isaca-rails 0.2.0

data/app/helpers/isaca/rails/application_helper.rb

@@ -0,0 +1,48 @@
+module Isaca::Rails::ApplicationHelper
+  # Injects the isaca privacy policy and cookie consent notices
+  def isaca_consent_javascript
+    javascript_include_tag 'https://www.isaca.org/info/shared/js/isaca-consent.min.js'
+  end
+
+  # Presents beautiful flash notices if flash notices exist
+  def isaca_flash_messages
+    content_tag :div do
+      flash.collect do |name, message|
+        concat(content_tag :div, message, class: "ir-flash ir-flash-#{name.underscore}")
+      end
+    end
+  end
+
+  # Presents beautiful error messages for form objects
+  def isaca_form_errors(model)
+    if model.errors.size > 1
+      message = 'The following errors occurred:'
+    else
+      message = 'The following error occurred:'
+    end
+
+    concat(content_tag(:p, message))
+
+    content_tag :div, class: 'ir-flash ir-flash-alert' do
+      error_list = content_tag (:ul) do
+        model.errors.full_messages.collect do |message|
+          concat(content_tag :li, message)
+        end
+      end
+
+      concat(error_list)
+    end
+  end
+
+  # Provides a link to reset user credentials
+  def link_to_forgot_isaca_credentials
+    link_to 'Forgot password and/or username?',
+            'https://www.isaca.org/ecommerce/Pages/Forgot-Password.aspx', target: :blank
+  end
+
+  # Provides a link to create an ISACA account
+  def link_to_create_isaca_account
+    link_to 'Create ISACA account',
+            'https://www.isaca.org/ecommerce/Pages/CreateAccountLite.aspx?pf=1', target: :blank
+  end
+end

data/app/helpers/isaca/rails/claims_helper.rb

@@ -0,0 +1,13 @@
+module Isaca
+  module Rails
+    module ClaimsHelper
+      def claim_checkbox(form, administrator, privilege)
+        content_tag(:div, class: 'form-group') do
+          concat form.check_box(privilege, {checked: user_has_privilege?(administrator, privilege),
+                                            id: "claims_#{privilege}_#{administrator.id}"})
+          concat form.label(privilege, privilege, value: administrator.id)
+        end
+      end
+    end
+  end
+end

data/app/models/session/sign_in/form_object.rb

@@ -0,0 +1,28 @@
+module Session
+  module SignIn
+    # Class used as to easily integrate a session form with some basic validation
+    class FormObject
+      include ActiveModel::Model
+
+      attr_accessor :username, :password
+      validates_presence_of :username, :password
+
+      # This method will attempt to generate a session with the ISACA SSO service
+      #
+      # @raise [ISACA::ConnectionError] Occurs when a connection could not be established. This could be due to IP whitelisting or an invalid endpoint URL
+      #
+      # @return [Isaca::Model::AuthenticateUser]
+      def sign_in
+        Isaca::Request::AuthenticateUser.get(username, password) if valid?
+      end
+
+      # Defining this method allows us to use some ActiveModel patterns. For example, forms will be identified
+      # as sign_in instead of session_sign_in_form_object.
+      #
+      # @return [ActiveModel::Name]
+      def self.model_name
+        ActiveModel::Name.new(self, nil, 'SignIn')
+      end
+    end
+  end
+end

data/app/models/user_consent/agreement/form_object.rb

@@ -0,0 +1,33 @@
+module UserConsent
+  module Agreement
+    # Form object used for handling user consent
+    class FormObject
+      include ActiveModel::Model
+
+      attr_accessor :privacy_policy, :marketing_policy
+      validates_acceptance_of :privacy_policy, allow_nil: false
+      validates_presence_of :marketing_policy
+
+
+      # Method used to report user consent of the privacy policy and marketing
+      #
+      # @param options [Hash] Optional. If not provided, marketing consent will default to NO [0].
+      #
+      # == Options
+      # [marketing] Consent for marketing. Acceptable values are 0 [for NO] and 1 [for YES].
+      #
+      # @return [Boolean] Whether or not the consent was successfully reported to ISACA
+      def report_consent(imis_id, options={})
+        Isaca::Request::ReportConsent.get(imis_id, options).success? if valid?
+      end
+
+      # Defining this method allows us to use some ActiveModel patterns. For example, forms will be identified
+      # as sign_in instead of session_sign_in_form_object.
+      #
+      # @return [ActiveModel::Name]
+      def self.model_name
+        ActiveModel::Name.new(self, nil, 'Agreement')
+      end
+    end
+  end
+end

