moduler 0.4.0 → 0.5.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: bef4750b890390a7ed190a171abecbad432378673ed5aee71487cdf669369b11
-  data.tar.gz: 46782a61ddd7ac48ddd10da394315110d1673d4c0b12fdae6be3136013bbfca8
+  metadata.gz: 3ec81c1092462c6513cd56e7953a2101eae358249f501d32993f1666bfd8867a
+  data.tar.gz: c92cde6155a2bc5fe17193155426ac2e593d6979092dae58e2ec64f0940bb9e9
 SHA512:
-  metadata.gz: 71aaf10f6880c35954bd3c8d60ba22a2bd0b251565a3ffdada709e566ab164fc771d3ec7ac4fe5af57976ee34748c8b413c25b814ac5c96ba5a697f1f135dc03
-  data.tar.gz: f4b4b157a4bbb5490c64ec907d6e5a4f68ff7900421238761d0e80b1744c0d855eba512c301c314f6218f373be82ab2dae0286c9d2680600d64bd42e06accb60
+  metadata.gz: fd6b3fb551373a67a76faeb79ffb8d49fa50740e2c9c3fb11838d9b99199e0bfa3f77f42e8dc847a86fb3b32f37371caef0dea2734b0d1c5ec75032abae574eb
+  data.tar.gz: 854b1562ccdaf04ccaa17c7d96418100374b7cb7294f06e3120babb7098e94c7605a18a531e31166a310df47abbd1ed311202ec0d3b7213fcc8cd70522337ff6

data/app/assets/builds/moduler/tailwind.css

@@ -32,6 +32,7 @@
     --color-slate-600: oklch(44.6% 0.043 257.281);
     --color-slate-700: oklch(37.2% 0.044 257.287);
     --color-slate-900: oklch(20.8% 0.042 265.755);
+    --color-gray-50: oklch(98.5% 0.002 247.839);
     --color-gray-200: oklch(92.8% 0.006 264.531);
     --color-gray-300: oklch(87.2% 0.01 258.338);
     --color-gray-400: oklch(70.7% 0.022 261.325);
@@ -41,6 +42,7 @@
     --spacing: 0.25rem;
     --container-sm: 24rem;
     --container-lg: 32rem;
+    --container-2xl: 42rem;
     --container-3xl: 48rem;
     --container-5xl: 64rem;
     --text-xs: 0.75rem;
@@ -872,6 +874,9 @@
       margin-bottom: 0;
     }
   }
+  .mt-0\.5 {
+    margin-top: calc(var(--spacing) * 0.5);
+  }
   .mt-1 {
     margin-top: calc(var(--spacing) * 1);
   }
@@ -955,6 +960,9 @@
   .w-full {
     width: 100%;
   }
+  .max-w-2xl {
+    max-width: var(--container-2xl);
+  }
   .max-w-3xl {
     max-width: var(--container-3xl);
   }
@@ -1052,6 +1060,11 @@
       border-bottom-width: calc(1px * calc(1 - var(--tw-divide-y-reverse)));
     }
   }
+  .divide-gray-200 {
+    :where(& > :not(:last-child)) {
+      border-color: var(--color-gray-200);
+    }
+  }
   .divide-slate-100 {
     :where(& > :not(:last-child)) {
       border-color: var(--color-slate-100);
@@ -1118,6 +1131,9 @@
   .border-gray-200 {
     border-color: var(--color-gray-200);
   }
+  .border-gray-300 {
+    border-color: var(--color-gray-300);
+  }
   .border-red-200 {
     border-color: var(--color-red-200);
   }
@@ -1333,6 +1349,9 @@
   .italic {
     font-style: italic;
   }
+  .accent-custom {
+    accent-color: var(--color-custom);
+  }
   .opacity-0 {
     opacity: 0%;
   }
@@ -1440,6 +1459,76 @@
       }
     }
   }
+  .file\:mr-3 {
+    &::file-selector-button {
+      margin-right: calc(var(--spacing) * 3);
+    }
+  }
+  .file\:rounded-md {
+    &::file-selector-button {
+      border-radius: var(--radius-md);
+    }
+  }
+  .file\:border-0 {
+    &::file-selector-button {
+      border-style: var(--tw-border-style);
+      border-width: 0px;
+    }
+  }
+  .file\:bg-white {
+    &::file-selector-button {
+      background-color: var(--color-white);
+    }
+  }
+  .file\:px-3 {
+    &::file-selector-button {
+      padding-inline: calc(var(--spacing) * 3);
+    }
+  }
+  .file\:py-1\.5 {
+    &::file-selector-button {
+      padding-block: calc(var(--spacing) * 1.5);
+    }
+  }
+  .file\:text-sm {
+    &::file-selector-button {
+      font-size: var(--text-sm);
+      line-height: var(--tw-leading, var(--text-sm--line-height));
+    }
+  }
+  .file\:font-semibold {
+    &::file-selector-button {
+      --tw-font-weight: var(--font-weight-semibold);
+      font-weight: var(--font-weight-semibold);
+    }
+  }
+  .file\:text-gray-900 {
+    &::file-selector-button {
+      color: var(--color-gray-900);
+    }
+  }
+  .file\:shadow-xs {
+    &::file-selector-button {
+      --tw-shadow: 0 1px 2px 0 var(--tw-shadow-color, rgb(0 0 0 / 0.05));
+      box-shadow: var(--tw-inset-shadow), var(--tw-inset-ring-shadow), var(--tw-ring-offset-shadow), var(--tw-ring-shadow), var(--tw-shadow);
+    }
+  }
+  .file\:ring-1 {
+    &::file-selector-button {
+      --tw-ring-shadow: var(--tw-ring-inset,) 0 0 0 calc(1px + var(--tw-ring-offset-width)) var(--tw-ring-color, currentcolor);
+      box-shadow: var(--tw-inset-shadow), var(--tw-inset-ring-shadow), var(--tw-ring-offset-shadow), var(--tw-ring-shadow), var(--tw-shadow);
+    }
+  }
+  .file\:ring-gray-300 {
+    &::file-selector-button {
+      --tw-ring-color: var(--color-gray-300);
+    }
+  }
+  .file\:ring-inset {
+    &::file-selector-button {
+      --tw-ring-inset: inset;
+    }
+  }
   .placeholder\:text-gray-400 {
     &::placeholder {
       color: var(--color-gray-400);
@@ -1520,6 +1609,13 @@
       }
     }
   }
+  .hover\:underline {
+    &:hover {
+      @media (hover: hover) {
+        text-decoration-line: underline;
+      }
+    }
+  }
   .hover\:ring-red-200 {
     &:hover {
       @media (hover: hover) {
@@ -1527,6 +1623,15 @@
       }
     }
   }
+  .hover\:file\:bg-gray-50 {
+    &:hover {
+      @media (hover: hover) {
+        &::file-selector-button {
+          background-color: var(--color-gray-50);
+        }
+      }
+    }
+  }
   .focus\:border-slate-900 {
     &:focus {
       border-color: var(--color-slate-900);

