decidim-core 0.30.2 → 0.31.0.rc1

data/app/commands/decidim/leave_user_group.rb

@@ -1,47 +0,0 @@
-# frozen_string_literal: true
-
-module Decidim
-  # A command with all the business logic to leave a user group.
-  class LeaveUserGroup < Decidim::Command
-    # Public: Initializes the command.
-    #
-    # user - the user that wants to leave the group
-    # user_group - The user group to leave
-    def initialize(user, user_group)
-      @user = user
-      @user_group = user_group
-    end
-
-    # Executes the command. Broadcasts these events:
-    #
-    # - :ok when everything is valid.
-    # - :invalid if we could not proceed.
-    #
-    # Returns nothing.
-    def call
-      return broadcast(:invalid) unless can_leave?
-      return broadcast(:last_admin) if last_admin?
-
-      leave_user_group
-
-      broadcast(:ok, @user_group)
-    end
-
-    private
-
-    attr_reader :user, :user_group
-
-    def leave_user_group
-      Decidim::UserGroupMembership.find_by!(user:, user_group:).destroy!
-    end
-
-    def can_leave?
-      Decidim::UserGroupMembership.where(user:, user_group:).any?
-    end
-
-    def last_admin?
-      admin_memberships = Decidim::UserGroupMembership.where(user_group:, role: [:creator, :admin])
-      admin_memberships.length == 1 && admin_memberships.pluck(:decidim_user_id).include?(user.id)
-    end
-  end
-end

data/app/commands/decidim/promote_membership.rb

@@ -1,55 +0,0 @@
-# frozen_string_literal: true
-
-module Decidim
-  # A command with all the business logic to promote a user to group admin.
-  class PromoteMembership < Decidim::Command
-    # Public: Initializes the command.
-    #
-    # membership - the UserGroupMembership to be promoted.
-    def initialize(membership, user_group)
-      @membership = membership
-      @user_group = user_group
-    end
-
-    # Executes the command. Broadcasts these events:
-    #
-    # - :ok when everything is valid.
-    # - :invalid if we could not proceed.
-    #
-    # Returns nothing.
-    def call
-      return broadcast(:invalid) if membership.blank?
-      return broadcast(:invalid) if membership.role != "member"
-      return broadcast(:invalid) if membership.user_group != user_group
-
-      transaction do
-        promote_membership
-        send_notification
-      end
-
-      broadcast(:ok)
-    end
-
-    private
-
-    attr_reader :membership, :user_group
-
-    def promote_membership
-      membership.role = :admin
-      membership.save!
-    end
-
-    def send_notification
-      Decidim::EventsManager.publish(
-        event: "decidim.events.groups.promoted_to_admin",
-        event_class: PromotedToAdminEvent,
-        resource: membership.user_group,
-        affected_users: [membership.user],
-        extra: {
-          user_group_name: membership.user_group.name,
-          user_group_nickname: membership.user_group.nickname
-        }
-      )
-    end
-  end
-end

data/app/commands/decidim/reject_group_invitation.rb

@@ -1,42 +0,0 @@
-# frozen_string_literal: true
-
-module Decidim
-  # A command with all the business logic to reject an invitation to belong to a
-  # group.
-  class RejectGroupInvitation < Decidim::Command
-    # Public: Initializes the command.
-    #
-    # user_group - the UserGroup where the user has been invited
-    # user - the User that has been invited
-    def initialize(user_group, user)
-      @user_group = user_group
-      @user = user
-    end
-
-    # Executes the command. Broadcasts these events:
-    #
-    # - :ok when everything is valid.
-    # - :invalid if we could not proceed.
-    #
-    # Returns nothing.
-    def call
-      return broadcast(:invalid) if membership.blank?
-
-      reject_invitation
-
-      broadcast(:ok)
-    end
-
-    private
-
-    attr_reader :user_group, :user
-
-    def reject_invitation
-      membership.destroy!
-    end
-
-    def membership
-      @membership ||= Decidim::UserGroupMembership.find_by(user:, user_group:, role: :invited)
-    end
-  end
-end

