decidim-core 0.19.1 → 0.23.0

data/app/models/decidim/organization.rb

@@ -8,8 +8,17 @@ module Decidim
     include TranslationsHelper
     include Decidim::Traceable
     include Decidim::Loggable
+    include Decidim::HasUploadValidations
+    include Decidim::TranslatableResource
+    include Decidim::ActsAsAuthor
 
     SOCIAL_HANDLERS = [:twitter, :facebook, :instagram, :youtube, :github].freeze
+    AVAILABLE_MACHINE_TRANSLATION_DISPLAY_PRIORITIES = %w(original translation).freeze
+
+    translatable_fields :description, :cta_button_text, :omnipresent_banner_title, :omnipresent_banner_short_description,
+                        :highlighted_content_banner_title, :highlighted_content_banner_short_description, :highlighted_content_banner_action_title,
+                        :highlighted_content_banner_action_subtitle, :welcome_notification_subject, :welcome_notification_body, :id_documents_explanation_text,
+                        :admin_terms_of_use_body
 
     has_many :static_pages, foreign_key: "decidim_organization_id", class_name: "Decidim::StaticPage", inverse_of: :organization, dependent: :destroy
     has_many :static_page_topics, foreign_key: "organization_id", class_name: "Decidim::StaticPageTopic", inverse_of: :organization, dependent: :destroy
@@ -23,6 +32,8 @@ module Decidim
     has_many :oauth_applications, foreign_key: "decidim_organization_id", class_name: "Decidim::OAuthApplication", inverse_of: :organization, dependent: :destroy
     has_many :hashtags, foreign_key: "decidim_organization_id", class_name: "Decidim::Hashtag", dependent: :destroy
 
+    has_many :templates, foreign_key: "decidim_organization_id", class_name: "Decidim::Templates::Template", dependent: :destroy if defined? Decidim::Templates
+
     # Users registration mode. Whether users can register or access the system. Doesn't affect users that access through Omniauth integrations.
     #  enabled: Users registration and sign in are enabled (default value).
     #  existing: Users can't be registered in the system. Only existing users can sign in.
@@ -31,18 +42,37 @@ module Decidim
 
     validates :name, :host, uniqueness: true
     validates :reference_prefix, presence: true
+    validates :time_zone, presence: true, time_zone: true
     validates :default_locale, inclusion: { in: :available_locales }
 
+    validates_upload :official_img_header
     mount_uploader :official_img_header, Decidim::OfficialImageHeaderUploader
+
+    validates_upload :official_img_footer
     mount_uploader :official_img_footer, Decidim::OfficialImageFooterUploader
+
+    validates_upload :logo
     mount_uploader :logo, Decidim::OrganizationLogoUploader
+
+    validates_upload :favicon
     mount_uploader :favicon, Decidim::OrganizationFaviconUploader
+
+    validates_upload :highlighted_content_banner_image
     mount_uploader :highlighted_content_banner_image, ImageUploader
 
     def self.log_presenter_class_for(_log)
       Decidim::AdminLog::OrganizationPresenter
     end
 
+    def settings
+      Decidim::OrganizationSettings.for(self)
+    end
+
+    # This is needed for the upload validations
+    def maximum_upload_size
+      settings.upload_maximum_file_size
+    end
+
     def available_authorization_handlers
       available_authorizations & Decidim.authorization_handlers.map(&:name)
     end
@@ -78,6 +108,11 @@ module Decidim
         multi_translation("decidim.welcome_notification.default_body", available_locales)
     end
 
