decidim-department_admin 0.7.2

data/app/decorators/decidim/conferences/create_conference_decorator.rb

@@ -0,0 +1,51 @@
+# frozen_string_literal: true
+
+# Intercepts the `call` method and forces the Area of the user if it is a
+# department_admin user.
+module Decidim::Conferences::CreateConferenceDecorator
+  def self.decorate
+    return unless Decidim::DepartmentAdmin.conferences_defined?
+
+    Decidim::Conferences::Admin::CreateConference.class_eval do
+      alias_method :original_call, :call
+
+      def call
+        author = form.current_user
+        form.area_id = author.areas.first.id if author.department_admin?
+        original_call
+      end
+
+      private
+
+      def conference
+        @conference ||= Decidim.traceability.create(
+          Decidim::Conference,
+          form.current_user,
+          organization: form.current_organization,
+          title: form.title,
+          slogan: form.slogan,
+          slug: form.slug,
+          hashtag: form.hashtag,
+          description: form.description,
+          short_description: form.short_description,
+          objectives: form.objectives,
+          location: form.location,
+          scopes_enabled: form.scopes_enabled,
+          scope: form.scope,
+          start_date: form.start_date,
+          end_date: form.end_date,
+          hero_image: form.hero_image,
+          banner_image: form.banner_image,
+          promoted: form.promoted,
+          show_statistics: form.show_statistics,
+          registrations_enabled: form.registrations_enabled,
+          available_slots: form.available_slots || 0,
+          registration_terms: form.registration_terms,
+          area: form.area
+        )
+      end
+    end
+  end
+end
+
+::Decidim::Conferences::CreateConferenceDecorator.decorate

data/app/decorators/decidim/conferences/permissions_decorator.rb

@@ -0,0 +1,24 @@
+# frozen_string_literal: true
+
+module Decidim::Conferences::PermissionsDecorator
+  def self.decorate
+    return unless Decidim::DepartmentAdmin.conferences_defined?
+
+    Decidim::Conferences::Permissions.class_eval do
+      # Intercept the `has_manageable_conferences?` method
+      # always returns true if the user is a department_admin. Otherwise delegates to the original method.
+      # This is a fix to avoid permissions crashing when there are no conferences with the user's area.
+      alias_method :original_has_manageable_conferences?, :has_manageable_conferences?
+
+      # rubocop: disable Lint/UnusedMethodArgument
+      def has_manageable_conferences?(role: :any)
+        return unless user
+
+        user.department_admin? || original_has_manageable_conferences?
+      end
+      # rubocop: enable Lint/UnusedMethodArgument
+    end
+  end
+end
+
+::Decidim::Conferences::PermissionsDecorator.decorate

data/app/decorators/decidim/conferences/update_conference_decorator.rb

@@ -0,0 +1,21 @@
+# frozen_string_literal: true
+
+# Intercepts the `call` method and forces the Area of the user if it is a
+# department_admin user.
+module Decidim::Conferences::UpdateConferenceDecorator
+  def self.decorate
+    return unless Decidim::DepartmentAdmin.conferences_defined?
+
+    Decidim::Conferences::Admin::UpdateConference.class_eval do
+      alias_method :original_call, :call
+
+      def call
+        author = form.current_user
+        form.area_id = author.areas.first.id if author.department_admin?
+        original_call
+      end
+    end
+  end
+end
+
+::Decidim::Conferences::UpdateConferenceDecorator.decorate

data/app/decorators/decidim/conferences_decorator.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+module Decidim::ConferencesDecorator
+  #
+  # This decorator adds required associations between Decidim::Conference and Area.
+  #
+  def self.decorate
+    return unless Decidim::DepartmentAdmin.conferences_defined?
+
+    require_dependency "decidim/conference"
+    Decidim::Conference.class_eval do
+      belongs_to :area,
+                 foreign_key: "decidim_area_id",
+                 class_name: "Decidim::Area",
+                 optional: true
+
+      has_and_belongs_to_many :users_with_any_role,
+                              class_name: "Decidim::User",
+                              join_table: :decidim_conference_user_roles,
+                              foreign_key: :decidim_conference_id,
+                              association_foreign_key: :decidim_user_id,
+                              validate: false
+    end
+  end
+end
+
+::Decidim::ConferencesDecorator.decorate

