decidim-kids 0.1.0

data/app/permissions/concerns/decidim/kids/admin/permissions_override.rb

@@ -0,0 +1,38 @@
+# frozen_string_literal: true
+
+module Decidim
+  module Kids
+    module Admin
+      module PermissionsOverride
+        extend ActiveSupport::Concern
+
+        included do
+          def static_page_action?
+            # For the sake of override economics, here we are reusing this method to also check
+            # if the admin is trying to access the minors participatory spaces configuration
+            return space_minors_configuration? if permission_action.subject == :space_minors_configuration
+
+            return unless permission_action.subject == :static_page
+
+            static_page = context.fetch(:static_page, nil)
+
+            case permission_action.action
+            when :update
+              static_page.present?
+            when :update_slug, :destroy
+              static_page.present? && !StaticPage.default?(static_page.slug) && !StaticPage.minors_default?(static_page.slug, user.organization)
+            when :update_notable_changes
+              static_page.slug == "terms-and-conditions" && static_page.persisted?
+            else
+              true
+            end
+          end
+
+          def space_minors_configuration?
+            organization.minors_participation_enabled? && user.admin?
+          end
+        end
+      end
+    end
+  end
+end

data/app/permissions/decidim/kids/permissions.rb

@@ -0,0 +1,100 @@
+# frozen_string_literal: true
+
+module Decidim
+  module Kids
+    class Permissions < Decidim::DefaultPermissions
+      def permissions
+        # return Decidim::Kids::Admin::Permissions.new(user, permission_action, context).permissions if permission_action.scope == :admin
+        return permission_action if permission_action.scope == :admin
+        return permission_action unless user
+
+        minor_accounts_action?
+        authorizations_action?
+        conversation_action?
+
+        permission_action
+      end
+
+      def minor_accounts_action?
+        return unless permission_action.subject == :minor_accounts
+
+        if !user.organization.minors_participation_enabled? || user.minor? || !user.confirmed?
+          disallow!
+        else
+          case permission_action.action
+          when :index
+            allow!
+          when :create
+            can_create_minor_account?
+          when :edit
+            can_edit_minor_account?
+          when :delete
+            can_destroy_minor_account?
+          when :impersonate
+            can_impersonate_minor_account?
+          end
+        end
+      end
+
+      def authorizations_action?
+        return unless permission_action.subject == :authorizations
+
+        case permission_action.action
+        when :all
+          return allow! unless user.organization.minors_participation_enabled?
+
+          toggle_allow(!user.minor?)
+        end
+      end
+
+      def conversation_action?
+        return unless permission_action.subject == :conversation
+        return unless user.organization.minors_participation_enabled?
+        return unless [:create, :update].include?(permission_action.action)
+
+        conversation = context.fetch(:conversation)
+        interlocutor = context.fetch(:interlocutor, user)
+        toggle_allow(conversation.participants.all? { |p| minor_conversation_participant?(interlocutor, p) })
+      end
+
+      private
+
+      def minor_user
+        @minor_user ||= context.fetch(:minor_user, nil)
+      end
+
+      def can_create_minor_account?
+        toggle_allow(user.minors.count < Decidim::Kids.maximum_minor_accounts)
+      end
+
+      def can_edit_minor_account?
+        toggle_allow(user.minors.include?(minor_user))
+      end
+
+      def can_destroy_minor_account?
+        can_edit_minor_account?
+      end
+
+      def minor_conversation_participant?(interlocutor, participant)
+        case participant.class.to_s
+        when "Decidim::User"
+          interlocutor.minor? ? participant.minor? : !participant.minor?
+        when "Decidim::UserGroup"
+          participant.users.all? { |p| minor_conversation_participant?(interlocutor, p) }
+        else
+          # :nocov:
+          raise NotImplementedError
+          # :nocov:
+        end
+      end
+
+      def can_impersonate_minor_account?
+        is_allowed = Decidim::Kids::ImpersonationMinorLog.active.where(tutor: user).empty? &&
+                     Decidim::Kids.allow_impersonation &&
+                     minor_user.sign_in_count.positive?
+
+        toggle_allow(is_allowed)
+      end
+    end
+  end
+end

