decidim-initiatives 0.30.1 → 0.31.0.rc1

data/app/services/decidim/initiatives/signature_handler.rb

@@ -0,0 +1,248 @@
+# frozen_string_literal: true
+
+module Decidim
+  module Initiatives
+    # This is the base class for signature handlers, all implementations
+    # should inherit from it.
+    # Each SignatureHandler is a form that will be used to check if the
+    # signature is valid or not. When it is valid the initiatives votes
+    # defined by the initiative type will be created for the user.
+    #
+    # Feel free to use validations to assert fields against a remote API,
+    # local database, or whatever.
+    #
+    # It also sets two default attributes, `user` and `initiative`.
+    class SignatureHandler < Form
+      include ValidatableAuthorizations
+
+      mimic :initiatives_vote
+
+      # The user that is trying to sign, it is initialized with the
+      # `current_user` from the controller.
+      attribute :user, Decidim::User
+
+      # The initiative to be signed
+      attribute :initiative, Decidim::Initiative
+
+      attribute :tos_agreement, if: :ephemeral_tos_pending?
+      validates :tos_agreement, presence: true, if: :ephemeral_tos_pending?
+      validate :tos_agreement_acceptance, if: :ephemeral_tos_pending?
+
+      attribute :transfer_status
+
+      validates :initiative, :user, presence: true
+      validate :uniqueness
+      validate :valid_metadata
+      validate :valid_authorized_scopes
+
+      delegate :promote_authorization_validation_errors, :authorization_handler_form_class, :ephemeral?, to: :workflow_manifest
+      delegate :scope, to: :initiative
+
+      # A unique ID to be implemented by the signature handler that ensures
+      # no duplicates are created.
+      def unique_id
+        nil
+      end
+
+      def encrypted_metadata
+        return if metadata.blank?
+
+        @encrypted_metadata ||= encryptor.encrypt(metadata)
+      end
+
+      # Public: Builds the list of scopes where the user is authorized to vote in. This is used when
+      # the initiative allows also voting on child scopes, not only the main scope.
+      #
+      # Instead of just listing the children of the main scope, we just want to select the ones that
+      # have been added to the InitiativeType with its voting settings.
+      #
+      def authorized_scopes
+        initiative.votable_initiative_type_scopes.select do |initiative_type_scope|
+          initiative_type_scope.global_scope? ||
+            initiative_type_scope.scope == user_signature_scope ||
+            initiative_type_scope.scope.ancestor_of?(user_signature_scope)
+        end.flat_map(&:scope)
+      end
+
+      # Public: Finds the scope the user has an authorization for, this way the user can vote
+      # on that scope and its parents.
+      #
+      # This is can be used to allow users that are authorized with a children
+      # scope to sign an initiative with a parent scope.
+      #
+      # As an example: A city (global scope) has many districts (scopes with
+      # parent nil), and each district has different neighbourhoods (with its
+      # parent as a district). If we setup the authorization handler to match
+      # a neighbourhood, the same authorization can be used to participate
+      # in district, neighbourhoods or city initiatives.
+      #
+      # Returns a Decidim::Scope.
+      def user_signature_scope
+        return if signature_scope_id.blank?
+
+        @user_signature_scope ||= signature_scope_candidates.find do |scope_candidate|
+          scope_candidate&.id == signature_scope_id
+        end
+      end
+
+      # Public: Builds a list of Decidim::Scopes where the user could have a
+      # valid authorization.
+      #
+      # If the initiative is set with a global scope (meaning the scope is nil),
+      # all the scopes in the organization are valid.
+      #
+      # Returns an array of Decidim::Scopes.
+      def signature_scope_candidates
+        signature_scope_candidates = [initiative.scope]
+        signature_scope_candidates += if initiative.scope.present?
+                                        initiative.scope.descendants
+                                      else
+                                        initiative.organization.scopes
+                                      end
+        signature_scope_candidates.uniq
+      end
+
+      # Any data that the developer would like to inject to the `metadata` field
+      # of a vote when it is created. Can be useful if some of the params the
+      # user sent with the signature form want to be persisted for future use.
+      #
+      # Returns a Hash.
+      def metadata