data/app/components/moduler/form/file_component.html.erb

@@ -0,0 +1,14 @@
+<div class="mt-2">
+  <% if @options.key?(:label) %>
+    <%= @form.label @name, @options[:label], class: "block text-sm text-slate-500" %>
+  <% end %>
+  <div class="mt-2">
+    <%= @form.file_field @name, accept: @options[:accept], class: "block w-full text-sm text-gray-900 file:mr-3 file:rounded-md file:border-0 file:bg-white file:px-3 file:py-1.5 file:text-sm file:font-semibold file:text-gray-900 file:shadow-xs file:ring-1 file:ring-inset file:ring-gray-300 hover:file:bg-gray-50" %>
+  </div>
+  <% if @options.key?(:description) %>
+    <p class="mt-1 text-xs text-gray-400"><%= @options[:description] %></p>
+  <% end %>
+  <% if @form.error?(@name) %>
+    <%= @form.error(@name, class: "text-red-500 text-sm mt-1") %>
+  <% end %>
+</div>

data/app/components/moduler/form/file_component.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+module Moduler
+  class Form::FileComponent < ViewComponent::Base
+    def initialize(form, name, options = {})
+      @form = form
+      @name = name
+      @options = options
+    end
+  end
+end

data/app/controllers/concerns/moduler/authentication.rb

@@ -29,7 +29,7 @@ module Moduler
 
     def find_session_by_cookie
       if cookies.signed[:session_id]
-        Session.active.find_by(id: cookies.signed[:session_id], signed_in_at: Session::LIFETIME.ago..)
+        Session.active.joins(:user).where(user: { status: :active }).find_by(id: cookies.signed[:session_id], signed_in_at: Session::LIFETIME.ago..)
       end
     end
 

data/app/controllers/concerns/moduler/require_document_acceptance.rb

@@ -0,0 +1,31 @@
+module Moduler
+  # Blocks the panel for signed-in users until they accept every document.
+  # Controllers that must stay available meanwhile (the profile, signing out,
+  # public pages) opt out with +skip_document_acceptance+.
+  module RequireDocumentAcceptance
+    extend ActiveSupport::Concern
+
+    included do
+      before_action :require_document_acceptance
+      helper_method :document_acceptance_required?
+    end
+
+    class_methods do
+      def skip_document_acceptance(**options)
+        skip_before_action :require_document_acceptance, **options
+      end
+    end
+
+    private
+
+    def document_acceptance_required?
+      return @document_acceptance_required if defined?(@document_acceptance_required)
+
+      @document_acceptance_required = Current.user.present? && Current.user.pending_documents.exists?
+    end
+
+    def require_document_acceptance
+      redirect_to moduler.new_document_acceptance_path if document_acceptance_required?
+    end
+  end
+end