data/app/commands/decidim/reject_user_group_join_request.rb

@@ -1,53 +0,0 @@
-# frozen_string_literal: true
-
-module Decidim
-  # A command with all the business logic to reject a join request to a user
-  # group.
-  class RejectUserGroupJoinRequest < Decidim::Command
-    # Public: Initializes the command.
-    #
-    # membership - the UserGroupMembership to be accepted.
-    def initialize(membership)
-      @membership = membership
-    end
-
-    # Executes the command. Broadcasts these events:
-    #
-    # - :ok when everything is valid.
-    # - :invalid if we could not proceed.
-    #
-    # Returns nothing.
-    def call
-      return broadcast(:invalid) unless membership
-      return broadcast(:invalid) if membership.role.to_s != "requested"
-
-      transaction do
-        send_notification
-        reject_membership
-      end
-
-      broadcast(:ok, @user_group)
-    end
-
-    private
-
-    attr_reader :membership
-
-    def reject_membership
-      membership.destroy!
-    end
-
-    def send_notification
-      Decidim::EventsManager.publish(
-        event: "decidim.events.groups.join_request_rejected",
-        event_class: JoinRequestRejectedEvent,
-        resource: membership.user_group,
-        affected_users: [membership.user],
-        extra: {
-          user_group_name: membership.user_group.name,
-          user_group_nickname: membership.user_group.nickname
-        }
-      )
-    end
-  end
-end

data/app/commands/decidim/remove_user_from_group.rb

@@ -1,53 +0,0 @@
-# frozen_string_literal: true
-
-module Decidim
-  # A command with all the business logic to remove a user from a group.
-  class RemoveUserFromGroup < Decidim::Command
-    # Public: Initializes the command.
-    #
-    # membership - the UserGroupMembership to be accepted.
-    def initialize(membership, user_group)
-      @membership = membership
-      @user_group = user_group
-    end
-
-    # Executes the command. Broadcasts these events:
-    #
-    # - :ok when everything is valid.
-    # - :invalid if we could not proceed.
-    #
-    # Returns nothing.
-    def call
-      return broadcast(:invalid) if membership.blank?
-      return broadcast(:invalid) if membership.user_group != user_group
-
-      transaction do
-        remove_membership
-        send_notification
-      end
-
-      broadcast(:ok)
-    end
-
-    private
-
-    attr_reader :membership, :user_group
-
-    def remove_membership
-      membership.destroy!
-    end
-
-    def send_notification
-      Decidim::EventsManager.publish(
-        event: "decidim.events.groups.removed_from_group",
-        event_class: RemovedFromGroupEvent,
-        resource: membership.user_group,
-        affected_users: [membership.user],
-        extra: {
-          user_group_name: membership.user_group.name,
-          user_group_nickname: membership.user_group.nickname
-        }
-      )
-    end
-  end
-end

data/app/commands/decidim/unendorse_resource.rb

@@ -1,39 +0,0 @@
-# frozen_string_literal: true
-
-module Decidim
-  # A command with all the business logic to unendorse a resource, both as a user or as a user_group.
-  class UnendorseResource < Decidim::Command
-    # Public: Initializes the command.
-    #
-    # resource     - A Decidim::Endorsable object.
-    # current_user - The current user.
-    # current_group- (optional) The current_group that is unendorsing the Resource.
-    def initialize(resource, current_user, current_group = nil)
-      @resource = resource
-      @current_user = current_user
-      @current_group = current_group
-    end
-
-    # Executes the command. Broadcasts these events:
-    #
-    # - :ok when everything is valid, together with the resource.
-    # - :invalid if the form was not valid and we could not proceed.
-    #
-    # Returns nothing.
-    def call
-      destroy_resource_endorsement
-      broadcast(:ok, @resource)
-    end
-
-    private
-
-    def destroy_resource_endorsement
-      query = if @current_group.present?
-                @resource.endorsements.where(decidim_user_group_id: @current_group&.id)
-              else
-                @resource.endorsements.where(author: @current_user, decidim_user_group_id: 0)
-              end
-      query.destroy_all
-    end
-  end
-end

