end
+
+  should 'retrieve cache time for profile content' do
+    env = fast_create(Environment)
+    env.profile_cache_in_minutes = 33
+    env.save!
+
+    assert_equal 33, Environment.find(env.id).profile_cache_in_minutes
+  end
+
+  should 'cache profile content for 15 minutes by default' do
+    env = Environment.new
+    assert_equal 15, env.profile_cache_in_minutes
+  end
+
 end
@@ -11,16 +11,4 @@ class LoginBlockTest &lt; Test::Unit::TestCase
     assert_not_equal Block.description, LoginBlock.description
   end
-  should 'point to account/login_block' do
-    self.expects(:logged_in?).returns(false)
-    self.expects(:render).with(:file => 'account/login_block')
-    self.instance_eval(& block.content)
-  end
-
-  should 'display user_info if not logged' do
-    self.expects(:logged_in?).returns(true)
-    self.expects(:render).with(:file => 'account/user_info')
-    self.instance_eval(& block.content)
-  end
-
 end
@@ -0,0 +1,65 @@
+module NoosferoHttpCaching
+
+  def self.included(c)
+    c.send(:after_filter, :noosfero_set_cache)
+    c.send(:before_filter, :noosfero_session_check_before)
+    c.send(:after_filter, :noosfero_session_check_after)
+  end
+
+  def noosfero_set_cache
+    n = nil
+    if profile
+      unless request.path =~ /^\/myprofile/
+        n = environment.profile_cache_in_minutes
+      end
+    else
+      if request.path == '/'
+        n = environment.home_cache_in_minutes
+      else
+        if params[:controller] != 'account' && request.path !~ /^\/admin/
+          n = environment.general_cache_in_minutes
+        end
+      end
+    end
+    if n
+      expires_in n.minutes, :private => false, :public => true
+    end
+  end
+
+  def noosfero_session_check_before
+    return if params[:controller] == 'account'
+    headers["X-Noosfero-Auth"] = (session[:user] != nil).to_s
+  end
+
+  def noosfero_session_check_after
+    if headers['X-Noosfero-Auth'] == 'true'
+      # special case: logout
+      if !session[:user]
+        session.delete
+      end
+    else
+      # special case: login
+      if session[:user]
+        headers['X-Noosfero-Auth'] = 'true'
+      end
+    end
+  end
+
+end
+
+class ActionController::CgiResponse
+
+  def out_with_noosfero_session_check(output = $stdout)
+    if headers['X-Noosfero-Auth'] == 'false'
+      @cgi.send(:instance_variable_set, '@output_cookies', nil)
+    end
+    headers.delete('X-Noosfero-Auth')
+    out_without_noosfero_session_check(output)
+  end
+  alias_method_chain :out, :noosfero_session_check
+
+end
+
+if Rails.env != 'development'
+  ActionController::Base.send(:include, NoosferoHttpCaching)
+end
	@@ -40,7 +40,7 @@ class AdminPanelController < AdminController		@@ -40,7 +40,7 @@ class AdminPanelController < AdminController
40	end	40	end
41	redirect_to :action => 'set_portal_folders'	41	redirect_to :action => 'set_portal_folders'
42	else	42	else
43	- flash[:notice] = __('Community not found. You must insert the identifier of a community from this environment')	43	+ session[:notice] = __('Community not found. You must insert the identifier of a community from this environment')
44	end	44	end
45	end	45	end
46	end	46	end
	@@ -54,7 +54,7 @@ class AdminPanelController < AdminController		@@ -54,7 +54,7 @@ class AdminPanelController < AdminController
54	folders = params[:folders].map{\|fid\| Folder.find(:first, :conditions => {:profile_id => env.portal_community, :id => fid})} if params[:folders]	54	folders = params[:folders].map{\|fid\| Folder.find(:first, :conditions => {:profile_id => env.portal_community, :id => fid})} if params[:folders]
55	env.portal_folders = folders	55	env.portal_folders = folders
56	if env.save	56	if env.save
57	- flash[:notice] = _('Saved the portal folders')	57	+ session[:notice] = _('Saved the portal folders')
58	redirect_to :action => 'set_portal_news_amount'	58	redirect_to :action => 'set_portal_news_amount'
59	end	59	end
60	end	60	end
	@@ -63,7 +63,7 @@ class AdminPanelController < AdminController		@@ -63,7 +63,7 @@ class AdminPanelController < AdminController
63	def set_portal_news_amount	63	def set_portal_news_amount
64	if request.post?	64	if request.post?