data/app/decorators/decidim/conferences_with_user_role_decorator.rb

@@ -0,0 +1,29 @@
+# frozen_string_literal: true
+
+module Decidim::ConferencesWithUserRoleDecorator
+  #
+  # This decorator adds the capability to query participatory_processes
+  # filtering by User role `department_admin`.
+  #
+  def self.decorate
+    return unless Decidim::DepartmentAdmin.conferences_defined?
+
+    Decidim::Conferences::ConferencesWithUserRole.class_eval do
+      private
+
+      alias_method :conference_ids_by_conferences_user_table, :conference_ids
+
+      def conference_ids
+        ids = [conference_ids_by_conferences_user_table]
+        if user&.department_admin?
+          ids << ::Decidim::Conference
+                 .where("decidim_area_id" => user.areas.pluck(:id)).pluck(:id)
+        end
+
+        ::Decidim::Conference.where(id: ids.flatten.uniq)
+      end
+    end
+  end
+end
+
+::Decidim::ConferencesWithUserRoleDecorator.decorate

data/app/decorators/decidim/decidim_form_helper_decorator.rb

@@ -0,0 +1,23 @@
+# frozen_string_literal: true
+
+module Decidim::DecidimFormHelperDecorator
+  #
+  # This decorator override Decidim::DecidimFormHelper methods:
+  # - areas_for_select with assigned areas to user.
+  #
+  def self.decorate
+    Decidim::DecidimFormHelper.class_eval do
+      alias_method :original_areas_for_select, :areas_for_select
+
+      def areas_for_select(organization)
+        author = current_user
+
+        return author.areas if author&.department_admin? && controller_path.split("/").include?("admin")
+
+        original_areas_for_select(organization)
+      end
+    end
+  end
+end
+
+::Decidim::DecidimFormHelperDecorator.decorate

data/app/decorators/decidim/invite_user_decorator.rb

@@ -0,0 +1,56 @@
+# frozen_string_literal: true
+
+module Decidim::InviteUserDecorator
+  #
+  # This decorator overwrites how InviteUser performs the invitation by associating the area to the user.
+  #
+  def self.decorate
+    Decidim::InviteUser.class_eval do
+      alias_method :original_update_user, :update_user
+
+      def update_user
+        add_selected_area_to(user)
+        clear_department_admin_role if admin_role?
+        original_update_user
+      end
+
+      def invite_user
+        @user = Decidim::User.new(
+          name: form.name,
+          email: form.email.downcase,
+          nickname: Decidim::UserBaseEntity.nicknamize(form.name, organization: form.organization),
+          organization: form.organization,
+          admin: admin_role?,
+          roles: admin_role? ? [] : [form.role].compact
+        )
+        add_selected_area_to(@user)
+        @user.invite!(
+          form.invited_by,
+          invitation_instructions: form.invitation_instructions
+        )
+      end
+
+      private #---------------------------------------------------------
+
+      def add_selected_area_to(user)
+        if current_user.department_admin?
+          user.areas << current_user.areas.first
+        elsif form.selected_area.present?
+          user.areas.clear
+          user.areas << form.selected_area
+        end
+      end
+
+      def admin_role?
+        form.role == "admin"
+      end
+
+      def clear_department_admin_role
+        user.areas.clear
+        user.roles.delete("department_admin")
+      end
+    end
+  end
+end
+
+::Decidim::InviteUserDecorator.decorate

data/app/decorators/decidim/invite_user_form_decorator.rb

@@ -0,0 +1,45 @@
+# frozen_string_literal: true
+
+module Decidim::InviteUserFormDecorator
+  #
+  # This decorator adds the attribute area_id tot the InviteUserForm and
+  # extends it with utility methods for the view and command.
+  #
+  def self.decorate
+    Decidim::InviteUserForm.class_eval do
+      attribute :area_id, Integer
+
+      alias_method :original_roles_method, :available_roles_for_select
+
+      def available_roles_for_select
+        if current_user.department_admin?
+          Decidim::User::Roles.all.select { |n| n == "department_admin" }.map do |role|
+            [
+              I18n.t("models.user.fields.roles.#{role}", scope: "decidim.admin"),
+              role,
+            ]
+          end
+        else
+          original_roles_method
+        end
+      end
+
+      # called from the view
+      def available_areas_for_select
+        if current_user.department_admin?
+          current_user.areas.collect { |area| [area.translated_name, area.id] }
+        else
+          Decidim::Area.all.collect { |area| [area.translated_name, area.id] }
+        end
+      end
+
+      # called from the command
+      # returns the selected Decidim::Area instance.
+      def selected_area
+        Decidim::Area.find_by(id: area_id)
+      end
+    end
+  end
+end
+
+::Decidim::InviteUserFormDecorator.decorate