data/app/views/isaca/rails/platform/administrators/_administrator.html.erb

@@ -0,0 +1,6 @@
+<li>
+  <%= administrator.first_name %> <%= administrator.last_name %>
+  <%= link_to 'Show', administrator_path(administrator) %> |
+  <%= link_to 'Edit Claims', edit_administrator_path(administrator) %> |
+  <%= link_to 'Remove Administrator Privileges', administrator_path(administrator), method: :delete, data: {confirm: t('isaca.rails.administrators.delete_confirmation')} %>
+</li>

data/app/views/isaca/rails/platform/administrators/_claims_form.html.erb

@@ -0,0 +1,9 @@
+<%= form_for :claims, url: administrator_claims_path(@administrator) do |f| %>
+  <% ::Claim.privileges.keys.collect(&:to_sym).each do |privilege| %>
+    <%= claim_checkbox(f, @administrator, privilege) %>
+  <% end %>
+
+  <div class="form-group">
+    <%= f.submit %>
+  </div>
+<% end %>

data/app/views/isaca/rails/platform/administrators/edit.html.erb

@@ -0,0 +1,9 @@
+<div class="ir-container">
+  <%= image_tag 'isaca/rails/isaca-logo.png', height: 50 %>
+  <h1><%= @administrator.first_name %> <%= @administrator.last_name %></h1>
+
+  <div class="ir-container">
+    <h2>Edit Administrator Claims</h2>
+    <%= render 'isaca/rails/platform/administrators/claims_form' %>
+  </div>
+</div>

data/app/views/isaca/rails/platform/administrators/index.html.erb

@@ -0,0 +1,15 @@
+<div class="ir-container">
+  <%= image_tag 'isaca/rails/isaca-logo.png', height: 50 %>
+  <h1><%= Rails.application.class.parent_name %> Administrators</h1>
+
+  <div class="ir-container">
+    <%= link_to 'Add an Administrator', new_administrator_path %>
+    <% if @administrators.any? %>
+      <ul>
+        <%= render partial: 'isaca/rails/platform/administrators/administrator', collection: @administrators %>
+      </ul>
+    <% else %>
+      <p>No administrators exist for this application.</p>
+    <% end %>
+  </div>
+</div>

data/app/views/isaca/rails/platform/administrators/new.html.erb

@@ -0,0 +1,17 @@
+<div class="ir-container">
+  <%= image_tag 'isaca/rails/isaca-logo.png', height: 50 %>
+  <h1><%= Rails.application.class.parent_name %> Administrators</h1>
+
+  <div class="ir-container">
+    <h2>Create Administrator</h2>
+
+    <%= form_for :administrator, url: administrators_path do |f| %>
+      <div class="form-group">
+        <%= f.label :email %>
+        <%= f.text_field :email, autofocus: true  %>
+      </div>
+
+      <%= f.submit 'Create Administrator' %>
+    <% end %>
+  </div>
+</div>

data/app/views/isaca/rails/platform/administrators/show.html.erb

@@ -0,0 +1,29 @@
+<div class="ir-container">
+  <h1><%= @administrator.first_name %> <%= @administrator.last_name %></h1>
+  <p>
+    <strong>Actions: </strong>
+    <%= link_to 'List All Administrators', administrators_path %> |
+    <% if user_has_privilege?(current_isaca_user, :write_claims) %>
+      <%= link_to 'Edit Claims', edit_administrator_path(@administrator) %> |
+    <% end %>
+    <%= link_to 'Remove Administrator Privileges', administrator_path(@administrator), method: :delete, data: {confirm: t('isaca.rails.administrators.delete_confirmation')} %>
+  </p>
+  <p><strong>IMIS ID:</strong> <%= @administrator.imis_id %></p>
+
+  <p>
+    <strong>Claims:</strong>
+    <% if user_has_privilege?(current_isaca_user, :read_claims) %>
+      <% if @administrator.claims.any? %>
+      <ul>
+        <% @administrator.claims.each do |claim| %>
+          <li><%= claim.privilege %></li>
+        <% end %>
+      </ul>
+    <% else %>
+      No claims exist for this administrator.
+    <% end %>
+  <% else %>
+    You do not have the necessary privileges to view an administrator's claims.
+  <% end %>
+  </p>
+</div>