65	if @environment.update_attributes(params[:environment])	65	if @environment.update_attributes(params[:environment])
66	- flash[:notice] = _('Saved the number of news on folders')	66	+ session[:notice] = _('Saved the number of news on folders')
67	redirect_to :action => 'index'	67	redirect_to :action => 'index'
68	end	68	end
69	end	69	end
	@@ -14,9 +14,9 @@ class EnvironmentRoleManagerController < AdminController		@@ -14,9 +14,9 @@ class EnvironmentRoleManagerController < AdminController
14	@roles = params[:roles] ? Role.find(params[:roles]) : []	14	@roles = params[:roles] ? Role.find(params[:roles]) : []
15	@person = Person.find(params[:person])	15	@person = Person.find(params[:person])
16	if @person.define_roles(@roles, environment)	16	if @person.define_roles(@roles, environment)
17	- flash[:notice] = _('Roles successfuly updated')	17	+ session[:notice] = _('Roles successfuly updated')
18	else	18	else
19	- flash[:notice] = _('Couldnt change the roles')	19	+ session[:notice] = _('Couldnt change the roles')
20	end	20	end
21	redirect_to :action => :index	21	redirect_to :action => :index
22	end	22	end
	@@ -42,9 +42,9 @@ class EnvironmentRoleManagerController < AdminController		@@ -42,9 +42,9 @@ class EnvironmentRoleManagerController < AdminController
42	def remove_role	42	def remove_role
43	@association = RoleAssignment.find(params[:id])	43	@association = RoleAssignment.find(params[:id])
44	if @association.destroy	44	if @association.destroy
45	- flash[:notice] = _('Member succefully unassociated')	45	+ session[:notice] = _('Member succefully unassociated')
46	else	46	else
47	- flash[:notice] = _('Failed to unassociate member')	47	+ session[:notice] = _('Failed to unassociate member')
48	end	48	end
49	redirect_to :aciton => 'index'	49	redirect_to :aciton => 'index'
50	end	50	end
	@@ -52,9 +52,9 @@ class EnvironmentRoleManagerController < AdminController		@@ -52,9 +52,9 @@ class EnvironmentRoleManagerController < AdminController
52	def unassociate	52	def unassociate
53	@association = RoleAssignment.find(params[:id])	53	@association = RoleAssignment.find(params[:id])
54	if @association.destroy	54	if @association.destroy
55	- flash[:notice] = _('Member succefully unassociated')	55	+ session[:notice] = _('Member succefully unassociated')
56	else	56	else
57	- flash[:notice] = _('Failed to unassociate member')	57	+ session[:notice] = _('Failed to unassociate member')
58	end	58	end
59	redirect_to :aciton => 'index'	59	redirect_to :aciton => 'index'
60	end	60	end
	@@ -8,7 +8,7 @@ class FeaturesController < AdminController		@@ -8,7 +8,7 @@ class FeaturesController < AdminController
8	post_only :update	8	post_only :update
9	def update	9	def update
10	if @environment.update_attributes(params[:environment])	10	if @environment.update_attributes(params[:environment])
11	- flash[:notice] = _('Features updated successfully.')	11	+ session[:notice] = _('Features updated successfully.')
12	redirect_to :action => 'index'	12	redirect_to :action => 'index'
13	else	13	else
14	render :action => 'index'	14	render :action => 'index'
	@@ -24,7 +24,7 @@ class FeaturesController < AdminController		@@ -24,7 +24,7 @@ class FeaturesController < AdminController
24	def manage_person_fields	24	def manage_person_fields
25	environment.custom_person_fields = params[:person_fields]	25	environment.custom_person_fields = params[:person_fields]
26	if environment.save!	26	if environment.save!
27	- flash[:notice] = _('Person fields updated successfully.')	27	+ session[:notice] = _('Person fields updated successfully.')
28	else	28	else
29	flash[:error] = _('Person fields not updated successfully.')	29	flash[:error] = _('Person fields not updated successfully.')
30	end	30	end
	@@ -34,7 +34,7 @@ class FeaturesController < AdminController		@@ -34,7 +34,7 @@ class FeaturesController < AdminController
34	def manage_enterprise_fields	34	def manage_enterprise_fields
35	environment.custom_enterprise_fields = params[:enterprise_fields]	35	environment.custom_enterprise_fields = params[:enterprise_fields]
36	if environment.save!	36	if environment.save!