data/app/decorators/decidim/newsletter_decorator.rb

@@ -0,0 +1,20 @@
+# frozen_string_literal: true
+
+require_dependency "decidim/newsletter"
+
+module Decidim::NewsletterDecorator
+  def self.decorate
+    Decidim::Newsletter.class_eval do
+      # The area of the newsletter is the same
+      # than the area of the author of the newsletter.
+      # The method name is `area` because the permissions system
+      # must verify that the `user` has the same `area` as the `resource`.
+      def area
+        return unless author.areas.any?
+        return author.areas.first if author&.department_admin?
+      end
+    end
+  end
+end
+
+::Decidim::NewsletterDecorator.decorate

data/app/decorators/decidim/newsletters_helper_decorator.rb

@@ -0,0 +1,44 @@
+# frozen_string_literal: true
+
+module Decidim::NewslettersHelperDecorator
+  # rubocop: disable Metrics/CyclomaticComplexity
+  # rubocop: disable Metrics/PerceivedComplexity
+  def self.decorate
+    Decidim::Admin::NewslettersHelper.class_eval do
+      alias_method :original_spaces_user_can_admin, :spaces_user_can_admin
+
+      def spaces_user_can_admin
+        author = current_user
+
+        if author&.department_admin?
+          spaces_department_admin_can_admin
+        else
+          original_spaces_user_can_admin
+        end
+      end
+
+      def spaces_department_admin_can_admin
+        @spaces_user_can_admin ||= {}
+        Decidim.participatory_space_manifests.each do |manifest|
+          organization_participatory_space(manifest.name)&.each do |space|
+            next unless space.respond_to?(:decidim_area_id)
+            next if space.decidim_area_id.blank?
+            next unless current_user.areas.any?
+            next unless space.decidim_area_id == current_user.areas.first.id
+
+            @spaces_user_can_admin[manifest.name] ||= []
+            space_as_option_for_select_data = space_as_option_for_select(space)
+            @spaces_user_can_admin[manifest.name] << space_as_option_for_select_data unless @spaces_user_can_admin[manifest.name].detect do |x|
+              x == space_as_option_for_select_data
+            end
+          end
+        end
+        @spaces_user_can_admin
+      end
+    end
+  end
+  # rubocop: enable Metrics/CyclomaticComplexity
+  # rubocop: enable Metrics/PerceivedComplexity
+end
+
+::Decidim::NewslettersHelperDecorator.decorate

data/app/decorators/decidim/participatory_process_decorator.rb

@@ -0,0 +1,21 @@
+# frozen_string_literal: true
+
+module Decidim::ParticipatoryProcessDecorator
+  #
+  # This decorator adds required associations between Decidim::ParticipatoryProcess and Departaments.
+  #
+  #
+  def self.decorate
+    require_dependency "decidim/participatory_process"
+    Decidim::ParticipatoryProcess.class_eval do
+      has_and_belongs_to_many :users_with_any_role,
+                              class_name: "Decidim::User",
+                              join_table: :decidim_participatory_process_user_roles,
+                              foreign_key: :decidim_participatory_process_id,
+                              association_foreign_key: :decidim_user_id,
+                              validate: false
+    end
+  end
+end
+
+::Decidim::ParticipatoryProcessDecorator.decorate

data/app/decorators/decidim/participatory_process_group_decorator.rb

@@ -0,0 +1,17 @@
+# frozen_string_literal: true
+
+module Decidim::ParticipatoryProcessGroupDecorator
+  #
+  # This decorator adds required associations between Decidim::ParticipatoryProcess and Departaments.
+  #
+  def self.decorate
+    require_dependency "decidim/participatory_process_group"
+    Decidim::ParticipatoryProcessGroup.class_eval do
+      has_many :participatory_process,
+               class_name: "ParticipatoryProcess",
+               foreign_key: "decidim_participatory_process_group_id"
+    end
+  end
+end
+
+::Decidim::ParticipatoryProcessGroupDecorator.decorate

data/app/decorators/decidim/participatory_processes/admin/participatory_processes_controller_decorator.rb

@@ -0,0 +1,25 @@
+# frozen_string_literal: true
+
+module Decidim::ParticipatoryProcesses::Admin::ParticipatoryProcessesControllerDecorator
+  #
+  # This decorator adds the capability to the controller to query processes
+  # filtering by User role `department_admin`.
+  #
+  def self.decorate
+    Decidim::ParticipatoryProcesses::Admin::ParticipatoryProcessesController.class_eval do
+      private
+
+      alias_method :original_organization_processes, :collection
+
+      def collection
+        @collection ||= if current_user.admin?
+                          original_organization_processes
+                        else
+                          ::Decidim::ParticipatoryProcessesWithUserRole.for(current_user)
+                        end
+      end
+    end
+  end
+end
+
+::Decidim::ParticipatoryProcesses::Admin::ParticipatoryProcessesControllerDecorator.decorate

data/app/decorators/decidim/participatory_processes/create_participatory_process_decorator.rb

