decidim-core 0.23.3 → 0.24.0.rc1

data/app/jobs/decidim/machine_translation_save_job.rb

@@ -28,6 +28,35 @@ module Decidim
         resource.update_column field_name.to_sym, resource[field_name]
         # rubocop:enable Rails/SkipsModelValidations
       end
+
+      send_translated_report_notifications(resource) if reported_resource_in_organization_language?(resource, target_locale)
+    end
+
+    private
+
+    def send_translated_report_notifications(reportable)
+      reportable.moderation.reports.each do |report|
+        reportable.moderation.participatory_space.moderators.each do |moderator|
+          Decidim::ReportedMailer.report(moderator, report).deliver_later
+        end
+      end
+    end
+
+    def reported_resource_in_organization_language?(resource, target_locale)
+      return unless resource.try(:organization)
+
+      resource_reported?(resource) && target_locale == resource.organization.default_locale && resource_completely_translated?(resource, target_locale)
+    end
+
+    def resource_reported?(resource)
+      resource.class.included_modules.include?(Decidim::Reportable) && resource.reported?
+    end
+
+    def resource_completely_translated?(resource, target_locale)
+      reported_translatable_fields = resource.reported_attributes & resource.class.translatable_fields_list
+      reported_translatable_fields.all? do |field|
+        resource[field]&.dig("machine_translations", target_locale).present?
+      end
     end
   end
 end

data/app/jobs/decidim/update_search_indexes_job.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+module Decidim
+  class UpdateSearchIndexesJob < ApplicationJob
+    queue_as :default
+
+    def perform(elements)
+      elements.each { |element| element.try(:try_update_index_for_search_resource) }
+    end
+  end
+end

data/app/jobs/decidim/user_report_job.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+module Decidim
+  class UserReportJob < ApplicationJob
+    queue_as :user_report
+
+    def perform(admin, token, reason, user)
+      UserReportMailer.notify(admin, token, reason, user).deliver_now
+    end
+  end
+end

data/app/mailers/decidim/block_user_mailer.rb

@@ -0,0 +1,21 @@
+# frozen_string_literal: true
+
+module Decidim
+  # A custom mailer for Decidim so we can notify users
+  # when their account was blocked
+  class BlockUserMailer < ApplicationMailer
+    def notify(user, justification)
+      @user = user
+      @organization = user.organization
+      @justification = justification
+      mail(
+        to: user.email,
+        subject: I18n.t(
+          "decidim.block_user_mailer.notify.subject",
+          organization_name: @organization.name,
+          justification: @justification
+        )
+      )
+    end
+  end
+end

data/app/mailers/decidim/reported_mailer.rb

@@ -6,16 +6,17 @@ module Decidim
     helper Decidim::ResourceHelper
     helper Decidim::TranslationsHelper
 
-    helper_method :reported_content_url, :manage_moderations_url, :author_profile_url
+    helper_method :reported_content_url, :report_url, :manage_moderations_url, :author_profile_url, :reported_content_cell
 
     def report(user, report)
       with_user(user) do
         @report = report
+        @reportable = @report.moderation.reportable
         @participatory_space = @report.moderation.participatory_space
         @organization = user.organization
         @user = user
-        @author = @report.moderation.reportable.try(:creator_identity) || @report.moderation.reportable.try(:author)
-        @content = { title: @report.moderation.reportable.try(:title), body: @report.moderation.reportable.try(:body) }.compact
+        @author = @reportable.try(:creator_identity) || @reportable.try(:author)
+        @original_language = original_language(@reportable)
         subject = I18n.t("report.subject", scope: "decidim.reported_mailer")
         mail(to: user.email, subject: subject)
       end
@@ -32,12 +33,21 @@ module Decidim
       end
     end
 
+    # See comment for reported_content_cell
+    def current_organization
+      @organization
+    end
+
     private
 
     def reported_content_url
       @reported_content_url ||= @report.moderation.reportable.reported_content_url
     end
 
+    def report_url
+      @report_url ||= EngineRouter.admin_proxy(@participatory_space).moderation_report_url(host: @organization.host, moderation_id: @report.moderation.id, id: @report.id)
+    end
+
     def manage_moderations_url
       @manage_moderations_url ||= EngineRouter.admin_proxy(@participatory_space).moderations_url(host: @organization.host)
     end
@@ -45,5 +55,25 @@ module Decidim
     def author_profile_url
       @author_profile_url ||= @author.is_a?(Decidim::UserBaseEntity) ? decidim.profile_url(@author.nickname, host: @organization.host) : nil
     end
+
+    def original_language(reportable)
+      return reportable.content_original_language if reportable.respond_to?(:content_original_language)
+
+      @organization.default_locale
+    end
+
+    # This is needed to be able to use a cell in an ActionMailer, which is not supported out of the box by cells-rails.
+    # We're are passing the current object as if it was a controller.
+    # We also need to define a 'current_organization' method, which is expected by Decidim::ViewModel.
+    # A similar approach is used in Decidim::NewsletterMailer
+    def reported_content_cell
+      @reported_content_cell ||= ::Decidim::ViewModel.cell(
+        "decidim/reported_content",
+        @reportable,
+        context: {
+          controller: self
+        }
+      )
+    end
   end
 end