37	- flash[:notice] = __('Enterprise fields updated successfully.')	37	+ session[:notice] = __('Enterprise fields updated successfully.')
38	else	38	else
39	flash[:error] = __('Enterprise fields not updated successfully.')	39	flash[:error] = __('Enterprise fields not updated successfully.')
40	end	40	end
	@@ -44,7 +44,7 @@ class FeaturesController < AdminController		@@ -44,7 +44,7 @@ class FeaturesController < AdminController
44	def manage_community_fields	44	def manage_community_fields
45	environment.custom_community_fields = params[:community_fields]	45	environment.custom_community_fields = params[:community_fields]
46	if environment.save!	46	if environment.save!
47	- flash[:notice] = _('Community fields updated successfully.')	47	+ session[:notice] = _('Community fields updated successfully.')
48	else	48	else
49	flash[:error] = _('Community fields not updated successfully.')	49	flash[:error] = _('Community fields not updated successfully.')
50	end	50	end
	@@ -19,7 +19,7 @@ class RoleController < AdminController		@@ -19,7 +19,7 @@ class RoleController < AdminController
19	if @role.save	19	if @role.save
20	redirect_to :action => 'show', :id => @role	20	redirect_to :action => 'show', :id => @role
21	else	21	else
22	- flash[:notice] = _('Failed to create role')	22	+ session[:notice] = _('Failed to create role')
23	render :action => 'new'	23	render :action => 'new'
24	end	24	end
25	end	25	end
	@@ -33,7 +33,7 @@ class RoleController < AdminController		@@ -33,7 +33,7 @@ class RoleController < AdminController
33	if @role.update_attributes(params[:role])	33	if @role.update_attributes(params[:role])
34	redirect_to :action => 'show', :id => @role	34	redirect_to :action => 'show', :id => @role
35	else	35	else
36	- flash[:notice] = _('Failed to edit role')	36	+ session[:notice] = _('Failed to edit role')
37	render :action => 'edit'	37	render :action => 'edit'
38	end	38	end
39	end	39	end
	@@ -43,7 +43,7 @@ class RoleController < AdminController		@@ -43,7 +43,7 @@ class RoleController < AdminController
43	if @role.destroy	43	if @role.destroy
44	redirect_to :action => 'index'	44	redirect_to :action => 'index'
45	else	45	else
46	- flash[:notice] = _('Failed to edit role')	46	+ session[:notice] = _('Failed to edit role')
47	redirect_to :action => 'index'	47	redirect_to :action => 'index'
48	end	48	end
49	end	49	end
	@@ -96,7 +96,7 @@ class BoxOrganizerController < ApplicationController		@@ -96,7 +96,7 @@ class BoxOrganizerController < ApplicationController
96	expire_timeout_fragment(@block.cache_keys)	96	expire_timeout_fragment(@block.cache_keys)
97	redirect_to :action => 'index'	97	redirect_to :action => 'index'
98	else	98	else
99	- flash[:notice] = _('Failed to remove block')	99	+ session[:notice] = _('Failed to remove block')
100	end	100	end
101	end	101	end
102		102
	@@ -143,7 +143,7 @@ class CmsController < MyProfileController		@@ -143,7 +143,7 @@ class CmsController < MyProfileController
143	@article = profile.articles.find(params[:id])	143	@article = profile.articles.find(params[:id])
144	profile.home_page = @article	144	profile.home_page = @article
145	profile.save(false)	145	profile.save(false)
146	- flash[:notice] = _('"%s" configured as home page.') % @article.name	146	+ session[:notice] = _('"%s" configured as home page.') % @article.name
147	redirect_to :action => 'view', :id => @article.id	147	redirect_to :action => 'view', :id => @article.id
148	end	148	end
149		149
	@@ -232,7 +232,7 @@ class CmsController < MyProfileController		@@ -232,7 +232,7 @@ class CmsController < MyProfileController
232	end	232	end
233	end	233	end
234	if @failed.blank?	234	if @failed.blank?
235	- flash[:notice] = _("Your publish request was sent successfully")	235	+ session[:notice] = _("Your publish request was sent successfully")
236	if @back_to	236	if @back_to
237	redirect_to @back_to	237	redirect_to @back_to
238	else	238	else
	@@ -14,7 +14,7 @@ class FriendsController < MyProfileController		@@ -14,7 +14,7 @@ class FriendsController < MyProfileController
14	# FIXME this shouldn't be in Person model?	14	# FIXME this shouldn't be in Person model?