@@ -0,0 +1,19 @@
+# frozen_string_literal: true
+
+module Decidim::ParticipatoryProcesses::CreateParticipatoryProcessDecorator
+  # Intercepts the `call` method and forces the Area of the user if it is a
+  # department_admin user.
+  def self.decorate
+    Decidim::ParticipatoryProcesses::Admin::CreateParticipatoryProcess.class_eval do
+      alias_method :original_call, :call
+
+      def call
+        author = form.current_user
+        form.area_id = author.areas.first.id if author.department_admin?
+        original_call
+      end
+    end
+  end
+end
+
+::Decidim::ParticipatoryProcesses::CreateParticipatoryProcessDecorator.decorate

data/app/decorators/decidim/participatory_processes/permissions_decorator.rb

@@ -0,0 +1,22 @@
+# frozen_string_literal: true
+
+module Decidim::ParticipatoryProcesses::PermissionsDecorator
+  def self.decorate
+    Decidim::ParticipatoryProcesses::Permissions.class_eval do
+      # Intercept the `has_manageable_processes?` method
+      # always returns true if the user is a department_admin. Otherwise delegates to the original method.
+      # This is a fix to avoid permissions crashing when there are no processes with the user's area.
+      alias_method :original_has_manageable_processes?, :has_manageable_processes?
+
+      # rubocop: disable Lint/UnusedMethodArgument
+      def has_manageable_processes?(role: :any)
+        return unless user
+
+        user.department_admin? || original_has_manageable_processes?
+      end
+      # rubocop: enable Lint/UnusedMethodArgument
+    end
+  end
+end
+
+::Decidim::ParticipatoryProcesses::PermissionsDecorator.decorate

data/app/decorators/decidim/participatory_processes/update_participatory_process_decorator.rb

@@ -0,0 +1,19 @@
+# frozen_string_literal: true
+
+module Decidim::ParticipatoryProcesses::UpdateParticipatoryProcessDecorator
+  # Intercepts the `call` method and forces the Area of the user if it is a
+  # department_admin user.
+  def self.decorate
+    Decidim::ParticipatoryProcesses::Admin::UpdateParticipatoryProcess.class_eval do
+      alias_method :original_call, :call
+
+      def call
+        author = form.current_user
+        form.area_id = author.areas.first.id if author.department_admin?
+        original_call
+      end
+    end
+  end
+end
+
+::Decidim::ParticipatoryProcesses::UpdateParticipatoryProcessDecorator.decorate

data/app/decorators/decidim/participatory_processes_with_user_role_decorator.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+module Decidim::ParticipatoryProcessesWithUserRoleDecorator
+  #
+  # This decorator adds the capability to query participatory_processes
+  # filtering by User role `department_admin`.
+  #
+  def self.decorate
+    Decidim::ParticipatoryProcessesWithUserRole.class_eval do
+      private
+
+      alias_method :process_ids_by_process_user_table, :process_ids
+
+      def process_ids
+        ids = [process_ids_by_process_user_table]
+        if user&.department_admin?
+          ids << ::Decidim::ParticipatoryProcess
+                 .where("decidim_area_id" => user.areas.pluck(:id))
+        end
+
+        ::Decidim::ParticipatoryProcess.where(id: ids.flatten.uniq)
+      end
+    end
+  end
+end
+
+::Decidim::ParticipatoryProcessesWithUserRoleDecorator.decorate