data/app/commands/decidim/update_user_group.rb

@@ -1,72 +0,0 @@
-# frozen_string_literal: true
-
-module Decidim
-  # A command with all the business logic to update a user group profile.
-  class UpdateUserGroup < Decidim::Command
-    # Public: Initializes the command.
-    #
-    # form - A form object with the params.
-    # user_group - The user group to update
-    def initialize(form, user_group)
-      @form = form
-      @user_group = user_group
-    end
-
-    # Executes the command. Broadcasts these events:
-    #
-    # - :ok when everything is valid.
-    # - :invalid if the form was not valid and we could not proceed.
-    #
-    # Returns nothing.
-    def call
-      return broadcast(:invalid) if form.invalid?
-
-      was_verified = user_group.verified?
-      with_events do
-        update_user_group
-      end
-      notify_admins if was_verified
-
-      broadcast(:ok, user_group)
-    end
-
-    private
-
-    attr_reader :form, :user_group
-
-    def event_arguments
-      { resource: user_group }
-    end
-
-    def update_user_group
-      user_group_attributes = attributes
-      user_group_attributes.delete(:avatar) if form.avatar.blank?
-      user_group.update(user_group_attributes)
-    end
-
-    def attributes
-      {
-        email: form.email,
-        name: form.name,
-        nickname: form.nickname,
-        about: form.about,
-        avatar: form.avatar,
-        extended_data: {
-          phone: form.phone,
-          document_number: form.document_number
-        }
-      }
-    end
-
-    def notify_admins
-      data = {
-        event: "decidim.events.groups.user_group_updated",
-        event_class: Decidim::UserGroupUpdatedEvent,
-        resource: @user_group,
-        affected_users: Decidim::User.org_admins_except_me(form.current_user)
-      }
-
-      Decidim::EventsManager.publish(**data)
-    end
-  end
-end

data/app/controllers/concerns/decidim/user_groups.rb

@@ -1,23 +0,0 @@
-# frozen_string_literal: true
-
-require "active_support/concern"
-
-module Decidim
-  # The UserGroups concern must be included in all controllers related
-  # to UserGroups feature. It adds a method to enforce that the feature
-  # is enabled.
-  module UserGroups
-    extend ActiveSupport::Concern
-
-    included do
-      delegate :user_groups, to: :current_user, prefix: false
-      delegate :user_groups_enabled?, to: :current_organization
-
-      helper_method :user_groups, :user_groups_enabled?
-    end
-
-    def enforce_user_groups_enabled
-      raise Decidim::ActionForbidden unless current_organization.user_groups_enabled?
-    end
-  end
-end