data/app/controllers/moduler/administration/application_controller.rb

@@ -2,6 +2,8 @@ module Moduler
   module Administration
     class ApplicationController < ::Moduler::ApplicationController
       after_action :verify_authorized
+
+      skip_document_acceptance if: -> { current_user&.administrator? }
     end
   end
 end

data/app/controllers/moduler/administration/documents_controller.rb

@@ -0,0 +1,56 @@
+module Moduler
+  module Administration
+    class DocumentsController < ApplicationController
+      before_action -> { authorize([ :moduler, :administration, :document ]) }
+      before_action :set_document, only: %i[ edit update ]
+
+      def index
+        @filter, @documents = QueryFilter.new(Document.with_attached_file, permitted_filter_parameters).call
+      end
+
+      def new
+        @document = Document.new
+      end
+
+      def create
+        @document = Document.new(permitted_parameters)
+
+        if @document.save
+          redirect_to moduler.administration_documents_path, notice: t(".notice")
+        else
+          render :new, status: :unprocessable_entity
+        end
+      end
+
+      def edit; end
+
+      def update
+        if @document.update(permitted_update_parameters)
+          redirect_to moduler.administration_documents_path, notice: t(".notice")
+        else
+          render :edit, status: :unprocessable_entity
+        end
+      end
+
+      private
+
+      def set_document
+        @document = Document.find(params[:id])
+        authorize(@document, policy_class: DocumentPolicy)
+      end
+
+      def permitted_parameters
+        params.expect(document: %i[ name kind file ])
+      end
+
+      # The file is set only when the document is created and cannot be replaced.
+      def permitted_update_parameters
+        params.expect(document: %i[ name kind ])
+      end
+
+      def permitted_filter_parameters
+        (params.permit(filter: %i[ query ])[:filter] || {}).merge(params.permit(:page))
+      end
+    end
+  end
+end

data/app/controllers/moduler/administration/users_controller.rb

@@ -41,11 +41,11 @@ module Moduler
       end
 
       def permitted_parameters
-        params.expect(user: %i[ email_address role password ])
+        params.expect(user: %i[ email_address role status password ])
       end
 
       def permitted_update_parameters
-        params.expect(user: %i[ email_address role ])
+        params.expect(user: %i[ email_address role status ])
       end
 
       def permitted_filter_parameters

data/app/controllers/moduler/application_controller.rb

@@ -1,6 +1,7 @@
 module Moduler
   class ApplicationController < ActionController::Base
     include Authentication
+    include RequireDocumentAcceptance
     include Pundit::Authorization
 
     default_form_builder FormBuilder

data/app/controllers/moduler/articles_controller.rb

@@ -3,6 +3,7 @@ module Moduler
     layout "moduler/articles"
 
     allow_unauthenticated_access
+    skip_document_acceptance
 
     def index
       @articles = Article.order(created_at: :desc).page(params[:page])

data/app/controllers/moduler/document_acceptances_controller.rb

@@ -0,0 +1,25 @@
+module Moduler
+  class DocumentAcceptancesController < ApplicationController
+    skip_document_acceptance
+
+    before_action :set_document_acceptance
+
+    def new; end
+
+    def create
+      if @document_acceptance.call
+        redirect_to moduler.root_path, notice: t(".notice")
+      else
+        flash.now[:alert] = @document_acceptance.errors.full_messages.to_sentence
+
+        render :new, status: :unprocessable_entity
+      end
+    end
+
+    private
+
+    def set_document_acceptance
+      @document_acceptance = DocumentAcceptance.new(Current.user, params.dig(:document_acceptance, :document_ids))
+    end
+  end
+end

data/app/controllers/moduler/profile/sessions/revocation_controller.rb

@@ -2,6 +2,8 @@ module Moduler
   module Profile
     module Sessions
       class RevocationController < ApplicationController
+        skip_document_acceptance
+
         def destroy
           Current.user.sessions.active.update_all(signed_out_at: Time.current)
           cookies.delete(:session_id)

data/app/controllers/moduler/profile/sessions_controller.rb

@@ -1,6 +1,8 @@
 module Moduler
   module Profile
     class SessionsController < ApplicationController
+      skip_document_acceptance
+
       def index
         @sessions = Current.user.sessions.order(created_at: :desc).page(params[:page]).per(10)
       end

data/app/controllers/moduler/profile_controller.rb

@@ -1,5 +1,7 @@
 module Moduler
   class ProfileController < ApplicationController
+    skip_document_acceptance
+
     def edit
       @user = Current.user
     end

data/app/controllers/moduler/sessions_controller.rb

@@ -1,6 +1,7 @@
 module Moduler
   class SessionsController < ApplicationController
     allow_unauthenticated_access only: %i[ new create ]
+    skip_document_acceptance
 