data/app/mailers/decidim/user_report_mailer.rb

@@ -0,0 +1,21 @@
+# frozen_string_literal: true
+
+module Decidim
+  # A custom mailer to notify Decidim users
+  # that they have been reported
+  class UserReportMailer < ApplicationMailer
+    def notify(admin, token, reason, user)
+      @user = user
+      @organization = user.organization
+      @token = token
+      @reason = reason
+      @admin = admin
+      mail(to: admin.email, subject: I18n.t(
+        "decidim.user_report_mailer.notify.subject",
+        organization_name: @organization.name,
+        reason: @reason,
+        token: @token
+      ))
+    end
+  end
+end

data/app/models/decidim/area.rb

@@ -16,7 +16,6 @@ module Decidim
                inverse_of: :areas
 
     belongs_to :area_type,
-               foreign_key: "area_type_id",
                class_name: "Decidim::AreaType",
                inverse_of: :areas,
                optional: true

data/app/models/decidim/area_type.rb

@@ -13,7 +13,7 @@ module Decidim
                class_name: "Decidim::Organization",
                inverse_of: :area_types
 
-    has_many :areas, foreign_key: "area_type_id", class_name: "Decidim::Area", inverse_of: :area_type, dependent: :nullify
+    has_many :areas, class_name: "Decidim::Area", inverse_of: :area_type, dependent: :nullify
 
     validates :name, presence: true
 

data/app/models/decidim/attachment.rb

@@ -11,10 +11,11 @@ module Decidim
     belongs_to :attachment_collection, class_name: "Decidim::AttachmentCollection", optional: true
     belongs_to :attached_to, polymorphic: true
 
-    validates :file, :content_type, presence: true
-    validates_upload :file
     mount_uploader :file, Decidim::AttachmentUploader
 
+    validates_upload :file
+    validates :file, :content_type, presence: true
+
     default_scope { order(arel_table[:weight].asc, arel_table[:id].asc) }
 
     # Returns the organization related to this attachment in case the

data/app/models/decidim/attachment_collection.rb

@@ -8,7 +8,7 @@ module Decidim
 
     translatable_fields :name, :description
     belongs_to :collection_for, polymorphic: true
-    has_many :attachments, foreign_key: "attachment_collection_id", class_name: "Decidim::Attachment", dependent: :nullify
+    has_many :attachments, class_name: "Decidim::Attachment", dependent: :nullify
 
     default_scope { order(arel_table[:weight].asc) }
 

data/app/models/decidim/authorization.rb

@@ -13,6 +13,10 @@ module Decidim
   class Authorization < ApplicationRecord
     include Decidim::Traceable
     include Decidim::HasUploadValidations
+    include Decidim::RecordEncryptor
+
+    encrypt_attribute :metadata, type: :hash
+    encrypt_attribute :verification_metadata, type: :hash
 
     validates_upload :verification_attachment
     mount_uploader :verification_attachment, Decidim::Verifications::AttachmentUploader

data/app/models/decidim/category.rb

@@ -10,7 +10,7 @@ module Decidim
 
     belongs_to :participatory_space, foreign_key: "decidim_participatory_space_id", foreign_type: "decidim_participatory_space_type", polymorphic: true
     has_many :subcategories, foreign_key: "parent_id", class_name: "Decidim::Category", dependent: :destroy, inverse_of: :parent
-    belongs_to :parent, class_name: "Decidim::Category", foreign_key: "parent_id", inverse_of: :subcategories, optional: true
+    belongs_to :parent, class_name: "Decidim::Category", inverse_of: :subcategories, optional: true
     has_many :categorizations, foreign_key: "decidim_category_id", class_name: "Decidim::Categorization", dependent: :destroy
 
     default_scope { order(arel_table[:parent_id].asc, arel_table[:weight].asc) }
@@ -38,6 +38,11 @@ module Decidim
       categorizations.empty?
     end
 
+    # Allow ransacker to search for a key in a hstore column (`name`.`en`)
+    ransacker :name do |parent|
+      Arel::Nodes::InfixOperation.new("->>", parent.table[:name], Arel::Nodes.build_quoted(I18n.locale.to_s))
+    end
+
     private
 
     # This is done since we only allow one level of subcategories.

data/app/models/decidim/impersonation_log.rb

@@ -8,7 +8,7 @@ module Decidim
     belongs_to :admin, foreign_key: "decidim_admin_id", class_name: "Decidim::User"
     belongs_to :user, foreign_key: "decidim_user_id", class_name: "Decidim::User"
 