+        {}
+      end
+
+      # Params to be sent to the authorization handler. By default consists on
+      # the metadata hash including the signer user
+      def authorization_handler_params
+        params = metadata.merge(user:)
+        params = params.merge(tos_agreement:) if ephemeral_tos_pending?
+        params
+      end
+
+      # The signature_scope_id can be defined in the signature workflow to be
+      # used by the author scope feature
+      def signature_scope_id
+        scope.id
+      end
+
+      def authorization_handler
+        return if authorization_handler_form_class.blank?
+
+        @authorization_handler ||= authorization_handler_form_class.from_params(authorization_handler_params)
+      end
+
+      def signature_workflow_name
+        @signature_workflow_name ||= initiative&.type&.document_number_authorization_handler
+      end
+
+      def hash_id
+        return unless initiative && (unique_id || user)
+
+        @hash_id ||= Digest::SHA256.hexdigest(
+          [
+            initiative.id,
+            unique_id || user.id,
+            Rails.application.secret_key_base
+          ].compact.join("-")
+        )
+      end
+
+      # The attributes of the handler that should be exposed as form input when
+      # rendering the handler in a form.
+      #
+      # Returns an Array of Strings.
+      def form_attributes
+        attributes.except("id", "user", "initiative", "tos_agreement", "transfer_status").keys
+      end
+
+      # The String partial path so Rails can render the handler as a form. This
+      # is useful if you want to have a custom view to render the form instead of
+      # the default view.
+      #
+      # Example:
+      #
+      #   A handler named Decidim::CensusHandler would look for its partial in:
+      #   decidim/census/form
+      #
+      # Returns a String.
+      def to_partial_path
+        "decidim/initiatives/initiative_signatures/#{signature_workflow_name.sub(/_handler$/, "")}/form"
+      end
+
+      def self.requires_extra_attributes?
+        new.form_attributes.present?
+      end
+
+      def already_voted?
+        Decidim::InitiativesVote.exists?(author: user, initiative:)
+      end
+
+      private
+
+      # It is expected to validate that no other user has voted with the same
+      # unique_id and scope. The unique_id should be defined by the classes
+      # inherited from this taking a personal data attribute like a document
+      # number. If not defined the user id is used
+      def uniqueness
+        add_invalid_base_error if Decidim::InitiativesVote.exists?(scope:, hash_id:)
+      end
+
+      def valid_metadata
+        return if authorization_handler_errors.blank?
+
+        keys = attributes.except("tos_agreement").keys.map(&:to_sym) & authorization_handler_errors.attribute_names
+
+        return if keys.blank? && authorization_handler_errors[:base].blank?
+
+        # Promote errors
+        if promote_authorization_validation_errors
+          keys.each do |attribute|
+            errors.add(attribute, authorization_handler_errors[attribute])
+          end
+        end
+
+        add_invalid_base_error
+      end
+
+      def tos_agreement_acceptance
+        return if (error_message = authorization_handler_errors[:tos_agreement]).blank?
+
+        errors.add(:tos_agreement, error_message)
+      end
+
+      def valid_authorized_scopes
+        return if authorized_scopes.present?
+
+        add_invalid_base_error
+      end
+
+      def add_invalid_base_error
+        errors.delete(:base)
+        errors.add(:base, I18n.t("invalid_data", scope: "decidim.initiatives.initiative_signatures.fill_personal_data"))
+      end
+
+      def encryptor
+        @encryptor ||= DataEncryptor.new(secret: Decidim::Initiatives.signature_handler_encryption_secret)
+      end
+
+      def workflow_manifest
+        @workflow_manifest ||= Decidim::Initiatives::Signatures.find_workflow_manifest(signature_workflow_name) || Decidim::Initiatives::SignatureWorkflowManifest.new
+      end
+
+      def ephemeral_tos_pending?
+        return unless ephemeral? && user.ephemeral?
+
+        !user.tos_accepted?
+      end
+
+      def authorization_handler_errors
+        @authorization_handler_errors ||= if authorization_handler.blank?
+                                            ActiveModel::Errors.new(nil)
+                                          else
+                                            authorization_handler.validate
+                                            authorization_handler.errors
+                                          end
+      end
+    end
+  end
+end

