decidim-admin 0.23.3 → 0.24.1

data/app/cells/decidim/admin/content_block/show.erb

@@ -3,7 +3,7 @@
     <%= t(public_name_key) %>
     <div>
       <% if has_settings? %>
-        <%= link_to decidim_admin.edit_organization_homepage_content_block_path(manifest_name), class: "mr-s text-muted" do %>
+        <%= link_to edit_content_block_path, class: "mr-s text-muted" do %>
           <%= icon "pencil", role: "img" %>
         <% end %>
       <% end %>

data/app/cells/decidim/admin/content_block_cell.rb

@@ -11,6 +11,10 @@ module Decidim
         model.try(:manifest_name) || model.name
       end
 
+      def edit_content_block_path
+        decidim_admin.edit_organization_homepage_content_block_path(manifest_name)
+      end
+
       def decidim_admin
         Decidim::Admin::Engine.routes.url_helpers
       end

data/app/commands/decidim/admin/block_user.rb

@@ -0,0 +1,70 @@
+# frozen_string_literal: true
+
+module Decidim
+  module Admin
+    class BlockUser < Rectify::Command
+      # Public: Initializes the command.
+      #
+      # form - BlockUserForm
+      def initialize(form)
+        @form = form
+      end
+
+      # Executes the command. Broadcasts these events:
+      #
+      # - :ok when everything is valid, together with the resource.
+      # - :invalid if the resource is not reported
+      #
+      # Returns nothing.
+      def call
+        return broadcast(:invalid) unless form.valid?
+
+        transaction do
+          block!
+          register_justification!
+          notify_user!
+        end
+
+        broadcast(:ok, form.user)
+      end
+
+      private
+
+      attr_reader :form
+
+      def register_justification!
+        @current_blocking = UserBlock.create!(
+          justification: form.justification,
+          user: form.user,
+          blocking_user: form.current_user
+        )
+      end
+
+      def notify_user!
+        Decidim::BlockUserJob.perform_later(
+          @current_blocking.user,
+          @current_blocking.justification
+        )
+      end
+
+      def block!
+        Decidim.traceability.perform_action!(
+          "block",
+          form.user,
+          form.current_user,
+          extra: {
+            reportable_type: form.user.class.name,
+            current_justification: form.justification
+          }
+        ) do
+          form.user.blocked = true
+          form.user.blocked_at = Time.current
+          form.user.blocking = @current_blocking
+          form.user.extended_data["user_name"] = form.user.name
+          form.user.name = "Blocked user"
+          form.user.save!
+        end
+      end
+    end
+  end
+end

data/app/commands/decidim/admin/create_import.rb

@@ -0,0 +1,29 @@
+# frozen_string_literal: true
+
+module Decidim
+  module Admin
+    class CreateImport < Rectify::Command
+      def initialize(form)
+        @form = form
+      end
+
+      def call
+        return broadcast(:invalid) if form.invalid?
+
+        imported_data = form.importer.prepare
+        transaction do
+          form.importer.import!
+
+          return broadcast(:ok, imported_data)
+        rescue StandardError
+          raise ActiveRecord::Rollback
+        end
+
+        # Something went wrong with import/finish
+        broadcast(:invalid)
+      end
+
+      attr_reader :form
+    end
+  end
+end

