decidim-elections 0.23.2 → 0.24.0

data/app/permissions/decidim/elections/permissions.rb

@@ -4,14 +4,18 @@ module Decidim
   module Elections
     class Permissions < Decidim::DefaultPermissions
       def permissions
-        # Anonymous users can only view elections
-        toggle_allow(can_view?) if permission_action.scope == :public && permission_action.subject == :election && permission_action.action == :view
+        check_view_election_permissions
+
+        toggle_allow(can_answer_feedback?) if permission_action.scope == :public && permission_action.subject == :questionnaire && permission_action.action == :answer
 
         return permission_action unless user
 
         # Delegate the admin permission checks to the admin permissions class
         return Decidim::Elections::Admin::Permissions.new(user, permission_action, context).permissions if permission_action.scope == :admin
 
+        # Delegate the trustee_zone permission checks to the trustee zone permissions class
+        return Decidim::Elections::TrusteeZone::Permissions.new(user, permission_action, context).permissions if permission_action.scope == :trustee_zone
+
         return permission_action if permission_action.scope != :public
         return permission_action if permission_action.subject != :election
 
@@ -27,6 +31,14 @@ module Decidim
 
       private
 
+      def check_view_election_permissions
+        return unless permission_action.scope == :public &&
+                      permission_action.action == :view &&
+                      permission_action.subject == :election
+
+        toggle_allow(can_view?)
+      end
+
       def can_view?
         election.published? || user&.admin?
       end
@@ -43,6 +55,12 @@ module Decidim
         authorized?(:vote, resource: election)
       end
 
+      def can_answer_feedback?
+        return unless user && election
+
+        authorized_to_vote? && !election.questionnaire.answered_by?(user)
+      end
+
       def election
         @election ||= context[:election]
       end

data/app/permissions/decidim/elections/trustee_zone/permissions.rb

@@ -0,0 +1,32 @@
+# frozen_string_literal: true
+
+module Decidim
+  module Elections
+    module TrusteeZone
+      class Permissions < Decidim::DefaultPermissions
+        def permissions
+          return permission_action unless permission_action.scope == :trustee_zone
+
+          case permission_action.subject
+          when :trustee, :election
+            toggle_allow(trustee_for_user?) if [:view, :update].member?(permission_action.action)
+          when :user
+            allow! if permission_action.action == :update_profile
+          end
+
+          permission_action
+        end
+
+        private
+
+        def trustee_for_user?
+          trustee && trustee.user == user
+        end
+
+        def trustee
+          @trustee ||= context.fetch(:trustee, nil)
+        end
+      end
+    end
+  end
+end