     rate_limit to: 10, within: 3.minutes, only: :create,
       with: -> { redirect_to moduler.new_session_path, alert: t("moduler.sessions.create.rate_limited") }
@@ -18,16 +19,14 @@ module Moduler
     end
 
     def create
-      if user = User.authenticate_by(params.require(:user).permit(:email_address, :password))
+      user = User.authenticate_by(params.require(:user).permit(:email_address, :password))
+
+      if user&.active?
         start_new_session_for user
 
         redirect_to after_authentication_url
       else
-        @user = User.new.tap do |user|
-          user.errors.add(:base, t("moduler.sessions.create.invalid_credentials"))
-        end
-
-        render :new
+        render_sign_in_error(user ? "inactive_account" : "invalid_credentials")
       end
     end
 
@@ -35,5 +34,15 @@ module Moduler
       terminate_session
       redirect_to moduler.new_session_path, status: :see_other
     end
+
+    private
+
+    def render_sign_in_error(key)
+      @user = User.new.tap do |user|
+        user.errors.add(:base, t("moduler.sessions.create.#{key}"))
+      end
+
+      render :new
+    end
   end
 end

data/app/controllers/moduler/users_controller.rb

@@ -1,6 +1,7 @@
 module Moduler
   class UsersController < ApplicationController
     allow_unauthenticated_access only: %i[ new create ]
+    skip_document_acceptance
 
     rate_limit to: 10, within: 3.minutes, only: :create,
       with: -> { redirect_to moduler.new_user_path, alert: t("moduler.users.create.rate_limited") }

data/app/models/moduler/document.rb

@@ -0,0 +1,17 @@
+module Moduler
+  class Document < ApplicationRecord
+    include PgSearch::Model
+
+    KINDS = %w[ privacy_policy terms_and_conditions data_processing_agreement ].freeze
+
+    has_many :user_documents, class_name: "Moduler::UserDocument", foreign_key: "moduler_document_id", dependent: :delete_all
+
+    has_one_attached :file
+
+    validates :name, presence: true
+    validates :kind, presence: true, inclusion: { in: KINDS }
+    validates :file, presence: true, content_type: %w[ application/pdf ], size: { less_than: 10.megabytes }
+
+    pg_search_scope :search_by_query, against: %i[ name kind ], using: { trigram: { word_similarity: true } }
+  end
+end

data/app/models/moduler/user.rb

@@ -3,6 +3,8 @@ module Moduler
     include PgSearch::Model
 
     has_many :sessions, class_name: "Moduler::Session", foreign_key: "moduler_user_id", dependent: :destroy
+    has_many :user_documents, class_name: "Moduler::UserDocument", foreign_key: "moduler_user_id", dependent: :destroy
+    has_many :documents, class_name: "Moduler::Document", through: :user_documents
 
     has_secure_password
 
@@ -12,7 +14,13 @@ module Moduler
     validates :password, length: { minimum: 8 }, allow_nil: true
 
     enum :role, { member: 0, administrator: 1 }
+    enum :status, { waitlisted: 0, active: 1, inactive: 2 }, default: :active
 
     pg_search_scope :search_by_query, against: %i[ email_address ], using: { trigram: { word_similarity: true } }
+
+    # Documents the user has not accepted yet.
+    def pending_documents
+      Moduler::Document.where.not(id: user_documents.select(:moduler_document_id))
+    end
   end
 end

data/app/models/moduler/user_document.rb

@@ -0,0 +1,8 @@
+module Moduler
+  class UserDocument < ApplicationRecord
+    belongs_to :user, class_name: "Moduler::User", foreign_key: "moduler_user_id"
+    belongs_to :document, class_name: "Moduler::Document", foreign_key: "moduler_document_id"
+
+    validates :user, presence: true, uniqueness: { scope: :moduler_document_id }
+  end
+end

data/app/policies/moduler/administration/document_policy.rb

@@ -0,0 +1,25 @@
+module Moduler
+  module Administration
+    class DocumentPolicy < BasePolicy
+      def index?
+        administrator?
+      end
+
+      def create?
+        administrator?
+      end
+
+      def update?
+        administrator?
+      end
+
+      def new?
+        create?
+      end
+
+      def edit?
+        update?
+      end
+    end
+  end
+end