data/app/views/decidim/kids/admin/minors_space/_form.html.erb

@@ -0,0 +1,53 @@
+<div class="row column">
+  <%= form.select :access_type, access_types, prompt: "" %>
+</div>
+<div id="minors-extra" class="<%= "hide" unless form.object.access_type == "minors" %>">
+  <div class="row column">
+    <%= form.select :authorization, authorization_handlers, include_blank: true %>
+  </div>
+  <div class="row column">
+    <%= form.number_field :max_age %>
+  </div>
+</div>
+
+<% authorization_handlers.each do |desc, handler| %>
+  <div class="<%= "hide" if handler != form.object.authorization %> callout warning check-form-handlers" id="check-form-<%= handler %>">
+    <p>
+    <% if current_organization.available_authorization_handlers.include?(handler.to_s) %>
+      <strong class="text-success">&#9786;</strong> <%= t("form.handlers.available", scope: "decidim.kids.admin.minors_space", handler: desc) %>
+    <% else %>
+      <strong class="text-alert">&#9785;</strong> <%= t("form.handlers.unavailable", scope: "decidim.kids.admin.minors_space", handler: desc) %>
+    <% end %>
+    </p>
+    <p>
+    <% if error = authorization_method_error(handler) %>
+      <strong class="text-alert">&#9785;</strong> <%= t("form.handlers.errors.#{error}", scope: "decidim.kids.admin.minors_space") %>
+    <% else %>
+      <strong class="text-success">&#9786;</strong> <%= t("form.handlers.errors.ok", scope: "decidim.kids.admin.minors_space") %>
+    <% end %>
+    </p>
+  </div>
+<% end %>
+
+<script type="text/javascript">
+  var sel = document.getElementById("minors_space_config_access_type");
+  var auth = document.getElementById("minors_space_config_authorization");
+  sel.addEventListener("change", function () {
+    var minorsExtra = document.getElementById("minors-extra");
+    if (sel.value === "minors") {
+      minorsExtra.classList.remove("hide");
+    } else {
+      minorsExtra.classList.add("hide");
+    }
+  });
+  auth.addEventListener("change", function () {
+    var checkFormHandlers = document.getElementsByClassName("check-form-handlers");
+    var checkForm = document.getElementById("check-form-" + auth.value);
+    Array.from(checkFormHandlers).forEach(function (el) {
+      el.classList.add("hide");
+    });
+    if (checkForm) {
+      checkForm.classList.remove("hide");
+    }
+  });
+</script>

data/app/views/decidim/kids/admin/minors_space/index.html.erb

@@ -0,0 +1,18 @@
+<div class="card" id="minors_space">
+  <div class="card-divider">
+    <h2 class='card-title'>
+      <%= t("minors_space.index.title", scope: "decidim.kids.admin") %>
+    </h2>
+  </div>
+
+  <div class="card-section">
+    <p><%= t("minors_space.index.description_html", scope: "decidim.kids.admin") %></p>
+
+    <%= decidim_form_for(@form, url: minors_space_index_path, method: :post, html: { class: "form" }) do |form| %>
+      <%= render partial: "form", locals: { form: form } %>
+      <div class="button--double form-general-submit">
+        <%= form.submit t("minors_space.index.save", scope: "decidim.kids.admin"), class: "button", data: { disable: true } %>
+      </div>
+    <% end %>
+  </div>
+</div>

data/app/views/decidim/kids/authorizations/new.html.erb

@@ -0,0 +1,29 @@
+<% add_decidim_page_title(t("menu", scope: "decidim.kids.user")) %>
+<% content_for(:subtitle) { t("menu", scope: "decidim.kids.user") } %>
+
+<div class="callout secondary">
+  <%= t(".authorizing_html", minor: minor_user.minor_data.name) %>
+  <%= link_to "cancel", :back, class: "button secondary small float-right" %>
+</div>
+
+<div><%= t(".help_text") %></div>
+
+<div class="columns large-8 large-centered text-center page-title">
+  <h2><%= t("decidim.verifications.authorizations.new.authorize_with", authorizer: t("#{handler.handler_name}.name", scope: "decidim.authorization_handlers")) %></h2>
+</div>
+
+<div class="card">
+  <div class="card__content">
+    <%= authorization_form_for(handler, url: authorizations_path(redirect_url: redirect_url)) do |form| %>
+      <% if lookup_context.exists?(handler.to_partial_path, [], true) %>
+        <%= render partial: handler.to_partial_path, locals: { handler: handler, form: form } %>
+      <% else %>
+        <%= form.all_fields %>
+      <% end %>
+
+      <div class="actions">
+        <%= form.submit t("decidim.verifications.authorizations.new.authorize"), class: "button expanded" %>
+      </div>
+    <% end %>
+  </div>
+</div>