data/app/permissions/decidim/votings/admin/permissions.rb

@@ -0,0 +1,127 @@
+# frozen_string_literal: true
+
+module Decidim
+  module Votings
+    module Admin
+      class Permissions < Decidim::DefaultPermissions
+        def permissions
+          return permission_action unless user
+          return permission_action unless permission_action.scope == :admin
+
+          return permission_action if voting && !voting.is_a?(Decidim::Votings::Voting)
+
+          unless user.admin?
+            disallow!
+            return permission_action
+          end
+
+          user_can_enter_space_area?
+
+          if read_admin_dashboard_action?
+            allow!
+            return permission_action
+          end
+
+          allowed_read_participatory_space?
+          allowed_action_on_component?
+          allowed_voting_action?
+
+          permission_action
+        end
+
+        private
+
+        def user_can_enter_space_area?
+          return unless permission_action.action == :enter &&
+                        permission_action.subject == :space_area &&
+                        context.fetch(:space_name, nil) == :votings
+
+          allow!
+        end
+
+        def read_admin_dashboard_action?
+          permission_action.action == :read &&
+            permission_action.subject == :admin_dashboard
+        end
+
+        def allowed_read_participatory_space?
+          return unless permission_action.action == :read &&
+                        permission_action.subject == :participatory_space
+
+          allow!
+        end
+
+        def allowed_action_on_component?
+          return unless permission_action.subject == :component
+
+          allow!
+        end
+
+        def allowed_voting_action?
+          return unless
+          [
+            :votings, :voting,
+            :polling_station, :polling_stations,
+            :polling_officer, :polling_officers,
+            :monitoring_committee_member, :monitoring_committee_members
+          ].member? permission_action.subject
+
+          case permission_action.subject
+          when :votings
+            toggle_allow(user.admin?) if permission_action.action == :read
+          when :voting
+            case permission_action.action
+            when :read, :create, :publish, :unpublish
+              allow!
+            when :update, :preview, :manage_landing_page
+              toggle_allow(voting.present?)
+            end
+          when :polling_station
+            case permission_action.action
+            when :create
+              allow!
+            when :update, :delete
+              toggle_allow(polling_station.present?)
+            end
+          when :polling_stations
+            toggle_allow(user.admin?) if permission_action.action == :read
+          when :polling_officer
+            case permission_action.action
+            when :create
+              allow!
+            when :delete
+              toggle_allow(polling_officer.present?)
+            end
+          when :polling_officers
+            toggle_allow(user.admin?) if permission_action.action == :read
+          when :monitoring_committee_member
+            case permission_action.action
+            when :create
+              allow!
+            when :delete
+              toggle_allow(monitoring_committee_member.present?)
+            end
+          when :monitoring_committee_members
+            toggle_allow(user.admin?) if permission_action.action == :read
+          end
+        end
+
+        def voting
+          @voting ||= context.fetch(:voting, nil) || context.fetch(:participatory_space, nil)
+        end
+
+        def polling_station
+          @polling_station ||= context.fetch(:polling_station, nil)
+        end
+
+        def polling_officer
+          @polling_officer ||= context.fetch(:polling_officer, nil)
+        end
+
+        def monitoring_committee_member
+          @monitoring_committee_member ||= context.fetch(:monitoring_committee_member, nil)
+        end
+      end
+    end
+  end
+end

data/app/permissions/decidim/votings/permissions.rb

@@ -0,0 +1,40 @@
+# frozen_string_literal: true
+
+module Decidim
+  module Votings
+    class Permissions < Decidim::DefaultPermissions
+      def permissions
+        allowed_public_anonymous_action?
+
+        return permission_action unless user
+
+        return Decidim::Votings::Admin::Permissions.new(user, permission_action, context).permissions if permission_action.scope == :admin
+
+        # Delegate the polling_officer_zone permission checks to the polling officer zone permissions class
+        return Decidim::Votings::PollingOfficerZone::Permissions.new(user, permission_action, context).permissions if permission_action.scope == :polling_officer_zone
+
+        permission_action
+      end
+
+      private
+
+      def voting
+        @voting ||= context.fetch(:voting, nil)
+      end
+
+      def allowed_public_anonymous_action?
+        return unless permission_action.action == :read
+        return unless permission_action.scope == :public
+
+        case permission_action.subject
+        when :votings
+          allow!
+        when :voting
+          toggle_allow(voting.published? || user&.admin?)
+        when :participatory_space
+          allow!
+        end
+      end
+    end
+  end
+end

data/app/permissions/decidim/votings/polling_officer_zone/permissions.rb

@@ -0,0 +1,32 @@
+# frozen_string_literal: true
+
+module Decidim
+  module Votings
+    module PollingOfficerZone
+      class Permissions < Decidim::DefaultPermissions
+        def permissions
+          return permission_action unless permission_action.scope == :polling_officer_zone
+
+          case permission_action.subject
+          when :polling_officers, :polling_station
+            toggle_allow(polling_officers_for_user?) if [:view].member?(permission_action.action)
+          when :user
+            allow! if permission_action.action == :update_profile
+          end
+
+          permission_action
+        end
+
+        private
+
+        def polling_officers_for_user?
+          polling_officers.any? && polling_officers.all? { |polling_officer| polling_officer.user == user }
+        end
+
+        def polling_officers
+          @polling_officers ||= context.fetch(:polling_officers, [])
+        end
+      end
+    end
+  end
+end

data/app/presenters/decidim/elections/admin_log/election_presenter.rb

@@ -29,7 +29,7 @@ module Decidim
 
         def action_string
           case action
-          when "publish", "unpublish"
+          when "publish", "unpublish", "setup", "start_key_ceremony", "start_vote", "end_vote", "start_tally", "publish_results"
             "decidim.elections.admin_log.election.#{action}"
           else
             super