data/app/services/moduler/document_acceptance.rb

@@ -0,0 +1,43 @@
+module Moduler
+  # Accepts the documents a user has not accepted yet. Every pending document
+  # must be among the accepted ids; otherwise nothing is accepted. Ids of
+  # unknown or already accepted documents are ignored.
+  class DocumentAcceptance
+    include ActiveModel::Validations
+
+    attr_reader :user, :document_ids
+
+    validate :all_pending_documents_accepted
+
+    def initialize(user, document_ids = [])
+      @user = user
+      @document_ids = Array(document_ids).compact_blank.map(&:to_i)
+    end
+
+    def pending_documents
+      @pending_documents ||= user.pending_documents.with_attached_file.order(:created_at).to_a
+    end
+
+    def accepted?(document)
+      document_ids.include?(document.id)
+    end
+
+    def call
+      return false if invalid?
+
+      UserDocument.insert_all(rows, unique_by: %i[ moduler_document_id moduler_user_id ])
+
+      true
+    end
+
+    private
+
+    def all_pending_documents_accepted
+      errors.add(:base, :not_all_accepted) if pending_documents.any? { |document| !accepted?(document) }
+    end
+
+    def rows
+      pending_documents.map { |document| { moduler_user_id: user.id, moduler_document_id: document.id } }
+    end
+  end
+end

data/app/views/moduler/administration/documents/_document.html.erb

@@ -0,0 +1,19 @@
+<%= render(Moduler::ListItemComponent.new(document.name, id: dom_id(document))) do |item| %>
+  <% item.with_badge(t("moduler.administration.documents.kinds.#{document.kind}")) %>
+
+  <% item.with_meta do %>
+    <%= time_tag document.created_at, t(".created", time: time_ago_in_words(document.created_at)), title: l(document.created_at, format: :long) %>
+  <% end %>
+
+  <% if document.file.attached? %>
+    <% item.with_action do %>
+      <%= render(Moduler::ButtonLinkComponent.new(t(".action.download"), main_app.rails_blob_path(document.file, disposition: "attachment"), size: :sm)) %>
+    <% end %>
+  <% end %>
+
+  <% if Moduler::Administration::DocumentPolicy.new(current_user, document).edit? %>
+    <% item.with_action do %>
+      <%= render(Moduler::ButtonLinkComponent.new(t(".action.edit"), moduler.edit_administration_document_path(document), size: :sm)) %>
+    <% end %>
+  <% end %>
+<% end %>

data/app/views/moduler/administration/documents/_form.html.erb

@@ -0,0 +1,23 @@
+<%= render(Moduler::Administration::PageComponent.new) do %>
+  <%= render(Moduler::PageHeaderComponent.new(t(".title"))) %>
+
+  <%= form_with model: @document, url: @document.persisted? ? moduler.administration_document_path(@document) : moduler.administration_documents_path, data: { turbo: false }, class: "w-full space-y-6" do |form| %>
+    <%= render(::Moduler::Form::BaseErrorComponent.new(form)) %>
+
+    <div class="max-w-lg space-y-6">
+      <%= render(::Moduler::Form::TextComponent.new(form, :name, label: t(".label.name"))) %>
+      <%= render(::Moduler::Form::SelectComponent.new(form, :kind, Moduler::Document::KINDS.map { |kind| [ t("moduler.administration.documents.kinds.#{kind}"), kind ] }, label: t(".label.kind"))) %>
+      <% if @document.persisted? %>
+        <div class="mt-2">
+          <p class="block text-sm text-slate-500"><%= t(".label.file") %></p>
+          <p id="document_file" class="mt-2 text-sm text-gray-900"><%= @document.file.attached? ? @document.file.filename : t(".description.no_file") %></p>
+          <p class="mt-1 text-xs text-gray-400"><%= t(".description.file_locked") %></p>
+        </div>
+      <% else %>
+        <%= render(::Moduler::Form::FileComponent.new(form, :file, label: t(".label.file"), accept: "application/pdf", description: t(".description.file"))) %>
+      <% end %>
+    </div>
+
+    <%= render(::Moduler::Form::SubmitComponent.new(form, text: t(".action.save"))) %>
+  <% end %>
+<% end %>

data/app/views/moduler/administration/documents/edit.html.erb

@@ -0,0 +1 @@
+<%= render "form" %>

data/app/views/moduler/administration/documents/index.html.erb

@@ -0,0 +1,13 @@
+<%= render(Moduler::Administration::PageComponent.new) do %>
+  <%= render(Moduler::PageHeaderComponent.new(t(".title"), description: t(".description"))) do |header| %>
+    <% header.with_action do %>
+      <%= render(Moduler::ButtonLinkComponent.new(t(".action.new"), moduler.new_administration_document_path)) %>
+    <% end %>
+  <% end %>
+
+  <%= render(Moduler::FilterComponent.new(@filter, moduler.administration_documents_path)) %>
+
+  <%= render(Moduler::ListComponent.new(@documents, id: "documents", empty: t(".empty"))) do %>
+    <%= render partial: "moduler/administration/documents/document", collection: @documents %>
+  <% end %>
+<% end %>

data/app/views/moduler/administration/documents/new.html.erb

@@ -0,0 +1 @@
+<%= render "form" %>

data/app/views/moduler/administration/users/edit.html.erb

@@ -7,6 +7,7 @@
     <%= render(::Moduler::Form::SectionComponent.new(t(".section.data"))) do %>
       <%= render(::Moduler::Form::EmailComponent.new(form, :email_address, label: t(".label.email_address"))) %>
       <%= render(::Moduler::Form::SelectComponent.new(form, :role, Moduler::User.roles.keys.map { |role| [ t("moduler.administration.users.roles.#{role}"), role ] }, label: t(".label.role"))) %>
+      <%= render(::Moduler::Form::SelectComponent.new(form, :status, Moduler::User.statuses.keys.map { |status| [ t("moduler.administration.users.statuses.#{status}"), status ] }, label: t(".label.status"))) %>
     <% end %>
 