-    validate :same_organization, :non_active_impersonation
+    validate :same_organization
 
     scope :active, -> { where(ended_at: nil, expired_at: nil) }
     scope :expired, -> { where(ended_at: nil).where.not(expired_at: nil) }
@@ -21,6 +21,10 @@ module Decidim
       expired_at.present?
     end
 
+    def self.log_presenter_class_for(_log)
+      Decidim::AdminLog::ImpersonationLogPresenter
+    end
+
     private
 
     def same_organization
@@ -28,11 +32,5 @@ module Decidim
 
       errors.add(:admin, :invalid)
     end
-
-    def non_active_impersonation
-      return if ended? || expired?
-
-      errors.add(:admin, :invalid) if Decidim::ImpersonationLog.where(admin: admin).active.any?
-    end
   end
 end

data/app/models/decidim/metric.rb

@@ -6,8 +6,8 @@ module Decidim
     # ParticipatorySpace, RelatedObject and Category are optional relationships because not all metric objects need them
     # For example, User is only related to an organization, but a Proposal can have all of them
     belongs_to :organization, foreign_key: "decidim_organization_id", class_name: "Decidim::Organization"
-    belongs_to :participatory_space, foreign_key: "participatory_space_id", foreign_type: "participatory_space_type", polymorphic: true, optional: true
-    belongs_to :related_object, foreign_key: "related_object_id", foreign_type: "related_object_type", polymorphic: true, optional: true
+    belongs_to :participatory_space, foreign_type: "participatory_space_type", polymorphic: true, optional: true
+    belongs_to :related_object, foreign_type: "related_object_type", polymorphic: true, optional: true
     belongs_to :category, foreign_key: "decidim_category_id", class_name: "Decidim::Category", optional: true
 
     validates :day, uniqueness: { scope:

data/app/models/decidim/moderation.rb

@@ -15,5 +15,17 @@ module Decidim
     def self.log_presenter_class_for(_log)
       Decidim::AdminLog::ModerationPresenter
     end
+
+    ransacker :reported_id_string do
+      Arel.sql(%{cast("decidim_moderations"."decidim_reportable_id" as text)})
+    end
+
+    ransacker :reported_content do
+      Arel.sql(%{cast("decidim_moderations"."reported_content" as text)})
+    end
+
+    ransacker :reportable_type_string do
+      Arel.sql(%{cast("decidim_moderations"."decidim_reportable_type" as text)})
+    end
   end
 end

data/app/models/decidim/organization.rb

@@ -21,7 +21,7 @@ module Decidim
                         :admin_terms_of_use_body
 
     has_many :static_pages, foreign_key: "decidim_organization_id", class_name: "Decidim::StaticPage", inverse_of: :organization, dependent: :destroy
-    has_many :static_page_topics, foreign_key: "organization_id", class_name: "Decidim::StaticPageTopic", inverse_of: :organization, dependent: :destroy
+    has_many :static_page_topics, class_name: "Decidim::StaticPageTopic", inverse_of: :organization, dependent: :destroy
     has_many :scopes, -> { order(name: :asc) }, foreign_key: "decidim_organization_id", class_name: "Decidim::Scope", inverse_of: :organization
     has_many :scope_types, -> { order(name: :asc) }, foreign_key: "decidim_organization_id", class_name: "Decidim::ScopeType", inverse_of: :organization
     has_many :areas, -> { order(name: :asc) }, foreign_key: "decidim_organization_id", class_name: "Decidim::Area", inverse_of: :organization
@@ -153,6 +153,10 @@ module Decidim
       Decidim::Debates::OfficialAuthorPresenter.new
     end
 
+    def static_pages_accessible_for(user)
+      static_pages.accessible_for(self, user)
+    end
+
     private
 
     def tenant_disabled_providers_keys

data/app/models/decidim/scope.rb

@@ -17,13 +17,11 @@ module Decidim
                inverse_of: :scopes
 
     belongs_to :scope_type,
-               foreign_key: "scope_type_id",
                class_name: "Decidim::ScopeType",
                inverse_of: :scopes,
                optional: true
 
     belongs_to :parent,
-               foreign_key: "parent_id",
                class_name: "Decidim::Scope",
                inverse_of: :children,
                optional: true
@@ -74,6 +72,11 @@ module Decidim
       organization.scopes.where(id: scope_ids).sort { |s1, s2| part_of.index(s2.id) <=> part_of.index(s1.id) }
     end
 