data/app/controllers/decidim/endorsements_controller.rb

@@ -1,71 +0,0 @@
-# frozen_string_literal: true
-
-module Decidim
-  # Exposes the `Endorsements` so that users can endorse resources.
-  class EndorsementsController < Decidim::Components::BaseController
-    # we need to +include+ to be able to call :endorsement_button from the view
-    include Decidim::EndorsableHelper
-    helper_method :endorsement_button
-    # we need to declare with +helper+ to be able to call :render_endorsement_identity from the views
-    helper Decidim::EndorsableHelper
-    helper_method :resource
-
-    before_action :authenticate_user!
-
-    def create
-      enforce_permission_to(:create, :endorsement, resource:)
-      user_group_id = params[:user_group_id]
-
-      EndorseResource.call(resource, current_user, user_group_id) do
-        on(:ok) do
-          resource.reload
-          render :update_buttons_and_counters
-        end
-
-        on(:invalid) do
-          render json: { error: I18n.t("resource_endorsements.create.error", scope: "decidim") }, status: :unprocessable_entity
-        end
-      end
-    end
-
-    def destroy
-      enforce_permission_to(:withdraw, :endorsement, resource:)
-      user_group_id = params[:user_group_id]
-      user_group = user_groups.find(user_group_id) if user_group_id
-
-      UnendorseResource.call(resource, current_user, user_group) do
-        on(:ok) do
-          resource.reload
-          render :update_buttons_and_counters
-        end
-      end
-    end
-
-    def identities
-      enforce_permission_to(:create, :endorsement, resource:)
-
-      @user_verified_groups = Decidim::UserGroups::ManageableUserGroups.for(current_user).verified
-      render :identities, layout: false
-    end
-
-    # should be pubic in order to be visible in NeedsPermission#permissions_context
-    def current_component
-      resource.component
-    end
-
-    private
-
-    def user_groups
-      Decidim::UserGroups::ManageableUserGroups.for(current_user).verified
-    end
-
-    def resource
-      gid_param = params[:id] || params[:resource_id]
-      @resource ||= GlobalID::Locator.locate(GlobalID.parse(gid_param))
-    end
-
-    def current_participatory_space
-      current_component.participatory_space
-    end
-  end
-end

data/app/controllers/decidim/group_email_confirmations_controller.rb

@@ -1,32 +0,0 @@
-# frozen_string_literal: true
-
-module Decidim
-  # The controller to manage email confirmations for user groups.
-  class GroupEmailConfirmationsController < Decidim::ApplicationController
-    include FormFactory
-    include UserGroups
-
-    before_action :enforce_user_groups_enabled
-
-    helper_method :user_group
-
-    def create
-      enforce_permission_to(:manage, :user_group, user_group:)
-      if user_group.email.blank?
-        flash.keep[:alert] = t("decidim.profiles.user.fill_in_email_to_confirm_it")
-        redirect_to(edit_group_path(user_group.nickname)) && return
-      end
-
-      user_group.send_confirmation_instructions
-
-      flash.keep[:notice] = t("decidim.profiles.user.confirmation_instructions_sent")
-      redirect_back(fallback_location: decidim.profile_path(user_group.nickname))
-    end
-
-    private
-
-    def user_group
-      @user_group ||= Decidim::UserGroups::ManageableUserGroups.for(current_user).find_by(nickname: params[:group_id])
-    end
-  end
-end

data/app/controllers/decidim/group_invites_controller.rb

@@ -1,104 +0,0 @@
-# frozen_string_literal: true
-
-module Decidim
-  # The controller to manage user groups invitations
-  class GroupInvitesController < Decidim::ApplicationController
-    include FormFactory
-    include UserGroups
-
-    before_action :enforce_user_groups_enabled
-
-    helper_method :user_group
-
-    def index
-      enforce_permission_to(:manage, :user_group, user_group:)
-      @form = form(InviteUserToGroupForm).instance
-    end
-
-    def create
-      enforce_permission_to(:manage, :user_group, user_group:)
-      @form = form(InviteUserToGroupForm).from_params(params)
-
-      InviteUserToGroup.call(@form, user_group) do
-        on(:ok) do
-          flash[:notice] = t("group_invites.invite.success", scope: "decidim")
-          redirect_to profile_path(user_group.nickname)
-        end
-
-        on(:invalid) do
-          flash[:alert] = t("group_invites.invite.error", scope: "decidim")
-          render action: :index
-        end
-      end
-    end
-
-    def update
-      enforce_permission_to :accept, :user_group_invitations
-      AcceptGroupInvitation.call(inviting_user_group, current_user) do
-        on(:ok) do
-          respond_to do |format|
-            format.json do
-              render json: { message: t("group_invites.accept.success", scope: "decidim") }
-            end
-            format.all do
-              flash[:notice] = t("group_invites.accept.success", scope: "decidim")
-              redirect_to profile_groups_path(current_user.nickname)
-            end
-          end
-        end
-
-        on(:invalid) do
-          respond_to do |format|
-            format.json do
-              render json: { message: t("group_invites.accept.error", scope: "decidim") }, status: :unprocessable_entity
-            end
-            format.all do
-              flash[:alert] = t("group_invites.accept.error", scope: "decidim")
-              redirect_to profile_groups_path(current_user.nickname)
-            end
-          end
-        end
-      end
-    end
-
-    def destroy
-      enforce_permission_to :reject, :user_group_invitations
-
-      RejectGroupInvitation.call(inviting_user_group, current_user) do
-        on(:ok) do
-          respond_to do |format|
-            format.json do
-              render json: { message: t("group_invites.reject.success", scope: "decidim") }
-            end
-            format.all do
-              flash[:notice] = t("group_invites.reject.success", scope: "decidim")
-              redirect_to profile_groups_path(current_user.nickname)
-            end
-          end
-        end
-
-        on(:invalid) do
-          respond_to do |format|
-            format.json do
-              render json: { message: t("group_invites.reject.error", scope: "decidim") }, status: :unprocessable_entity
-            end
-            format.all do
-              flash[:alert] = t("group_invites.reject.error", scope: "decidim")
-              redirect_to profile_groups_path(current_user.nickname)
-            end
-          end
-        end
-      end
-    end
-
-    private
-
-    def user_group
-      @user_group ||= Decidim::UserGroups::ManageableUserGroups.for(current_user).find_by(nickname: params[:group_id])
-    end
-
-    def inviting_user_group
-      @inviting_user_group ||= Decidim::UserGroups::InvitedMemberships.for(current_user).find_by(id: params[:id]).user_group
-    end
-  end
-end