     <%= render(::Moduler::Form::SubmitComponent.new(form, text: t(".action.save"))) %>

data/app/views/moduler/administration/users/new.html.erb

@@ -7,6 +7,7 @@
     <%= render(::Moduler::Form::SectionComponent.new(t(".section.data"))) do %>
       <%= render(::Moduler::Form::EmailComponent.new(form, :email_address, label: t(".label.email_address"))) %>
       <%= render(::Moduler::Form::SelectComponent.new(form, :role, Moduler::User.roles.keys.map { |role| [ t("moduler.administration.users.roles.#{role}"), role ] }, label: t(".label.role"))) %>
+      <%= render(::Moduler::Form::SelectComponent.new(form, :status, Moduler::User.statuses.keys.map { |status| [ t("moduler.administration.users.statuses.#{status}"), status ] }, label: t(".label.status"))) %>
     <% end %>
 
     <%= render(::Moduler::Form::SectionComponent.new(t(".section.password"), divider: true)) do %>

data/app/views/moduler/common/administration/_sidebar.html.erb

@@ -4,6 +4,7 @@
     <%= render(Moduler::SidebarActionComponent.new(t(".action.sessions"), moduler.administration_sessions_path, "moduler/administration/sessions")) %>
 
     <%= render(Moduler::SidebarActionComponent.new(t(".action.articles"), moduler.administration_articles_path, "moduler/administration/articles")) %>
+    <%= render(Moduler::SidebarActionComponent.new(t(".action.documents"), moduler.administration_documents_path, "moduler/administration/documents")) %>
 
     <% Array(Moduler.configuration.dig(:administration, :resources)).each do |resource| %>
       <%= render(Moduler::SidebarActionComponent.new(t(".action.#{resource}"), moduler.url_for([:administration, resource.to_sym]), "moduler/administration/#{resource}")) %>

data/app/views/moduler/document_acceptances/new.html.erb

@@ -0,0 +1,36 @@
+<main class="mx-auto flex w-full max-w-2xl flex-1 flex-col px-4 py-8">
+  <div class="mb-6">
+    <h1 class="text-base font-semibold text-gray-900"><%= t(".title") %></h1>
+    <p class="mt-1 text-sm text-slate-500"><%= t(".description") %></p>
+  </div>
+
+  <%= form_with url: moduler.document_acceptance_path, scope: :document_acceptance, data: { turbo: false }, class: "space-y-6" do |form| %>
+    <ul id="documents" class="divide-y divide-gray-200 rounded-md border border-gray-200 bg-white">
+      <% @document_acceptance.pending_documents.each do |document| %>
+        <li id="<%= dom_id(document) %>" class="flex items-start gap-3 px-4 py-4 sm:px-5">
+          <%= check_box_tag "document_acceptance[document_ids][]", document.id, @document_acceptance.accepted?(document),
+                id: "document_acceptance_document_#{document.id}", class: "mt-0.5 h-4 w-4 shrink-0 cursor-pointer rounded border-gray-300 accent-custom" %>
+
+          <div class="min-w-0 flex-1">
+            <label for="document_acceptance_document_<%= document.id %>" class="cursor-pointer text-sm text-gray-900">
+              <%= t(".accept", name: document.name) %>
+            </label>
+            <p class="mt-1 text-xs text-slate-400">
+              <%= t("moduler.administration.documents.kinds.#{document.kind}") %>
+              <% if document.file.attached? %>
+                ·
+                <%= link_to t(".action.read"), main_app.rails_blob_path(document.file, disposition: "inline"), target: "_blank", rel: "noopener", class: "font-semibold text-custom hover:underline" %>
+              <% end %>
+            </p>
+          </div>
+        </li>
+      <% end %>
+    </ul>
+
+    <% @document_acceptance.errors.full_messages.each do |message| %>
+      <p class="text-sm text-red-500"><%= message %></p>
+    <% end %>
+
+    <%= render(::Moduler::Form::SubmitComponent.new(form, text: t(".action.submit"))) %>
+  <% end %>
+</main>