data/app/commands/decidim/admin/create_participatory_space_admin_user_actions.rb

@@ -0,0 +1,98 @@
+# frozen_string_literal: true
+
+module Decidim
+  module Admin
+    # This is not a Command but an abstration of reusable methods by commands in participatory spaces that create space admins.
+    # Expects the command to have a `participatory_space` attribute.
+    module CreateParticipatorySpaceAdminUserActions
+      # Executes the command. Broadcasts these events:
+      #
+      # - :ok when everything is valid.
+      # - :invalid if the form wasn't valid and we couldn't proceed.
+      #
+      # Returns nothing.
+      def call
+        return broadcast(:invalid) if form.invalid?
+
+        ActiveRecord::Base.transaction do
+          @user ||= existing_user || new_user
+          existing_role || create_role
+          add_admin_as_follower
+        end
+
+        broadcast(:ok)
+      rescue ActiveRecord::RecordInvalid
+        form.errors.add(:email, :taken)
+        broadcast(:invalid)
+      end
+
+      # This is command specific
+      # It is expected to find if a UserRole for the same user, role and participatory_process already exist
+      # Return a boolean, or some object equally evaluable
+      def existing_role
+        raise NotImplementedError
+      end
+
+      # This is command specific
+      # It is expected to
+      # - create a XxxUserRole using `Decidim.traceability`
+      # - send a notification to the user telling she has been invited to manage the participatory space
+      def create_role
+        raise NotImplementedError
+      end
+
+      def existing_user
+        return @existing_user if defined?(@existing_user)
+
+        @existing_user = User.find_by(
+          email: form.email,
+          organization: @participatory_space.organization
+        )
+
+        InviteUserAgain.call(@existing_user, invitation_instructions) if @existing_user && invitation_pending?(@existing_user)
+
+        @existing_user
+      end
+
+      def invitation_pending?(user)
+        user.invited_to_sign_up? && !user.invitation_accepted?
+      end
+
+      def new_user
+        @new_user ||= InviteUser.call(user_form) do
+          on(:ok) do |user|
+            return user
+          end
+        end
+      end
+
+      def user_form
+        OpenStruct.new(name: form.name,
+                       email: form.email.downcase,
+                       organization: @participatory_space.organization,
+                       admin: false,
+                       invited_by: current_user,
+                       invitation_instructions: invitation_instructions)
+      end
+
+      def invitation_instructions
+        return "invite_admin" if form.role == "admin"
+
+        "invite_collaborator"
+      end
+
+      def add_admin_as_follower
+        return if user.follows?(@participatory_space)
+
+        form = Decidim::FollowForm
+               .from_params(followable_gid: @participatory_space.to_signed_global_id.to_s)
+               .with_context(
+                 current_organization: @participatory_space.organization,
+                 current_user: user
+               )
+
+        Decidim::CreateFollow.new(form, user).call
+      end
+    end
+  end
+end

data/app/commands/decidim/admin/create_participatory_space_private_user.rb

@@ -10,7 +10,7 @@ module Decidim
       # form - A form object with the params.
       # private_user_to - The private_user_to that will hold the
       #   user role
-      def initialize(form, current_user, private_user_to, via_csv = false)
+      def initialize(form, current_user, private_user_to, via_csv: false)
         @form = form
         @current_user = current_user
         @private_user_to = private_user_to

data/app/commands/decidim/admin/create_static_page.rb

@@ -40,7 +40,8 @@ module Decidim
           show_in_footer: form.show_in_footer,
           weight: form.weight,
           topic: form.topic,
-          organization: form.organization
+          organization: form.organization,
+          allow_public_access: form.allow_public_access
         )
       end
 

data/app/commands/decidim/admin/hide_resource.rb

@@ -23,6 +23,9 @@ module Decidim
         return broadcast(:invalid) unless hideable?
 
         hide!
+
+        send_hide_notification_to_author
+
         broadcast(:ok, @reportable)
       end
 
@@ -44,6 +47,24 @@ module Decidim
           @reportable.moderation.update!(hidden_at: Time.current)
         end
       end
+
+      def send_hide_notification_to_author
+        data = {
+          event: "decidim.events.reports.resource_hidden",
+          event_class: Decidim::ResourceHiddenEvent,
+          resource: @reportable,
+          extra: {
+            report_reasons: report_reasons
+          },
+          affected_users: @reportable.try(:authors) || [@reportable.try(:normalized_author)]
+        }
+
+        Decidim::EventsManager.publish(data)
+      end
+
+      def report_reasons
+        @reportable.moderation.reports.pluck(:reason).uniq
+      end
     end
   end
 end

data/app/commands/decidim/admin/impersonate_user.rb

@@ -26,7 +26,8 @@ module Decidim
 
           create_authorization
 
-          create_impersonation_log
+          impersonation_log = create_impersonation_log
+          create_action_log(impersonation_log)
         end
 