+    def admin_terms_of_use_body
+      self[:admin_terms_of_use_body] ||
+        multi_translation("decidim.admin_terms_of_use.default_body", available_locales)
+    end
+
     def sign_up_enabled?
       users_registration_mode_enabled?
     end
@@ -96,5 +131,64 @@ module Decidim
     def open_data_file_path
       "#{host}-open-data.zip"
     end
+
+    def enabled_omniauth_providers
+      return Decidim::OmniauthProvider.enabled || {} if omniauth_settings.nil?
+
+      default_except_disabled = Decidim::OmniauthProvider.enabled.except(*tenant_disabled_providers_keys)
+      default_except_disabled.merge(tenant_enabled_providers)
+    end
+
+    def machine_translation_prioritizes_original?
+      machine_translation_display_priority == "original"
+    end
+
+    def machine_translation_prioritizes_translation?
+      machine_translation_display_priority == "translation"
+    end
+
+    # Returns the presenter for this author, to be used in the views.
+    # Required by ActsAsAuthor.
+    def presenter
+      Decidim::Debates::OfficialAuthorPresenter.new
+    end
+
+    private
+
+    def tenant_disabled_providers_keys
+      omniauth_settings.collect do |key, value|
+        next unless key.match?(/omniauth_settings_.*_enabled/) && value == false
+
+        Decidim::OmniauthProvider.extract_provider_key(key)
+      end.compact.uniq
+    end
+
+    def tenant_enabled_providers
+      tenant_enabled_providers_keys = omniauth_settings.map do |key, value|
+        next unless key.match?(/omniauth_settings_.*_enabled/) && value == true
+
+        Decidim::OmniauthProvider.extract_provider_key(key)
+      end.compact.uniq
+
+      Hash[tenant_enabled_providers_keys.map do |key|
+        [key, omniauth_provider_settings(key)]
+      end]
+    end
+
+    def omniauth_provider_settings(provider)
+      @omniauth_provider_settings ||= Hash.new do |hash, provider_key|
+        hash[provider_key] = begin
+          omniauth_settings.each_with_object({}) do |(key, value), provider_settings|
+            next unless key.to_s.include?(provider_key.to_s)
+
+            value = Decidim::AttributeEncryptor.decrypt(value) if Decidim::OmniauthProvider.value_defined?(value)
+            setting_key = Decidim::OmniauthProvider.extract_setting_key(key, provider_key)
+
+            provider_settings[setting_key] = value
+          end
+        end
+      end
+      @omniauth_provider_settings[provider]
+    end
   end
 end

data/app/models/decidim/participatory_space_role_config/admin.rb

@@ -0,0 +1,8 @@
+# frozen_string_literal: true
+
+module Decidim
+  module ParticipatorySpaceRoleConfig
+    class Admin < Base
+    end
+  end
+end

data/app/models/decidim/participatory_space_role_config/base.rb

@@ -0,0 +1,31 @@
+# frozen_string_literal: true
+
+module Decidim
+  module ParticipatorySpaceRoleConfig
+    class Base
+      def initialize(user_role)
+        @user_role = user_role
+      end
+
+      # Checks whether the given manifest name is accepted for this role.
+      #
+      # Returns a boolean.
+      def component_is_accessible?(manifest_name)
+        return true if accepted_components == [:all]
+
+        accepted_components.include?(manifest_name.to_sym)
+      end
+
+      # Public: Lists the names of the accepted components for this role.
+      #
+      # Returns an Array of Symbols.
+      def accepted_components
+        [:all]
+      end
+
+      private
+
+      attr_reader :user_role
+    end
+  end
+end

data/app/models/decidim/participatory_space_role_config/collaborator.rb

@@ -0,0 +1,8 @@
+# frozen_string_literal: true
+
+module Decidim
+  module ParticipatorySpaceRoleConfig
+    class Collaborator < Base
+    end
+  end
+end

data/app/models/decidim/participatory_space_role_config/moderator.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+module Decidim
+  module ParticipatorySpaceRoleConfig
+    class Moderator < Base
+      def accepted_components
+        []
+      end
+    end
+  end
+end

data/app/models/decidim/participatory_space_role_config/null_object.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+module Decidim
+  module ParticipatorySpaceRoleConfig
+    class NullObject < Base
+      def accepted_components
+        []
+      end
+    end
+  end
+end

data/app/models/decidim/participatory_space_role_config/participatory_space_admin.rb