data/config/locales/moduler/administration/documents/en.yml

@@ -0,0 +1,35 @@
+en:
+  moduler:
+    administration:
+      documents:
+        kinds:
+          privacy_policy: Privacy policy
+          terms_and_conditions: Terms and conditions
+          data_processing_agreement: Data processing agreement
+        index:
+          title: Documents
+          description: Legal documents your users accept, such as the privacy policy or terms and conditions
+          empty: No documents found
+          action:
+            new: Create
+        document:
+          created: Created %{time} ago
+          action:
+            download: Download
+            edit: Edit
+        create:
+          notice: Document has been created
+        update:
+          notice: Document has been updated
+        form:
+          title: Document
+          label:
+            name: Name
+            kind: Kind
+            file: File
+          description:
+            file: PDF, smaller than 10 MB. The file cannot be changed after the document is created.
+            file_locked: The file cannot be changed.
+            no_file: No file
+          action:
+            save: Save

data/config/locales/moduler/administration/users/en.yml

@@ -5,6 +5,10 @@ en:
         roles:
           member: Member
           administrator: Administrator
+        statuses:
+          waitlisted: Waitlisted
+          active: Active
+          inactive: Inactive
         index:
           title: Users
           description: Manage user accounts and their roles. Search users by email address.
@@ -16,6 +20,7 @@ en:
           label:
             email_address: Email address
             role: Role
+            status: Status
             password: Password
           description:
             password: Use at least 8 characters.
@@ -31,6 +36,7 @@ en:
           label:
             email_address: Email address
             role: Role
+            status: Status
           section:
             data: User data
           action:

data/config/locales/moduler/common/en.yml

@@ -7,6 +7,7 @@ en:
             users: Users
             sessions: Sessions
             articles: Articles
+            documents: Documents
       profile:
         sidebar:
           action:

data/config/locales/moduler/document_acceptances/en.yml

@@ -0,0 +1,17 @@
+en:
+  activemodel:
+    errors:
+      models:
+        moduler/document_acceptance:
+          not_all_accepted: Accept all documents to continue.
+  moduler:
+    document_acceptances:
+      new:
+        title: Before you continue
+        description: Read and accept the documents below to get access to the panel.
+        accept: "I have read and accept: %{name}"
+        action:
+          read: Read the document
+          submit: Accept and continue
+      create:
+        notice: Thank you. You can now use the panel.

data/config/locales/moduler/sessions/en.yml

@@ -15,4 +15,5 @@ en:
           password: Enter your password
       create:
         invalid_credentials: Invalid credentials
+        inactive_account: Your account does not have access to the panel.
         rate_limited: Too many sign-in attempts. Please try again in a few minutes.

data/config/routes.rb

@@ -4,6 +4,8 @@ Moduler::Engine.routes.draw do
   resource :session, only: %i[new create destroy]
   resource :user, only: %i[new create]
 
+  resource :document_acceptance, only: %i[ new create ]
+
   resource :profile, only: %i[ edit update ], controller: :profile
   namespace :profile do
     namespace :sessions do
@@ -17,6 +19,7 @@ Moduler::Engine.routes.draw do
     resources :sessions, only: %i[ index destroy ]
 
     resources :articles
+    resources :documents, only: %i[ index new create edit update ]
 
     root "home#index"
   end

data/db/migrate/20261104120000_add_status_to_moduler_users.rb

@@ -0,0 +1,6 @@
+class AddStatusToModulerUsers < ActiveRecord::Migration[8.1]
+  def change
+    add_column :moduler_users, :status, :integer, default: 1, null: false
+    add_index :moduler_users, :status
+  end
+end

data/db/migrate/20261104205837_create_moduler_documents.rb

@@ -0,0 +1,10 @@
+class CreateModulerDocuments < ActiveRecord::Migration[8.1]
+  def change
+    create_table :moduler_documents do |t|
+      t.string :name, null: false
+      t.string :kind, null: false
+
+      t.timestamps null: false
+    end
+  end
+end

data/db/migrate/20261104205950_create_moduler_user_documents.rb

@@ -0,0 +1,12 @@
+class CreateModulerUserDocuments < ActiveRecord::Migration[8.1]
+  def change
+    create_table :moduler_user_documents do |t|
+      t.references :moduler_user, type: :uuid, null: false, foreign_key: true
+      t.references :moduler_document, null: false, foreign_key: true, index: false
+
+      t.timestamps
+    end
+
+    add_index :moduler_user_documents, %i[ moduler_document_id moduler_user_id ], unique: true
+  end
+end