data/app/controllers/decidim/group_members_controller.rb

@@ -1,75 +0,0 @@
-# frozen_string_literal: true
-
-module Decidim
-  # The controller to manage user groups members
-  class GroupMembersController < Decidim::ApplicationController
-    include FormFactory
-    include UserGroups
-
-    before_action :enforce_user_groups_enabled
-
-    helper_method :user_group
-
-    # Removes a user from a user group
-    def destroy
-      enforce_permission_to(:manage, :user_group, user_group:)
-
-      RemoveUserFromGroup.call(membership, user_group) do
-        on(:ok) do
-          flash[:notice] = t("group_members.remove.success", scope: "decidim")
-
-          redirect_back fallback_location: profile_group_members_path(user_group.nickname)
-        end
-
-        on(:invalid) do
-          flash[:alert] = t("group_members.remove.error", scope: "decidim")
-          redirect_back fallback_location: profile_group_members_path(user_group.nickname)
-        end
-      end
-    end
-
-    def promote
-      enforce_permission_to(:manage, :user_group, user_group:)
-
-      PromoteMembership.call(membership, user_group) do
-        on(:ok) do
-          flash[:notice] = t("group_members.promote.success", scope: "decidim")
-
-          redirect_back fallback_location: profile_group_members_path(user_group.nickname)
-        end
-
-        on(:invalid) do
-          flash[:alert] = t("group_members.promote.error", scope: "decidim")
-          redirect_back fallback_location: profile_group_members_path(user_group.nickname)
-        end
-      end
-    end
-
-    def demote
-      enforce_permission_to(:manage, :user_group, user_group:)
-
-      DemoteMembership.call(membership, user_group) do
-        on(:ok) do
-          flash[:notice] = t("group_admins.demote.success", scope: "decidim")
-
-          redirect_back fallback_location: profile_group_admins_path(user_group.nickname)
-        end
-
-        on(:invalid) do
-          flash[:alert] = t("group_admins.demote.error", scope: "decidim")
-          redirect_back fallback_location: profile_group_admins_path(user_group.nickname)
-        end
-      end
-    end
-
-    private
-
-    def user_group
-      @user_group ||= Decidim::UserGroups::ManageableUserGroups.for(current_user).find_by(nickname: params[:group_id])
-    end
-
-    def membership
-      user_group.memberships.find(params[:id])
-    end
-  end
-end