@@ -0,0 +1,8 @@
+# frozen_string_literal: true
+
+module Decidim
+  module ParticipatorySpaceRoleConfig
+    class ParticipatorySpaceAdmin < Base
+    end
+  end
+end

data/app/models/decidim/participatory_space_role_config/valuator.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+module Decidim
+  module ParticipatorySpaceRoleConfig
+    class Valuator < Base
+      def accepted_components
+        [:proposals]
+      end
+    end
+  end
+end

data/app/models/decidim/scope.rb

@@ -7,6 +7,9 @@ module Decidim
   class Scope < ApplicationRecord
     include Decidim::Traceable
     include Decidim::Loggable
+    include Decidim::TranslatableResource
+
+    translatable_fields :name
 
     belongs_to :organization,
                foreign_key: "decidim_organization_id",
@@ -42,8 +45,10 @@ module Decidim
     # Scope to return only the top level scopes.
     #
     # Returns an ActiveRecord::Relation.
-    def self.top_level
-      where parent_id: nil
+    def self.top_level(organization_id = nil)
+      query = where parent_id: nil
+      query = query.where(decidim_organization_id: organization_id) if organization_id
+      query
     end
 
     def self.log_presenter_class_for(_log)
@@ -51,7 +56,7 @@ module Decidim
     end
 
     def descendants
-      organization.scopes.where("? = ANY(decidim_scopes.part_of)", id)
+      @descendants ||= organization.scopes.where("? = ANY(decidim_scopes.part_of)", id)
     end
 
     def ancestor_of?(scope)

data/app/models/decidim/scope_type.rb

@@ -4,6 +4,9 @@ module Decidim
   # Scope types allows to use different types of scopes in participatory process
   # (municipalities, provinces, states, countries, etc.)
   class ScopeType < ApplicationRecord
+    include Decidim::TranslatableResource
+
+    translatable_fields :name, :plural
     belongs_to :organization,
                foreign_key: "decidim_organization_id",
                class_name: "Decidim::Organization",

data/app/models/decidim/share_token.rb

@@ -0,0 +1,49 @@
+# frozen_string_literal: true
+
+module Decidim
+  class ShareToken < ApplicationRecord
+    validates :organization, presence: true
+    validates :user, presence: true
+    validates :token, presence: true, uniqueness: { scope: [:decidim_organization_id, :token_for_type, :token_for_id] }
+
+    belongs_to :organization, foreign_key: "decidim_organization_id", class_name: "Decidim::Organization"
+    belongs_to :user, foreign_key: "decidim_user_id", class_name: "Decidim::User"
+    belongs_to :token_for, foreign_key: "token_for_id", foreign_type: "token_for_type", polymorphic: true
+
+    after_initialize :generate, :set_default_expiration
+
+    def self.use!(token_for:, token:)
+      record = find_by!(token_for: token_for, token: token)
+      record.use!
+    end
+
+    def use!
+      return raise StandardError, "Share token '#{token}' for '#{token_for_type}' with id = #{token_for_id} has expired." if expired?
+
+      update!(times_used: times_used + 1, last_used_at: Time.zone.now)
+    end
+
+    def expired?
+      expires_at.past?
+    end
+
+    def url
+      token_for.shareable_url(self)
+    end
+
+    private
+
+    def generate
+      return if token.present?
+
+      loop do
+        self.token = SecureRandom.hex(32)
+        break if ShareToken.find_by(token: token).blank?
+      end
+    end
+
+    def set_default_expiration
+      self.expires_at ||= 1.day.from_now
+    end
+  end
+end

data/app/models/decidim/static_page.rb

@@ -10,6 +10,9 @@ module Decidim
   class StaticPage < ApplicationRecord
     include Decidim::Traceable
     include Decidim::Loggable
+    include Decidim::TranslatableResource
+
+    translatable_fields :title, :content
 
     belongs_to :organization, foreign_key: "decidim_organization_id", class_name: "Decidim::Organization", inverse_of: :static_pages
     belongs_to :topic, foreign_key: "topic_id", class_name: "Decidim::StaticPageTopic", optional: true
@@ -19,7 +22,7 @@ module Decidim
 
     # These pages will be created by default when registering an organization
     # and cannot be deleted.
-    DEFAULT_PAGES = %w(faq terms-and-conditions accessibility).freeze
+    DEFAULT_PAGES = %w(terms-and-conditions).freeze
 
     after_create :update_organization_tos_version
     before_destroy :can_be_destroyed?