data/lib/moduler/version.rb

@@ -1,3 +1,3 @@
 module Moduler
-  VERSION = "0.4.0"
+  VERSION = "0.5.0"
 end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: moduler
 version: !ruby/object:Gem::Version
-  version: 0.4.0
+  version: 0.5.0
 platform: ruby
 authors:
 - Tomasz Kowalewski
 bindir: bin
 cert_chain: []
-date: 2026-10-27 00:00:00.000000000 Z
+date: 2026-11-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -238,6 +238,8 @@ files:
 - app/components/moduler/form/base_error_component.rb
 - app/components/moduler/form/email_component.html.erb
 - app/components/moduler/form/email_component.rb
+- app/components/moduler/form/file_component.html.erb
+- app/components/moduler/form/file_component.rb
 - app/components/moduler/form/password_component.html.erb
 - app/components/moduler/form/password_component.rb
 - app/components/moduler/form/section_component.html.erb
@@ -261,13 +263,16 @@ files:
 - app/components/moduler/sidebar_action_component.html.erb
 - app/components/moduler/sidebar_action_component.rb
 - app/controllers/concerns/moduler/authentication.rb
+- app/controllers/concerns/moduler/require_document_acceptance.rb
 - app/controllers/moduler/administration/application_controller.rb
 - app/controllers/moduler/administration/articles_controller.rb
+- app/controllers/moduler/administration/documents_controller.rb
 - app/controllers/moduler/administration/home_controller.rb
 - app/controllers/moduler/administration/sessions_controller.rb
 - app/controllers/moduler/administration/users_controller.rb
 - app/controllers/moduler/application_controller.rb
 - app/controllers/moduler/articles_controller.rb
+- app/controllers/moduler/document_acceptances_controller.rb
 - app/controllers/moduler/home_controller.rb
 - app/controllers/moduler/profile/sessions/revocation_controller.rb
 - app/controllers/moduler/profile/sessions_controller.rb
@@ -283,14 +288,18 @@ files:
 - app/models/moduler/application_record.rb
 - app/models/moduler/article.rb
 - app/models/moduler/current.rb
+- app/models/moduler/document.rb
 - app/models/moduler/session.rb
 - app/models/moduler/user.rb
+- app/models/moduler/user_document.rb
 - app/policies/moduler/administration/article_policy.rb
 - app/policies/moduler/administration/base_policy.rb
+- app/policies/moduler/administration/document_policy.rb
 - app/policies/moduler/administration/home_policy.rb
 - app/policies/moduler/administration/session_policy.rb
 - app/policies/moduler/administration/user_policy.rb
 - app/policies/moduler/application_policy.rb
+- app/services/moduler/document_acceptance.rb
 - app/views/kaminari/_gap.html.erb
 - app/views/kaminari/_next_page.html.erb
 - app/views/kaminari/_page.html.erb
@@ -303,6 +312,11 @@ files:
 - app/views/moduler/administration/articles/edit.html.erb
 - app/views/moduler/administration/articles/index.html.erb
 - app/views/moduler/administration/articles/new.html.erb
+- app/views/moduler/administration/documents/_document.html.erb
+- app/views/moduler/administration/documents/_form.html.erb
+- app/views/moduler/administration/documents/edit.html.erb
+- app/views/moduler/administration/documents/index.html.erb
+- app/views/moduler/administration/documents/new.html.erb
 - app/views/moduler/administration/home/index.html.erb
 - app/views/moduler/administration/sessions/_session.html.erb
 - app/views/moduler/administration/sessions/index.html.erb
@@ -318,6 +332,7 @@ files:
 - app/views/moduler/common/_sidebar.html.erb
 - app/views/moduler/common/administration/_sidebar.html.erb
 - app/views/moduler/common/profile/_sidebar.html.erb
+- app/views/moduler/document_acceptances/new.html.erb
 - app/views/moduler/home/index.html.erb
 - app/views/moduler/profile/edit.html.erb
 - app/views/moduler/profile/sessions/_session.html.erb
@@ -326,11 +341,13 @@ files:
 - app/views/moduler/users/new.html.erb
 - config/importmap.rb
 - config/locales/moduler/administration/articles/en.yml
+- config/locales/moduler/administration/documents/en.yml
 - config/locales/moduler/administration/sessions/en.yml
 - config/locales/moduler/administration/users/en.yml
 - config/locales/moduler/articles/en.yml
 - config/locales/moduler/common/en.yml
 - config/locales/moduler/components/en.yml
+- config/locales/moduler/document_acceptances/en.yml
 - config/locales/moduler/en.yml
 - config/locales/moduler/profile/en.yml
 - config/locales/moduler/profile/sessions/en.yml
@@ -342,6 +359,9 @@ files:
 - db/migrate/20261015171504_add_role_to_moduler_users.rb
 - db/migrate/20261020191709_enable_pg_trgm.rb
 - db/migrate/20261026203827_create_moduler_articles.rb
+- db/migrate/20261104120000_add_status_to_moduler_users.rb
+- db/migrate/20261104205837_create_moduler_documents.rb
+- db/migrate/20261104205950_create_moduler_user_documents.rb
 - lib/moduler.rb
 - lib/moduler/configuration.rb
 - lib/moduler/engine.rb