data/app/services/decidim/initiatives/status_change_notifier.rb

@@ -21,7 +21,7 @@ module Decidim
       # * published, discarded: Initiative authors will be notified about the
       #   result of the technical validation process.
       #
-      # * rejected, accepted: Initiative's followers and authors will be
+      # * rejected, accepted: Initiative authors and committee members will be
       #   notified about the result of the initiative.
       def notify
         notify_initiative_creation if initiative.created?
@@ -58,12 +58,6 @@ module Decidim
       end
 
       def notify_support_result
-        initiative.followers.each do |follower|
-          Decidim::Initiatives::InitiativesMailer
-            .notify_state_change(initiative, follower)
-            .deliver_later
-        end
-
         initiative.committee_members.approved.each do |committee_member|
           Decidim::Initiatives::InitiativesMailer
             .notify_state_change(initiative, committee_member.user)

data/app/views/decidim/initiatives/admin/committee_requests/index.html.erb

@@ -20,12 +20,12 @@
   </div>
 </div>
 
-<div class="table-scroll mt-4">
+<div class="table-stacked mt-4">
   <table class="table-list">
     <thead>
     <tr>
       <th><%= t "user", scope: "activemodel.attributes.initiatives_committee_member" %></th>
-      <th></th>
+      <th><%= t "actions", scope: "decidim.admin.models.initiatives_committee_member.fields" %></th>
     </tr>
     </thead>
     <tbody>
@@ -38,17 +38,35 @@
 
       <% current_initiative.committee_members.each do |request| %>
         <tr data-id="<%= request.id %>">
-          <td>
+          <td data-label="<%= t "user", scope: "activemodel.attributes.initiatives_committee_member" %>">
             <%= link_to request.user.name, "mailto:#{request.user.email}" %>
           </td>
-          <td class="table-list__actions">
-            <% if allowed_to? :approve, :initiative_committee_member, request: request %>
-              <%= icon_link_to "check-line", approve_initiative_committee_request_path(current_initiative, request), t(".approve"), class: "action-icon--check" %>
-            <% end %>
-
-            <% if allowed_to? :revoke, :initiative_committee_member, request: request %>
-              <%= icon_link_to "delete-bin-line", revoke_initiative_committee_request_path(current_initiative, request), t(".revoke"), class: "action-icon--remove", method: :delete, data: { confirm: t(".confirm_revoke") } %>
-            <% end %>
+
+          <td class="table-list__actions" data-label="<%= t "actions", scope: "decidim.admin.models.initiatives_committee_member.fields" %>">
+            <button type="button" data-controller="dropdown" data-target="actions-initiative-committee-request-<%= request.id %>" aria-label="<%= t("decidim.admin.actions.actions_label", resource: request.user.name) %>">
+              <%= icon "more-fill", class: "text-secondary" %>
+            </button>
+
+            <div class="inline-block relative">
+              <ul id="actions-initiative-committee-request-<%= request.id %>" class="dropdown dropdown__action" aria-hidden="true">
+                <% if allowed_to? :approve, :initiative_committee_member, request: request %>
+                  <li class="dropdown__item">
+                    <%= link_to approve_initiative_committee_request_path(current_initiative, request), class: "dropdown__button" do %> <%= icon "check-line" %>
+                      <%= t(".approve") %>
+                    <% end %>
+                  </li>
+                <% end %>
+
+                <% if allowed_to? :revoke, :initiative_committee_member, request: request %>
+                  <li class="dropdown__item">
+                    <%= link_to revoke_initiative_committee_request_path(current_initiative, request), method: :delete, data: { confirm: t(".confirm_revoke") }, class: "dropdown__button" do %>
+                      <%= icon "delete-bin-line" %>
+                      <%= t(".revoke") %>
+                    <% end %>
+                  </li>
+                <% end %>
+              </ul>
+            </div>
           </td>
         </tr>
       <% end %>