data/app/views/decidim/kids/devise/registrations/_minors.html.erb

@@ -0,0 +1,8 @@
+<% if current_organization.minors_participation_enabled? %>
+  <div class="card" id="card__minors">
+    <div class="card__content">
+      <h3><%= t("decidim.devise.registrations.new.minors_title") %></h3>
+      <p><%= raw t("decidim.devise.registrations.new.minors_description", maximum_minor_age: current_organization.maximum_minor_age, link: link_to(t("decidim.devise.registrations.new.create_an_account"), page_path("minors"), target: "_blank")) %></p>
+    </div>
+  </div>
+<% end %>

data/app/views/decidim/kids/kids_mailer/promote_minor_account.html.erb

@@ -0,0 +1,3 @@
+<p class="email-greeting">
+  <%= t("body_1", scope: "decidim.kids.minor_notifications_mailer.promote", recipient: @user.name) %>
+</p>

data/app/views/decidim/kids/minor_impersonations/_impersonation_minor_button.html.erb

@@ -0,0 +1,13 @@
+<br>
+<div class="impersonation-warning__action">
+  <% unless impersonation_log_minor.blank? %>
+    <%= button_to t("impersonations.close_session.button", scope: "decidim.kids"),
+                  decidim_kids.close_session_user_minor_minor_impersonations_path(current_user),
+                  method: :post,
+                  class: "button tiny impersonation-bar__button", data: { disable: true } %>
+  <% else %>
+    <%= button_to t("impersonations.close_session.button", scope: "decidim.kids"),
+                  decidim_admin.close_session_impersonatable_user_impersonations_path(current_user),
+                  class: "button tiny impersonation-bar__button", data: { disable: true } %>
+  <% end %>
+</div>

data/app/views/decidim/kids/minor_impersonations/new.html.erb

@@ -0,0 +1,19 @@
+<% content_for(:subtitle) { t("menu", scope: "decidim.kids.user") } %>
+<div class="row">
+  <h4 class="section flex-center"><%= t("title", scope: "decidim.kids.impersonations") %></h4>
+  <div class="columns large-6 medium-10 medium-centered">
+    <div class="card">
+      <div class="card__content">
+        <%= decidim_form_for(@form, url: decidim_kids.user_minor_minor_impersonations_path(user_minor_id: minor_user.id), method: :post) do |form| %>
+          <%= form_required_explanation %>
+          <div class="field">
+            <%= form.password_field :password %>
+          </div>
+          <div class="actions">
+            <%= form.submit t("impersonate_button", scope: "decidim.kids.impersonations"), class: "button expanded mt-s mb-none" %>
+          </div>
+        <% end %>
+      </div>
+    </div>
+  </div>
+</div>

data/app/views/decidim/kids/system/organizations/_minors_form.html.erb

@@ -0,0 +1,28 @@
+<div class="fieldset">
+  <div class="field">
+    <h5><%= t "minors_participation", scope: "decidim.kids" %></h5>
+    <%= f.check_box :enable_minors_participation %>
+  </div>
+
+  <div class="field">
+    <%= f.number_field :minimum_minor_age %>
+  </div>
+
+  <div class="field">
+    <%= f.number_field :maximum_minor_age %>
+  </div>
+
+  <div class="field">
+    <%= f.number_field :maximum_minor_accounts %>
+  </div>
+
+  <div class="field">
+    <%= f.select :minors_authorization, Decidim::Kids.valid_minor_workflows.pluck(:description, :name) %>
+    <p class="help-text"><%= t ".minors_authorization_help" %></p>
+  </div>
+
+  <div class="field">
+    <%= f.select :tutors_authorization, Decidim::Kids.valid_tutor_workflows.pluck(:description, :name) %>
+    <p class="help-text"><%= t ".tutors_authorization_help" %></p>
+  </div>
+</div>