data/app/views/isaca/rails/sessions/_form.html.erb

@@ -0,0 +1,15 @@
+<%= form_for @form_object, url: session_path do |f| %>
+  <%= isaca_form_errors(@form_object) if @form_object.errors.any? %>
+
+  <div class="form-group">
+    <%= f.label :username %>
+    <%= f.text_field :username, autofocus: true, class: 'ir-form-control' %>
+  </div>
+
+  <div class="form-group">
+    <%= f.label :password %>
+    <%= f.password_field :password, class: 'ir-form-control' %>
+  </div>
+
+  <%= f.submit 'Sign In', class: 'ir-btn ir-btn-lg ir-btn-primary ir-form-control' %>
+<% end %>

data/app/views/isaca/rails/sessions/new.html.erb

@@ -0,0 +1,28 @@
+<% content_for :title, 'Sign In' %>
+
+<div class="ir-login-container">
+  <main>
+    <div class="ir-brand">
+      <a href="/">
+        <%= image_tag 'isaca/rails/isaca-logo.png' %>
+      </a>
+    </div>
+
+    <div class="ir-form-body">
+      <%= isaca_flash_messages %>
+
+      <% if user_signed_in? %>
+        <p>You are signed in as <%= current_isaca_user.first_name %> <%= current_isaca_user.last_name %>.</p>
+
+        <%= link_to t('isaca.rails.sessions.sign_out'), sign_out_path, method: :delete, data: {confirm: t('isaca.rails.sessions.sign_out_confirmation')} %>
+      <% else %>
+        <%= render 'isaca/rails/sessions/form' %>
+
+        <ul class="ir-shared-links">
+          <%= render 'isaca/rails/sessions/shared/links' %>
+        </ul>
+      <% end %>
+    </div>
+  </main>
+  <aside></aside>
+</div>

data/app/views/isaca/rails/sessions/shared/_links.html.erb

@@ -0,0 +1,2 @@
+<li><%= link_to_forgot_isaca_credentials %></li>
+<li><%= link_to_create_isaca_account %></li>

data/app/views/isaca/rails/users_consent/_form.html.erb

@@ -0,0 +1,50 @@
+<%= form_for @form_object, url: user_consent_path do |f| %>
+  <%= isaca_form_errors(@form_object) if @form_object.errors.any? %>
+
+  <div class="form-group" style="margin-bottom: 20px;">
+    <label for="agreements_privacy">
+      <%= f.check_box :privacy_policy %>
+
+      ISACA has changed their privacy notice, to access the revised notice and terms,
+      <a href="https://www.isaca.org/pages/Privacy.aspx" target="_blank">click here</a>.
+
+      By continuing to use the site you agree to the revised terms.
+    </label>
+  </div>
+
+  <div class="form-group">
+    <label for="agreements_marketing">
+      <% if Isaca::Request::ExplicitCountries.get.includes_country?(current_isaca_user.country) %>
+        <%= f.check_box :marketing_policy %>
+      <% else %>
+        <%= f.check_box :marketing_policy, checked: true %>
+      <% end %>
+
+      Yes! I would like to receive by post, e-mail and/or telephone marketing information from ISACA
+      and their affiliates about ISACA and their affiliates and their products and services, and other
+      information in which ISACA and their affiliates think I may be interested.
+    </label>
+  </div>
+
+  <p>
+    By pressing submit, I understand and agree that the information I have provided will be used as described
+    in the ISACA Privacy Policy. By pressing submit, I further agree to the website Terms, and confirm that
+    the information I have provided is my own.
+  </p>
+
+  <%= f.submit 'Save Preferences', class: 'ir-btn ir-btn-primary ir-btn-lg ir-form-control', disabled: true %>
+<% end %>
+
+<script type="text/javascript" charset="utf-8">
+    const form = document.getElementById('new_agreement');
+    const submit = form.getElementsByTagName('input')[6];
+
+    if (submit) {
+        submit.disabled = true;
+    }
+
+    const privacyCheckBox = document.getElementById('agreement_privacy_policy');
+    privacyCheckBox.addEventListener('change', (event) => {
+        submit.disabled = !event.target.checked;
+    });
+</script>

data/app/views/isaca/rails/users_consent/show.html.erb

@@ -0,0 +1,21 @@
+<% content_for :title, 'Consent' %>
+
+<div class="ir-consent-container">
+  <aside></aside>
+  <main>
+    <div class="ir-brand">
+      <a href="/">
+        <%= image_tag 'isaca/rails/isaca-logo.png' %>
+      </a>
+    </div>
+
+    <div class="ir-form-body">
+      <%= isaca_flash_messages %>
+
+      <h3>Hi <%= current_isaca_user.first_name %>, </h3>
+
+      <p>WE HAVE UPDATED OUR PRIVACY AND COMMUNICATION PREFERENCES</p>
+      <%= render 'isaca/rails/users_consent/form' %>
+    </div>
+  </main>
+</div>