data/app/views/decidim/initiatives/admin/exports/_dropdown.html.erb

@@ -1,25 +1,22 @@
-<span class="exports button button__sm button__secondary" data-toggle="<%= dropdown_id(collection_ids) %>">
-  <% if collection_ids.present? %>
-    <%= t("actions.export-selection", scope: "decidim.admin") %>
-  <% else %>
-    <%= t("actions.export", scope: "decidim.admin") %>
-  <% end %>
-  <%= icon "arrow-down-s-line", class: "dropdown-filter-icon" %>
-</span>
-<div class="dropdown-pane"
-     id="<%= dropdown_id(collection_ids) %>"
-     data-dropdown
-     data-position=bottom
-     data-alignment=right
-     data-auto-focus="true"
-     data-close-on-click="true">
-  <ul class="vertical menu add-components">
+<% menu_id = "top-#{SecureRandom.uuid}" %>
+<div class="relative">
+  <button class="button button__sm button__transparent-secondary" data-controller="dropdown" data-target="dropdown-exports-<%= menu_id %>-<%= dropdown_id(collection_ids) %>">
+    <% if collection_ids.present? %>
+      <%= t("actions.export-selection", scope: "decidim.admin") %>
+    <% else %>
+      <%= t("actions.export", scope: "decidim.admin") %>
+    <% end %>
+    <%= icon "arrow-down-s-line" %>
+    <%= icon "arrow-down-s-line" %>
+  </button>
+
+  <ul id="dropdown-exports-<%= menu_id %>-<%= dropdown_id(collection_ids) %>" class="dropdown dropdown__bottom" aria-hidden="true">
     <% %w(CSV JSON).each do |format| %>
-      <%= link_to export_initiatives_path(format:, collection_ids:) do %>
-        <li class="exports--format--<%= format.downcase %> exports--initiatives">
+      <li class="dropdown__item">
+        <%= link_to export_initiatives_path(format:, collection_ids:), class: "dropdown__button" do %>
           <%= t("decidim.admin.exports.export_as", name: t("decidim.initiatives.admin.exports.initiatives"), export_format: format.upcase) %>
-        </li>
-      <% end %>
+        <% end %>
+      </li>
     <% end %>
   </ul>
 </div>

data/app/views/decidim/initiatives/admin/initiatives/_form.html.erb

@@ -1,5 +1,5 @@
 <div class="form__wrapper">
-  <div class="card" data-component="accordion" id="accordion-title">
+  <div class="card" data-controller="accordion" id="accordion-title">
     <div class="card-divider">
       <button class="card-divider-button" data-open="true" data-controls="panel-title" type="button">
         <%= icon "arrow-right-s-line" %>
@@ -17,16 +17,10 @@
       <div class="row column">
         <%= form.translated :editor, :description, lines: 8, disabled: !allowed_to?(:update, :initiative, initiative: current_initiative), aria: { label: :description } %>
       </div>
-
-      <div class="row column">
-        <div class="columns">
-          <%= form.text_field :hashtag, disabled: !allowed_to?(:update, :initiative, initiative: current_initiative) %>
-        </div>
-      </div>
     </div>
   </div>
 
-  <div class="card" data-component="accordion" id="accordion-settings">
+  <div class="card" data-controller="accordion" id="accordion-settings">
     <div class="card-divider">
       <button class="card-divider-button" data-open="true" data-controls="panel-settings" type="button">
         <%= icon "arrow-right-s-line" %>
@@ -116,17 +110,17 @@
       <% end %>
     </div>
   </div>
-  <div class="card" data-component="accordion" id="accordion-homepage_highlighted_content_banner_title">
+  <div class="card" data-controller="accordion" id="accordion-homepage_attachments">
     <div class="card-divider">
-      <button class="card-divider-button" data-open="true" data-controls="panel-homepage_highlighted_content_banner_title" type="button">
+      <button class="card-divider-button" data-open="true" data-controls="panel-homepage_attachments" type="button">
         <%= icon "arrow-right-s-line" %>
-        <h2 class="card-title" id="homepage_highlighted_content_banner_title">
-          <%= t("homepage_highlighted_content_banner_title", scope: "decidim.admin.organization_appearance.form") %>
+        <h2 class="card-title" id="homepage_attachments">
+          <%= t(".attachments_title") %>
         </h2>
       </button>
     </div>
 
-    <div id="panel-homepage_highlighted_content_banner_title" class="card-section">
+    <div id="panel-homepage_attachments" class="card-section">
       <div class="row">
         <% if allowed_to?(:read, :attachment, initiative: current_participatory_space) %>
           <%= render partial: "initiative_attachments", locals: { current_initiative:, current_participatory_space: } %>