data/app/views/decidim/kids/user_minors/_form_fields.html.erb

@@ -0,0 +1,12 @@
+<div class="field">
+  <%= form.text_field :name %>
+</div>
+
+<div class="field">
+  <%= form.date_field :birthday %>
+</div>
+
+<div class="field">
+  <%= form.email_field :email %>
+  <span class="help-text"><%= t("new.help_text_email", scope: "decidim.kids.user_minors") %></span>
+</div>

data/app/views/decidim/kids/user_minors/_minor_tr.html.erb

@@ -0,0 +1,58 @@
+<tr>
+  <td>
+    <%= link_to user.minor_data.name, decidim_kids.new_user_minor_authorization_path(user_minor_id: user.id) %>
+  </td>
+
+  <td>
+    <%= user.minor_age %>
+  </td>
+
+  <td>
+    <%= confirm_email_status(user) %>
+    <% if !minor_confirmed?(user) && minor_authorized?(user) %>
+      <%= icon_link_to "action-redo",
+                       resend_invitation_to_minor_user_minor_path(user.id),
+                       t("resend_email", scope: "decidim.kids.user_minors.index"),
+                       method: :post,
+                       class: "ml-xs" %>
+    <% end %>
+  </td>
+
+  <td>
+    <%= verification_minor_status(user) %>
+  </td>
+
+  <td>
+    <% if user.last_sign_in_at %>
+      <%= l user.last_sign_in_at, format: :short %>
+    <% elsif !minor_authorized?(user) %>
+      <span class="label warning"><%= t("needs_verification", scope: "decidim.kids.user_minors.index") %></span>
+    <% end %>
+  </td>
+
+  <td class="table-list__actions">
+    <%= icon_link_to "book", decidim.profile_activity_path(nickname: user.nickname), t("activity", scope: "decidim.kids.user_minors.index"), class: "action-icon" %>
+    <span class="action-space icon"></span>
+    <% if allowed_to? :edit, :minor_accounts, minor_user: user %>
+      <%= icon_link_to "pencil", decidim_kids.edit_user_minor_path(user.id),
+                       t("edit", scope: "decidim.kids.user_minors.index"), class: "action-icon" %>
+    <% end %>
+
+    <span class="action-space icon"></span>
+
+    <% if allowed_to? :delete, :minor_accounts, minor_user: user %>
+      <%= icon_link_to "circle-x", decidim_kids.user_minor_path(user.id),
+                       t("destroy_button", scope: "decidim.kids.user_minors.index"),
+                       method: :delete,
+                       data: { confirm: t("confirm", scope: "decidim.kids.user_minors.index") },
+                       class: "action-icon action-icon--remove" %>
+    <% end %>
+    <span class="action-space icon"></span>
+    <% if allowed_to? :impersonate, :minor_accounts, minor_user: user %>
+      <%= icon_link_to "account-login",
+                       decidim_kids.new_user_minor_minor_impersonation_path(user),
+                       t("impersonations.impersonate_button", scope: "decidim.kids"),
+                       class: "action-icon action-icon--impersonate" %>
+    <% end %>
+  </td>
+</tr>

data/app/views/decidim/kids/user_minors/_tos_field.html.erb

@@ -0,0 +1,3 @@
+<div class="row column tos-agreement">
+  <%= form.check_box :tos_agreement, label: minor_tos, id: "minor_tos_agreement" %>
+</div>

data/app/views/decidim/kids/user_minors/edit.html.erb

@@ -0,0 +1,19 @@
+<% content_for(:subtitle) { t("menu", scope: "decidim.kids.user") } %>
+<div class="row">
+  <h3 class="section flex-center"><%= t(".title") %></h3>
+  <div class="columns large-6 medium-10 medium-centered">
+    <div class="card">
+      <div class="card__content">
+        <%= decidim_form_for(@form, url: user_minor_path(minor_user)) do |form| %>
+          <%= form_required_explanation %>
+
+          <%= render partial: "form_fields", locals: { form: form } %>
+
+          <div class="actions">
+            <%= form.submit t(".edit_button"), class: "button expanded mt-s mb-none", data: { disable: true } %>
+          </div>
+        <% end %>
+      </div>
+    </div>
+  </div>
+</div>