data/app/decorators/decidim/user_decorator.rb

@@ -0,0 +1,59 @@
+# frozen_string_literal: true
+
+module Decidim::UserDecorator
+  #
+  # This decorator adds required associations between Decidim::User and Area.
+  #
+  def self.decorate
+    require_dependency "decidim/user"
+    Decidim::User.class_eval do
+      has_and_belongs_to_many :areas,
+                              join_table: :department_admin_areas,
+                              foreign_key: :decidim_user_id,
+                              association_foreign_key: :decidim_area_id,
+                              validate: false
+
+      has_and_belongs_to_many :participatory_processes,
+                              join_table: :decidim_participatory_process_user_roles,
+                              foreign_key: :decidim_user_id,
+                              association_foreign_key: :decidim_participatory_process_id,
+                              validate: false
+
+      has_and_belongs_to_many :assemblies,
+                              join_table: :decidim_assembly_user_roles,
+                              foreign_key: :decidim_user_id,
+                              association_foreign_key: :decidim_assembly_id,
+                              validate: false
+      if Decidim::DepartmentAdmin.conferences_defined?
+        has_and_belongs_to_many :conferences,
+                                join_table: :decidim_conference_user_roles,
+                                foreign_key: :decidim_user_id,
+                                association_foreign_key: :decidim_conference_id,
+                                validate: false
+      end
+
+      scope :admins, -> { where(admin: true) }
+      scope :user_managers, -> { where(roles: ["user_manager"]) }
+      scope :department_admins, -> { where(roles: ["department_admin"]) }
+
+      def department_admin?
+        role?("department_admin")
+      end
+
+      def self.space_admins(organization)
+        if Decidim::DepartmentAdmin.conferences_defined?
+          Decidim::User.where(organization: organization)
+                       .where('"decidim_users"."id" in (select "decidim_participatory_process_user_roles"."decidim_user_id" from "decidim_participatory_process_user_roles")' \
+                              ' or "decidim_users"."id" in (select "decidim_assembly_user_roles"."decidim_user_id" from "decidim_assembly_user_roles")' \
+                              ' or "decidim_users"."id" in (select "decidim_conference_user_roles"."decidim_user_id" from "decidim_conference_user_roles")')
+        else
+          Decidim::User.where(organization: organization)
+                       .where('"decidim_users"."id" in (select "decidim_participatory_process_user_roles"."decidim_user_id" from "decidim_participatory_process_user_roles")' \
+                              ' or "decidim_users"."id" in (select "decidim_assembly_user_roles"."decidim_user_id" from "decidim_assembly_user_roles")')
+        end
+      end
+    end
+  end
+end
+
+::Decidim::UserDecorator.decorate

data/app/decorators/lib/decidim/participatory_space_resourceable_decorator.rb

@@ -0,0 +1,36 @@
+# frozen_string_literal: true
+
+module Lib::Decidim::ParticipatorySpaceResourceableDecorator
+  #
+  # - Add new ParticipatorySpaceRole case for DeparmentAdmin.
+  # - Add .to_sym to the `case` test, to avoid error when logged in user is Department Admin
+  # This override affects only line `case role_name&.to_sym`
+  #
+  def user_role_config_for(user, role_name)
+    case role_name&.to_sym
+    when :organization_admin
+      Decidim::ParticipatorySpaceRoleConfig::Admin.new(user)
+    when :admin # ParticipatorySpace admin
+      Decidim::ParticipatorySpaceRoleConfig::ParticipatorySpaceAdmin.new(user)
+    when :department_admin
+      Decidim::ParticipatorySpaceRoleConfig::DepartmentAdmin.new(user)
+    when :valuator
+      Decidim::ParticipatorySpaceRoleConfig::Valuator.new(user)
+    when :moderator
+      Decidim::ParticipatorySpaceRoleConfig::Moderator.new(user)
+    when :collaborator
+      Decidim::ParticipatorySpaceRoleConfig::Collaborator.new(user)
+    else
+      Decidim::ParticipatorySpaceRoleConfig::NullObject.new(user)
+    end
+  end
+end
+
+require "decidim/assembly"
+Decidim::Assembly.prepend(::Lib::Decidim::ParticipatorySpaceResourceableDecorator)
+require "decidim/participatory_process"
+Decidim::ParticipatoryProcess.prepend(::Lib::Decidim::ParticipatorySpaceResourceableDecorator)
+if Decidim::DepartmentAdmin.conferences_defined?
+  require "decidim/conference"
+  Decidim::Conference.prepend(::Lib::Decidim::ParticipatorySpaceResourceableDecorator)
+end

data/app/helpers/decidim/admin/user_roles_helper.rb

@@ -0,0 +1,25 @@
+# frozen_string_literal: true
+
+#  NOTE: This module is being override to take into account when a user is a department_admin.
+
+module Decidim
+  module Admin
+    module UserRolesHelper
+      # rubocop: disable Rails/HelperInstanceVariable
+      def user_role_config
+        return @user_role_config if @user_role_config
+
+        space = current_participatory_space
+        @user_role_config = if current_user.admin?
+                              space.user_role_config_for(current_user, :organization_admin)
+                            elsif current_user.department_admin?
+                              space.user_role_config_for(current_user, :department_admin)
+                            else
+                              role = space.user_roles.find_by(user: current_user)
+                              space.user_role_config_for(current_user, role&.role)
+                            end
+      end
+      # rubocop: enable Rails/HelperInstanceVariable
+    end
+  end
+end