data/app/views/decidim/initiatives/admin/initiatives/_initiative_attachments.erb

@@ -31,10 +31,10 @@
     <% if allowed_to?(:update, :initiative, initiative: current_initiative) %>
       <%= aria_selected_link_to t(".edit"),
                                 decidim_admin_initiatives.initiative_attachments_path(current_participatory_space),
-                                class: "button button__sm button__secondary" %>
+                                class: "button button__sm button__transparent-secondary" %>
       <%= aria_selected_link_to t(".new"),
                                 decidim_admin_initiatives.new_initiative_attachment_path(current_participatory_space),
-                                class: "button button__sm button__secondary" %>
+                                class: "button button__sm button__transparent-secondary" %>
     <% else %>
       <%= link_to t(".edit"), "#", class: "button button__sm button__secondary muted disabled" %>
       <%= link_to t(".new"), "#", class: "button button__sm button__secondary muted disabled" %>

data/app/views/decidim/initiatives/admin/initiatives/index.html.erb

@@ -15,7 +15,7 @@
     <% link = link_to(t("button", scope:"decidim.initiatives.admin.index.initiatives_types"), new_initiatives_type_path, class: "button button__sm button__secondary mt-4") %>
     <%= cell("decidim/announcement", t("alert_html", scope:"decidim.initiatives.admin.index.initiatives_types", link:), callout_class: "alert") %>
   <% else %>
-    <div class="table-scroll">
+    <div class="table-stacked">
       <table class="table-list">
         <thead>
         <tr>
@@ -31,8 +31,8 @@
         <tbody>
         <% @initiatives.each do |initiative| %>
           <tr>
-            <td><%= initiative.id %></td>
-            <td class="!text-left">
+            <td data-label="<%= t("models.initiatives.fields.id", scope: "decidim.admin") %>"><%= initiative.id %></td>
+            <td class="!text-left" data-label="<%= t("models.initiatives.fields.title", scope: "decidim.admin") %>">
               <% if allowed_to? :edit, :initiative, initiative: initiative %>
                 <%= link_to translated_attribute(initiative.title),
                             decidim_admin_initiatives.edit_initiative_path(initiative.to_param) %>
@@ -40,56 +40,85 @@
                 <%= translated_attribute(initiative.title) %>
               <% end %>
             </td>
-            <td><%= humanize_admin_state initiative.state %></td>
-            <td><%= initiative.supports_count %>/<%= initiative.scoped_type.supports_required %></td>
-            <td class="table-list__date"><%= l initiative.created_at, format: :short %></td>
-            <td class="table-list__date"><%= initiative.published_at? ? l(initiative.published_at, format: :short) : "" %></td>
-            <td class="table-list__actions">
+            <td data-label="<%= t("models.initiatives.fields.state", scope: "decidim.admin") %>"><%= humanize_admin_state initiative.state %></td>
+            <td data-label="<%= t("models.initiatives.fields.supports_count", scope: "decidim.admin") %>"><%= initiative.supports_count %>/<%= initiative.scoped_type.supports_required %></td>
+            <td class="table-list__date" data-label="<%= t("models.initiatives.fields.created_at", scope: "decidim.admin") %>"><%= l initiative.created_at, format: :short %></td>
+            <td class="table-list__date" data-label="<%= t("models.initiatives.fields.published_at", scope: "decidim.admin") %>"><%= initiative.published_at? ? l(initiative.published_at, format: :short) : "" %></td>
+            <td class="table-list__actions" data-label="<%= t(".actions_title") %>">
+              <button type="button" data-controller="dropdown" data-target="actions-initiative-<%= initiative.id %>" aria-label="<%= t("decidim.admin.actions.actions_label", resource: translated_attribute(initiative.title)) %>">
+                <%= icon "more-fill", class: "text-secondary" %>
+              </button>
 
-              <% if allowed_to? :read, :share_tokens, current_participatory_space: initiative %>
-                <%= icon_link_to "share-line", decidim_admin_initiatives.initiative_share_tokens_path(initiative), t("actions.share_tokens", scope: "decidim.admin"), class: "action-icon--new" %>
-              <% else %>
-                <span class="action-space icon"></span>
-              <% end %>
+              <div class="inline-block relative">
+                <ul id="actions-initiative-<%= initiative.id %>" class="dropdown dropdown__action" aria-hidden="true">
+                  <% if allowed_to? :edit, :initiative, initiative: initiative %>
+                    <li class="dropdown__item">
+                      <%= link_to decidim_admin_initiatives.edit_initiative_path(initiative.to_param), class: "dropdown__button" do %>
+                        <%= icon "pencil-line" %>
+                        <%= t("actions.edit", scope: "decidim.admin") %>
+                      <% end %>
+                    </li>
+                  <% end %>
 