         enqueue_expire_job
@@ -60,6 +61,21 @@ module Decidim
           .set(wait: Decidim::ImpersonationLog::SESSION_TIME_IN_MINUTES.minutes)
           .perform_later(user, form.current_user)
       end
+
+      def create_action_log(impersonation_log)
+        Decidim.traceability.perform_action!(
+          "manage",
+          impersonation_log,
+          form.current_user,
+          resource: {
+            name: user.name,
+            id: user.id,
+            nickname: user.nickname
+          },
+          visibility: "admin-only",
+          reason: form.reason
+        )
+      end
     end
   end
 end

data/app/commands/decidim/admin/promote_managed_user.rb

@@ -30,6 +30,7 @@ module Decidim
 
         promote_user
         invite_user
+        create_action_log
 
         broadcast(:ok)
       end
@@ -51,6 +52,15 @@ module Decidim
       def email_already_exists?
         Decidim::User.where(email: form.email.downcase).any?
       end
+
+      def create_action_log
+        Decidim.traceability.perform_action!(
+          "promote",
+          user,
+          form.current_user,
+          visibility: "admin-only"
+        )
+      end
     end
   end
 end

data/app/commands/decidim/admin/reorder_content_blocks.rb

@@ -10,10 +10,12 @@ module Decidim
       # organization - the Organization where the content blocks reside
       # scope - the scope applied to the content blocks
       # order - an Array holding the order of IDs of published content blocks.
-      def initialize(organization, scope, order)
+      # scoped_resource_id - (optional) The id of the resource the content blocks belongs to.
+      def initialize(organization, scope, order, scoped_resource_id = nil)
         @organization = organization
         @scope = scope
         @order = order
+        @scoped_resource_id = scoped_resource_id
       end
 
       # Executes the command. Broadcasts these events:
@@ -31,7 +33,7 @@ module Decidim
 
       private
 
-      attr_reader :organization, :scope
+      attr_reader :organization, :scope, :scoped_resource_id
 
       def reorder_steps
         transaction do
@@ -78,6 +80,7 @@ module Decidim
         Decidim::ContentBlock.create!(
           organization: organization,
           scope_name: scope,
+          scoped_resource_id: scoped_resource_id.presence,
           weight: weight,
           manifest_name: manifest_name
         )
@@ -90,7 +93,7 @@ module Decidim
       end
 
       def collection
-        @collection ||= Decidim::ContentBlock.for_scope(scope, organization: organization)
+        @collection ||= Decidim::ContentBlock.for_scope(scope, organization: organization).where(scoped_resource_id: scoped_resource_id)
       end
     end
   end

data/app/commands/decidim/admin/transfer_user.rb

@@ -0,0 +1,78 @@
+# frozen_string_literal: true
+
+module Decidim
+  module Admin
+    # A command with all the business logic to transfer a managed user.
+    class TransferUser < Rectify::Command
+      # Public: Initializes the command.
+      #
+      # form
+      # user         - The current user
+      # managed_user - The managed User
+      def initialize(form)
+        @form = form
+      end
+
+      # Executes the command. Broadcasts these events:
+      #
+      # - :ok when everything is valid.
+      # - :invalid if the impersonation is not valid.
+      #
+      # Returns nothing.
+      def call
+        return broadcast(:invalid) unless form.valid?
+
+        transaction do
+          update_managed_user
+          mark_conflict_as_solved
+          create_action_log
+        end
+
+        broadcast(:ok)
+      end
+
+      private
+
+      attr_reader :form
+
+      def new_user
+        form.conflict.current_user
+      end
+
+      def managed_user
+        form.conflict.managed_user
+      end
+
+      def current_user
+        form.current_user
+      end
+
+      def update_managed_user
+        clean_email_and_delete_new_user if form.email == new_user.email
+        managed_user.email = form.email
+        managed_user.encrypted_password = new_user.encrypted_password
+        managed_user.confirmed_at = new_user.confirmed_at
+        managed_user.managed = false
+        managed_user.skip_reconfirmation!
+        managed_user.save!
+      end
+
+      def clean_email_and_delete_new_user
+        new_user.update(deleted_at: Time.now.utc, email: "")
+      end
+
+      def mark_conflict_as_solved
+        form.conflict.update(solved: true)
+      end
+
+      def create_action_log
+        Decidim.traceability.perform_action!(
+          "transfer",
+          form.conflict.managed_user,
+          current_user,
+          visibility: "admin-only"
+        )
+      end
+    end
+  end
+end