data/app/views/decidim/kids/user_minors/index.html.erb

@@ -0,0 +1,30 @@
+<% add_decidim_page_title(t("menu", scope: "decidim.kids.user")) %>
+<% content_for(:subtitle) { t("menu", scope: "decidim.kids.user") } %>
+
+<h2 class="card-title flex--sbc">
+  <%= t(".title") %>
+</h2>
+<p class="help-text"><%= t(".description") %></p>
+
+<table class="table-list">
+  <thead>
+  <tr>
+    <th><%= t(".name") %></th>
+    <th><%= t(".age") %></th>
+    <th><%= t(".confirmed") %></th>
+    <th><%= t(".verified") %></th>
+    <th><%= t(".last_login") %></th>
+    <th><%= t(".actions") %></th>
+  </tr>
+  </thead>
+  <tbody>
+  <% minors.each do |user| %>
+    <%= render partial: "minor_tr", locals: { user: user } %>
+  <% end %>
+  </tbody>
+</table>
+
+<%= button_to_add_minor_account %>
+<% unless can_add_minor_account? %>
+  <p><%= t(".note") %></p>
+<% end %>

data/app/views/decidim/kids/user_minors/new.html.erb

@@ -0,0 +1,22 @@
+<% content_for(:subtitle) { t("menu", scope: "decidim.kids.user") } %>
+<div class="row">
+  <h3 class="flex-center"><%= t(".title") %></h3>
+  <p class="flex-center mb-s"><%= t(".subtitle") %></p>
+  <div class="columns large-6 medium-10 medium-centered">
+    <div class="card">
+      <div class="card__content">
+        <%= decidim_form_for(@form, url: user_minors_path) do |form| %>
+          <%= form_required_explanation %>
+
+          <%= render partial: "form_fields", locals: { form: form } %>
+
+          <%= render partial: "tos_field", locals: { form: form } %>
+
+          <div class="actions">
+            <%= form.submit t(".create"), class: "button expanded mt-s mb-none", data: { disable: true } %>
+          </div>
+        <% end %>
+      </div>
+    </div>
+  </div>
+</div>

data/app/views/decidim/kids/user_minors/unverified.html.erb

@@ -0,0 +1,10 @@
+<% add_decidim_page_title(t("menu", scope: "decidim.kids.user")) %>
+<% content_for(:subtitle) { t("menu", scope: "decidim.kids.user") } %>
+
+<div class="callout warning"><%= t ".needs_to_be_verified", method: tutor_adapter.description %></div>
+
+<div class="row">
+  <div class="column end">
+    <%= link_to t(".authorize"), tutor_adapter.root_path(redirect_url: decidim_kids.user_minors_path), class: "button" %>
+  </div>
+</div>

data/app/views/devise/mailer/invite_minor.html.erb

@@ -0,0 +1,15 @@
+<p class="email-greeting">
+  <%= raw t("greeting", scope: "decidim.kids.minor_notifications_mailer.confirmation", recipient: @user.email) %>
+</p>
+
+<p class="email-instructions">
+  <%= t("body", scope: "decidim.kids.minor_notifications_mailer.confirmation") %>
+</p>
+
+<p class="email-button email-button__cta">
+  <%= link_to t("confirm", scope: "decidim.kids.minor_notifications_mailer.confirmation"),
+              accept_invitation_url(@resource,
+                                    invitation_token: @token,
+                                    invite_redirect: decidim.root_path,
+                                    host: @resource.organization.host) %>
+</p>

data/config/assets.rb

@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+
+base_path = File.expand_path("..", __dir__)
+
+Decidim::Webpacker.register_path("#{base_path}/app/packs")
+Decidim::Webpacker.register_entrypoints(
+  decidim_kids: "#{base_path}/app/packs/entrypoints/decidim_kids.js"
+)
+Decidim::Webpacker.register_stylesheet_import("stylesheets/decidim/kids/kids")

data/config/i18n-tasks.yml

@@ -0,0 +1,10 @@
+---
+
+base_locale: en
+locales: [en]
+
+ignore_unused:
+  - "decidim.components.kids.name"
+
+ignore_missing:
+  - decidim.verifications.authorizations.*