-              <% if allowed_to? :edit, :initiative, initiative: initiative %>
-                <%= icon_link_to "pencil-line",
-                                 decidim_admin_initiatives.edit_initiative_path(initiative.to_param),
-                                 t("actions.configure", scope: "decidim.admin"),
-                                 class: "action-icon--edit" %>
-              <% else %>
-                <span class="action-space icon"></span>
-              <% end %>
+                  <hr>
 
-              <% if allowed_to?(:answer, :initiative, initiative: initiative) %>
-                <%= icon_link_to "chat-1-line", edit_initiative_answer_path(initiative.slug), t("actions.answer", scope: "decidim.initiatives"), class: "action-icon action-icon--answer" %>
-              <% else %>
-                <%= icon "chat-1-line", scope: "decidim.admin", class: "action-icon action-icon--disabled", role: "img", "aria-hidden": true %>
-              <% end %>
+                  <% if allowed_to?(:answer, :initiative, initiative: initiative) %>
+                    <li class="dropdown__item">
+                      <%= link_to edit_initiative_answer_path(initiative.slug), class: "dropdown__button" do %>
+                        <%= icon "chat-1-line" %>
+                        <%= t("actions.answer", scope: "decidim.initiatives") %>
+                      <% end %>
+                    </li>
+                  <% else %>
+                    <li class="dropdown__item">
+                      <div class="dropdown__button-disabled">
+                        <%= with_tooltip(t("actions.cannot_answer", scope: "decidim.admin")) do %>
+                          <%= icon "chat-1-line", class: "text-gray" %>
+                          <span><%= t("actions.answer", scope: "decidim.initiatives") %></span>
+                        <% end %>
+                      </div>
+                    </li>
+                  <% end %>
 
-              <% if allowed_to? :print, :initiative, initiative: initiative %>
-                <%= icon_link_to "printer-line",
-                                 decidim_initiatives.print_initiative_path(initiative),
-                                 t(".print"),
-                                 class: "action-icon--print",
-                                 target: "_blank",
-                                 data: { "external-link": false } %>
-              <% else %>
-                <span class="action-space icon"></span>
-              <% end %>
+                  <% if allowed_to? :print, :initiative, initiative: initiative %>
+                    <li class="dropdown__item">
+                      <%= link_to decidim_initiatives.print_initiative_path(initiative), class: "dropdown__button", target: "_blank", data: { "external-link": false } do %>
+                        <%= icon "printer-line" %>
+                        <%= t(".print") %>
+                      <% end %>
+                    </li>
+                  <% end %>
 
-              <% if allowed_to? :preview, :initiative, initiative: initiative %>
-                <%= icon_link_to "eye-line",
-                                 decidim_initiatives.initiative_path(initiative.to_param),
-                                 t(".preview"),
-                                 class: "action-icon--preview",
-                                 target: "_blank",
-                                 data: { "external-link": false } %>
-              <% else %>
-                <span class="action-space icon"></span>
-              <% end %>
+                  <hr>
+
+                  <% if allowed_to? :preview, :initiative, initiative: initiative %>
+                    <li class="dropdown__item">
+                      <%= link_to decidim_initiatives.initiative_path(initiative.to_param), class: "dropdown__button", target: "_blank", data: { "external-link": false } do %>
+                        <%= icon "eye-line" %>
+                        <%= t(".preview") %>
+                      <% end %>
+                    </li>
+                  <% end %>
+
+                  <% if allowed_to? :read, :share_token, current_participatory_space: initiative %>
+                    <li class="dropdown__item">
+                      <%= link_to decidim_admin_initiatives.initiative_share_tokens_path(initiative), class: "dropdown__button" do %>
+                        <%= icon "share-line" %>
+                        <%= t("actions.share_tokens", scope: "decidim.admin") %>
+                      <% end %>
+                    </li>
+
+                    <hr>
+                  <% end %>
+
+                  <% if (link = free_resource_permissions_link(initiative)) %>
+                    <li class="dropdown__item">
+                      <%= link %>
+                    </li>
+                  <% end %>
+                </ul>
+              </div>
 
-              <%= free_resource_permissions_link(initiative) || content_tag(:span, nil, class: "action-space icon") %>
             </td>
           </tr>
         <% end %>