data/app/presenters/decidim/elections/trustee_presenter.rb

@@ -0,0 +1,24 @@
+# frozen_string_literal: true
+
+module Decidim
+  module Elections
+    #
+    # Decorator for trustee
+    #
+    class TrusteePresenter < SimpleDelegator
+      def trustee
+        __getobj__
+      end
+
+      def public_key_thumbprint
+        @public_key_thumbprint ||= jwk_thumbprint(JSON.parse(trustee.public_key)) if trustee.public_key.present?
+      end
+
+      private
+
+      def jwk_thumbprint(key)
+        Base64.urlsafe_encode64(Digest::SHA256.digest(key.slice("e", "kty", "n").to_json), padding: false)
+      end
+    end
+  end
+end

data/app/presenters/decidim/votings/admin_log/voting_presenter.rb

@@ -0,0 +1,45 @@
+# frozen_string_literal: true
+
+module Decidim
+  module Votings
+    module AdminLog
+      # This class holds the logic to present a `Decidim::Votings::Voting`
+      # for the `AdminLog` log.
+      #
+      # Usage should be automatic and you shouldn't need to call this class
+      # directly, but here's an example:
+      #
+      #    action_log = Decidim::ActionLog.last
+      #    view_helpers # => this comes from the views
+      #    ElectionPresenter.new(action_log, view_helpers).present
+      class VotingPresenter < Decidim::Log::BasePresenter
+        private
+
+        def diff_fields_mapping
+          {
+            title: :i18n,
+            description: :i18n,
+            slug: :string,
+            start_time: :date,
+            end_time: :date,
+            decidim_scope_id: :scope,
+            published_at: :date
+          }
+        end
+
+        def i18n_labels_scope
+          "activemodel.attributes.voting"
+        end
+
+        def action_string
+          case action
+          when "create", "publish", "unpublish"
+            "decidim.votings.admin_log.voting.#{action}"
+          else
+            super
+          end
+        end
+      end
+    end
+  end
+end

data/app/presenters/decidim/votings/polling_station_presenter.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+module Decidim
+  module Votings
+    #
+    # Decorator for polling station
+    #
+    class PollingStationPresenter < SimpleDelegator
+      include Decidim::SanitizeHelper
+      include Decidim::TranslatableAttributes
+
+      def polling_station
+        __getobj__
+      end
+
+      def title
+        content = translated_attribute(polling_station.title)
+        decidim_html_escape(content)
+      end
+
+      def address
+        content = translated_attribute(polling_station.address)
+        decidim_html_escape(content)
+      end
+    end
+  end
+end

data/app/presenters/decidim/votings/voting_presenter.rb

@@ -0,0 +1,36 @@
+# frozen_string_literal: true
+
+module Decidim
+  module Votings
+    class VotingPresenter < SimpleDelegator
+      include Rails.application.routes.mounted_helpers
+      include ActionView::Helpers::UrlHelper
+      include Decidim::SanitizeHelper
+      include Decidim::TranslatableAttributes
+
+      delegate :url, to: :introductory_image, prefix: true
+      delegate :url, to: :banner_image, prefix: true
+
+      def title
+        content = translated_attribute(voting.title)
+        decidim_html_escape(content)
+      end
+
+      def introductory_image_url
+        return if voting.introductory_image.blank?
+
+        URI.join(decidim.root_url(host: voting.organization.host), voting.introductory_image_url).to_s
+      end
+
+      def banner_image_url
+        return if voting.banner_image.blank?
+
+        URI.join(decidim.root_url(host: voting.organization.host), voting.banner_image_url).to_s
+      end
+
+      def voting
+        __getobj__
+      end
+    end
+  end
+end

data/app/queries/decidim/elections/admin/pending_actions.rb

@@ -0,0 +1,20 @@
+# frozen_string_literal: true
+
+module Decidim
+  module Elections
+    module Admin
+      # A class used to find actions with a pending status
+      class PendingActions < Rectify::Query
+        # Syntactic sugar to initialize the class and return the queried objects.
+        def self.for
+          new.query
+        end
+
+        # Finds the votes with pending status
+        def query
+          Decidim::Elections::Action.pending
+        end
+      end
+    end
+  end
+end