data/app/models/decidim/static_page_topic.rb

@@ -3,6 +3,9 @@
 module Decidim
   class StaticPageTopic < ApplicationRecord
     validates :title, presence: true
+    include Decidim::TranslatableResource
+
+    translatable_fields :title, :description
 
     default_scope { order(arel_table[:weight].asc) }
 

data/app/models/decidim/user.rb

@@ -9,8 +9,7 @@ module Decidim
   class User < UserBaseEntity
     include Decidim::DataPortability
     include Decidim::Searchable
-
-    OMNIAUTH_PROVIDERS = [:facebook, :twitter, :google_oauth2, (:developer if Rails.env.development?)].compact
+    include Decidim::ActsAsAuthor
 
     class Roles
       def self.all
@@ -19,9 +18,9 @@ module Decidim
     end
 
     devise :invitable, :database_authenticatable, :registerable, :confirmable, :timeoutable,
-           :recoverable, :rememberable, :trackable, :decidim_validatable,
-           :decidim_newsletterable,
-           :omniauthable, omniauth_providers: OMNIAUTH_PROVIDERS,
+           :recoverable, :rememberable, :trackable, :lockable,
+           :decidim_validatable, :decidim_newsletterable,
+           :omniauthable, omniauth_providers: Decidim::OmniauthProvider.available.keys,
                           request_keys: [:env], reset_password_keys: [:decidim_organization_id, :email],
                           confirmation_keys: [:decidim_organization_id, :email]
 
@@ -58,6 +57,8 @@ module Decidim
       where("extended_data->>'interested_scopes' ~~ ANY('{#{ids}}')")
     }
 
+    scope :org_admins_except_me, ->(user) { where(organization: user.organization, admin: true).where.not(id: user.id) }
+
     attr_accessor :newsletter_notifications
 
     searchable_fields({
@@ -81,6 +82,18 @@ module Decidim
     # Returns a String.
     attr_accessor :invitation_instructions
 
+    # Returns the user corresponding to the given +email+ if it exists and has pending invitations,
+    #   otherwise returns nil.
+    def self.has_pending_invitations?(organization_id, email)
+      invitation_not_accepted.find_by(decidim_organization_id: organization_id, email: email)
+    end
+
+    # Returns the presenter for this author, to be used in the views.
+    # Required by ActsAsAuthor.
+    def presenter
+      Decidim::UserPresenter.new(self)
+    end
+
     def self.log_presenter_class_for(_log)
       Decidim::AdminLog::UserPresenter
     end
@@ -119,10 +132,21 @@ module Decidim
       Decidim::Follow.where(user: self, followable: followable).any?
     end
 
+    # Public: whether the user accepts direct messages from another
+    def accepts_conversation?(user)
+      return follows?(user) if direct_message_types == "followed-only"
+
+      true
+    end
+
     def unread_conversations
       Decidim::Messaging::Conversation.unread_by(self)
     end
 
+    def unread_messages_count
+      @unread_messages_count ||= Decidim::Messaging::Receipt.unread_count(self)
+    end
+
     # Check if the user exists with the given email and the current organization
     #
     # warden_conditions - A hash with the authentication conditions
@@ -159,6 +183,10 @@ module Decidim
       accepted_tos_version.to_i >= organization.tos_version.to_i
     end
 
+    def admin_terms_accepted?
+      return true if admin_terms_accepted_at
+    end
+
     # Whether this user can be verified against some authorization or not.
     def verifiable?
       confirmed? || managed? || being_impersonated?
@@ -176,6 +204,33 @@ module Decidim
       @interested_scopes ||= organization.scopes.where(id: interested_scopes_ids)
     end
 
+    # Caches a Decidim::DataPortabilityUploader with the retrieved file.
+    def data_portability_file(filename)
+      @data_portability_file ||= DataPortabilityUploader.new.tap do |uploader|
+        uploader.retrieve_from_store!(filename)
+        uploader.cache!(filename)
+      end
+    end
+
+    # return the groups where this user has been accepted
+    def accepted_user_groups
+      UserGroups::AcceptedUserGroups.for(self)
+    end
+
+    # return the groups where this user has admin permissions
+    def manageable_user_groups
+      UserGroups::ManageableUserGroups.for(self)
+    end
+
+    def authenticatable_salt
+      "#{super}#{session_token}"
+    end
+
+    def invalidate_all_sessions!
+      self.session_token = SecureRandom.hex
+      save!
+    end
+
     protected
 
     # Overrides devise email required validation.