+    # Allow ransacker to search for a key in a hstore column (`name`.`en`)
+    ransacker :name do |parent|
+      Arel::Nodes::InfixOperation.new("->>", parent.table[:name], Arel::Nodes.build_quoted(I18n.locale.to_s))
+    end
+
     private
 
     def forbid_cycles

data/app/models/decidim/scope_type.rb

@@ -12,7 +12,7 @@ module Decidim
                class_name: "Decidim::Organization",
                inverse_of: :scope_types
 
-    has_many :scopes, foreign_key: "scope_type_id", class_name: "Decidim::Scope", inverse_of: :scope_type, dependent: :nullify
+    has_many :scopes, class_name: "Decidim::Scope", inverse_of: :scope_type, dependent: :nullify
 
     validates :name, presence: true
   end

data/app/models/decidim/share_token.rb

@@ -8,7 +8,7 @@ module Decidim
 
     belongs_to :organization, foreign_key: "decidim_organization_id", class_name: "Decidim::Organization"
     belongs_to :user, foreign_key: "decidim_user_id", class_name: "Decidim::User"
-    belongs_to :token_for, foreign_key: "token_for_id", foreign_type: "token_for_type", polymorphic: true
+    belongs_to :token_for, foreign_type: "token_for_type", polymorphic: true
 
     after_initialize :generate, :set_default_expiration
 

data/app/models/decidim/static_page.rb

@@ -15,7 +15,7 @@ module Decidim
     translatable_fields :title, :content
 
     belongs_to :organization, foreign_key: "decidim_organization_id", class_name: "Decidim::Organization", inverse_of: :static_pages
-    belongs_to :topic, foreign_key: "topic_id", class_name: "Decidim::StaticPageTopic", optional: true
+    belongs_to :topic, class_name: "Decidim::StaticPageTopic", optional: true
 
     validates :slug, presence: true, uniqueness: { scope: :organization }
     validates :slug, format: { with: /\A[a-z0-9-]+/ }
@@ -30,6 +30,16 @@ module Decidim
 
     default_scope { order(arel_table[:weight].asc) }
 
+    scope :accessible_for, lambda { |organization, user|
+      collection = where(organization: organization)
+
+      if user.blank? && organization.force_users_to_authenticate_before_access_organization
+        collection.where(allow_public_access: true)
+      else
+        collection
+      end
+    }
+
     # Whether this is slug of a default page or not.
     #
     # slug - The String with the value of the slug.

data/app/models/decidim/static_page_topic.rb

@@ -11,5 +11,9 @@ module Decidim
 
     belongs_to :organization, class_name: "Decidim::Organization"
     has_many :pages, class_name: "Decidim::StaticPage", foreign_key: "topic_id", dependent: :nullify
+
+    def accessible_pages_for(user)
+      pages.accessible_for(organization, user)
+    end
   end
 end

data/app/models/decidim/user.rb

@@ -10,6 +10,8 @@ module Decidim
     include Decidim::DataPortability
     include Decidim::Searchable
     include Decidim::ActsAsAuthor
+    include Decidim::UserReportable
+    include Decidim::Traceable
 
     class Roles
       def self.all
@@ -30,6 +32,8 @@ module Decidim
     has_many :access_grants, class_name: "Doorkeeper::AccessGrant", foreign_key: :resource_owner_id, dependent: :destroy
     has_many :access_tokens, class_name: "Doorkeeper::AccessToken", foreign_key: :resource_owner_id, dependent: :destroy
 
+    has_one :blocking, class_name: "Decidim::UserBlock", foreign_key: :id, primary_key: :block_id, dependent: :destroy
+
     validates :name, presence: true, unless: -> { deleted? }
     validates :nickname, presence: true, unless: -> { deleted? || managed? }, length: { maximum: Decidim::User.nickname_max_length }
     validates :locale, inclusion: { in: :available_locales }, allow_blank: true
@@ -52,6 +56,9 @@ module Decidim
     scope :confirmed, -> { where.not(confirmed_at: nil) }
     scope :not_confirmed, -> { where(confirmed_at: nil) }
 
+    scope :blocked, -> { where(blocked: true) }
+    scope :not_blocked, -> { where(blocked: false) }
+
     scope :interested_in_scopes, lambda { |scope_ids|
       actual_ids = scope_ids.select(&:presence)
       if actual_ids.count.positive?
@@ -201,7 +208,7 @@ module Decidim
     end
 
     def being_impersonated?
-      ImpersonationLog.active.where(user: self).exists?
+      ImpersonationLog.active.exists?(user: self)
     end
 
     def interested_scopes_ids
@@ -212,6 +219,10 @@ module Decidim
       @interested_scopes ||= organization.scopes.where(id: interested_scopes_ids)
     end
 
+    def user_name
+      extended_data["user_name"] || name
+    end
+
     # Caches a Decidim::DataPortabilityUploader with the retrieved file.
     def data_portability_file(filename)
       @data_portability_file ||= DataPortabilityUploader.new(self).tap do |uploader|