15	AddFriend.create!(:person => profile, :friend => @friend, :group_for_person => params[:group])	15	AddFriend.create!(:person => profile, :friend => @friend, :group_for_person => params[:group])
16		16
17	- flash[:notice] = _('%s still needs to accept being your friend.') % @friend.name	17	+ session[:notice] = _('%s still needs to accept being your friend.') % @friend.name
18	# FIXME shouldn't redirect to the friend's page?	18	# FIXME shouldn't redirect to the friend's page?
19	redirect_to :action => 'index'	19	redirect_to :action => 'index'
20	end	20	end
	@@ -20,20 +20,20 @@ class MailconfController < MyProfileController		@@ -20,20 +20,20 @@ class MailconfController < MyProfileController
20	@task = EmailActivation.new(:target => environment, :requestor => profile)	20	@task = EmailActivation.new(:target => environment, :requestor => profile)
21	begin	21	begin
22	@task.save!	22	@task.save!
23	- flash[:notice] = _('Please fill your personal information below in order to get your mailbox approved by one of the administrators')	23	+ session[:notice] = _('Please fill your personal information below in order to get your mailbox approved by one of the administrators')
24	redirect_to :controller => 'profile_editor', :action => 'edit'	24	redirect_to :controller => 'profile_editor', :action => 'edit'
25	rescue Exception => ex	25	rescue Exception => ex
26	- flash[:notice] = _('e-Mail was not enabled successfully.')	26	+ session[:notice] = _('e-Mail was not enabled successfully.')
27	render :action => 'index'	27	render :action => 'index'
28	end	28	end
29	end	29	end
30	post_only :disable	30	post_only :disable
31	def disable	31	def disable
32	if profile.user.disable_email!	32	if profile.user.disable_email!
33	- flash[:notice] = _('e-Mail disabled successfully.')	33	+ session[:notice] = _('e-Mail disabled successfully.')
34	redirect_to :controller => 'profile_editor'	34	redirect_to :controller => 'profile_editor'
35	else	35	else
36	- flash[:notice] = _('e-Mail was not disabled successfully.')	36	+ session[:notice] = _('e-Mail was not disabled successfully.')
37	redirect_to :action => 'index'	37	redirect_to :action => 'index'
38	end	38	end
39	end	39	end
	@@ -43,7 +43,7 @@ class ManageProductsController < ApplicationController		@@ -43,7 +43,7 @@ class ManageProductsController < ApplicationController
43	@level = 0	43	@level = 0
44	if request.post?	44	if request.post?
45	if @product.save	45	if @product.save
46	- flash[:notice] = _('Product succesfully created')	46	+ session[:notice] = _('Product succesfully created')
47	render :partial => 'shared/redirect_via_javascript',	47	render :partial => 'shared/redirect_via_javascript',
48	:locals => { :url => url_for(:controller => 'manage_products', :action => 'show', :id => @product) }	48	:locals => { :url => url_for(:controller => 'manage_products', :action => 'show', :id => @product) }
49	else	49	else
	@@ -101,10 +101,10 @@ class ManageProductsController < ApplicationController		@@ -101,10 +101,10 @@ class ManageProductsController < ApplicationController
101	def destroy	101	def destroy
102	@product = @profile.products.find(params[:id])	102	@product = @profile.products.find(params[:id])
103	if @product.destroy	103	if @product.destroy
104	- flash[:notice] = _('Product succesfully removed')	104	+ session[:notice] = _('Product succesfully removed')
105	redirect_back_or_default :action => 'index'	105	redirect_back_or_default :action => 'index'
106	else	106	else
107	- flash[:notice] = _('Could not remove the product')	107	+ session[:notice] = _('Could not remove the product')
108	redirect_back_or_default :action => 'show', :id => @product	108	redirect_back_or_default :action => 'show', :id => @product
109	end	109	end
110	end	110	end
	@@ -8,7 +8,7 @@ class MapsController < MyProfileController		@@ -8,7 +8,7 @@ class MapsController < MyProfileController
8	begin	8	begin
9	Profile.transaction do	9	Profile.transaction do
10	if profile.update_attributes!(params[:profile_data])	10	if profile.update_attributes!(params[:profile_data])
11	- flash[:notice] = _('Address was updated successfully!')	11	+ session[:notice] = _('Address was updated successfully!')
12	redirect_to :action => 'edit_location'	12	redirect_to :action => 'edit_location'
13	end	13	end
14	end	14	end