foodsoft/app/models/user.rb

231 lines
6.9 KiB
Ruby
Raw Normal View History

# encoding: utf-8
require 'digest/sha1'
2009-01-06 11:49:19 +01:00
# specific user rights through memberships (see Group)
class User < ApplicationRecord
include CustomFields
#TODO: acts_as_paraniod ??
2009-01-06 11:49:19 +01:00
has_many :memberships, :dependent => :destroy
has_many :groups, :through => :memberships
#has_one :ordergroup, :through => :memberships, :source => :group, :class_name => "Ordergroup"
def ordergroup
Ordergroup.joins(:memberships).where(memberships: {user_id: self.id}).first
end
has_many :workgroups, :through => :memberships, :source => :group, :class_name => "Workgroup"
2009-01-06 11:49:19 +01:00
has_many :assignments, :dependent => :destroy
has_many :tasks, :through => :assignments
has_many :send_messages, :class_name => "Message", :foreign_key => "sender_id"
2012-11-12 14:24:49 +01:00
has_many :created_orders, :class_name => 'Order', :foreign_key => 'created_by_user_id', :dependent => :nullify
has_many :mail_delivery_status, :class_name => 'MailDeliveryStatus', :foreign_key => 'email', :primary_key => 'email'
attr_accessor :password, :settings_attributes
scope :deleted, -> { where.not(deleted_at: nil) }
scope :undeleted, -> { where(deleted_at: nil) }
# makes the current_user (logged-in-user) available in models
cattr_accessor :current_user
validates_presence_of :email
2011-06-10 13:22:15 +02:00
validates_presence_of :password, :on => :create
validates_format_of :email, :with => /\A([^@\s]+)@((?:[-a-z0-9]+\.)+[a-z]{2,})\z/i
validates_uniqueness_of :email, :case_sensitive => false
validates_presence_of :first_name # for simple_form validations
2009-01-06 11:49:19 +01:00
validates_length_of :first_name, :in => 2..50
validates_confirmation_of :password
validates_length_of :password, :in => 5..25, :allow_blank => true
# allow nick to be nil depending on foodcoop config
# TODO Rails 4 may have a more beautiful way
# http://stackoverflow.com/questions/19845910/conditional-allow-nil-part-of-validation
validates_length_of :nick, :in => 2..25, :allow_nil => true, :unless => Proc.new { FoodsoftConfig[:use_nick] }
validates_length_of :nick, :in => 2..25, :allow_nil => false, :if => Proc.new { FoodsoftConfig[:use_nick] }
validates_uniqueness_of :nick, :case_sensitive => false, :allow_nil => true # allow_nil in length validation
validates_format_of :iban, :with => /\A[A-Z]{2}[0-9]{2}[0-9A-Z]{,30}\z/, :allow_blank => true
validates_uniqueness_of :iban, :case_sensitive => false, :allow_blank => true
before_validation :set_password
after_initialize do
settings.defaults['profile'] = { 'language' => I18n.default_locale } unless settings.profile
settings.defaults['messages'] = { 'send_as_email' => true } unless settings.messages
settings.defaults['notify'] = { 'upcoming_tasks' => true } unless settings.notify
2009-01-06 11:49:19 +01:00
end
after_save do
settings_attributes.each do |key, value|
value.each do |k, v|
case v
when '1'
value[k] = true
when '0'
value[k] = false
end
end
self.settings.merge!(key, value)
2014-11-21 14:37:56 +01:00
end if settings_attributes
end
# sorted by display name
def self.natural_order
# would be sensible to match ApplicationController#show_user
if FoodsoftConfig[:use_nick]
2014-05-06 10:51:45 +02:00
order('nick')
else
2014-05-06 10:51:45 +02:00
order('first_name', 'last_name')
end
end
# search by (nick)name
def self.natural_search(q)
2013-12-22 23:21:02 +01:00
q = q.strip
users = User.arel_table
# full string as nickname
match_nick = users[:nick].matches("%#{q}%")
# or each word matches either first or last name
match_name = q.split.map do |a|
users[:first_name].matches("%#{a}%").or users[:last_name].matches("%#{a}%")
end.reduce(:and)
User.where(match_nick.or match_name)
end
def locale
settings.profile['language']
end
def name
[first_name, last_name].join(" ")
end
def receive_email?
settings.messages['send_as_email'] && email.present?
end
2009-01-06 11:49:19 +01:00
# Sets the user's password. It will be stored encrypted along with a random salt.
def set_password
unless password.blank?
salt = [Array.new(6){rand(256).chr}.join].pack("m").chomp
self.password_hash, self.password_salt = Digest::SHA1.hexdigest(password + salt), salt
end
2009-01-06 11:49:19 +01:00
end
2009-01-06 11:49:19 +01:00
# Returns true if the password argument matches the user's password.
def has_password(password)
Digest::SHA1.hexdigest(password + self.password_salt) == self.password_hash
end
2009-01-06 11:49:19 +01:00
# Returns a random password.
def new_random_password(size = 3)
c = %w(b c d f g h j k l m n p qu r s t v w x z ch cr fr nd ng nk nt ph pr rd sh sl sp st th tr)
v = %w(a e i o u y)
f, r = true, ''
(size * 2).times do
r << (f ? c[rand * c.size] : v[rand * v.size])
f = !f
end
r
end
# Generates password reset token and sends email
# @return [Boolean] Whether it succeeded or not
def request_password_reset!
self.reset_password_token = new_random_password(16)
self.reset_password_expires = Time.now.advance(days: 2)
if save!
Mailer.reset_password(self).deliver_now
logger.debug("Sent password reset email to #{email}.")
true
else
false
end
end
2009-01-06 11:49:19 +01:00
# Checks the admin role
def role_admin?
groups.detect {|group| group.role_admin?}
end
2009-01-06 11:49:19 +01:00
# Checks the finance role
def role_finance?
groups.detect {|group| group.role_finance?}
end
# Checks the invoices role
def role_invoices?
groups.detect {|group| group.role_invoices?}
end
2009-01-06 11:49:19 +01:00
# Checks the article_meta role
def role_article_meta?
groups.detect {|group| group.role_article_meta?}
end
2017-11-15 23:58:11 +01:00
2009-01-06 11:49:19 +01:00
# Checks the suppliers role
def role_suppliers?
groups.detect {|group| group.role_suppliers?}
end
2017-11-15 23:58:11 +01:00
# Checks the invoices role
def role_pickups?
groups.detect {|group| group.role_pickups?}
end
2009-01-06 11:49:19 +01:00
# Checks the orders role
def role_orders?
groups.detect {|group| group.role_orders?}
end
2017-11-15 23:58:11 +01:00
def ordergroup_name
2013-03-22 01:21:44 +01:00
ordergroup ? ordergroup.name : I18n.t('model.user.no_ordergroup')
end
2009-01-06 11:49:19 +01:00
# returns true if user is a member of a given group
def member_of?(group)
group.users.exists?(self.id)
2009-01-06 11:49:19 +01:00
end
2017-11-15 23:58:11 +01:00
#Returns an array with the users groups (but without the Ordergroups -> because tpye=>"")
2009-01-06 11:49:19 +01:00
def member_of_groups()
self.groups.where(type: '')
2009-01-06 11:49:19 +01:00
end
def deleted?
deleted_at.present?
end
def mark_as_deleted
update_column :deleted_at, Time.now
end
def restore
update_column :deleted_at, nil
end
def self.authenticate(login, password)
user = find_by_nick(login) || find_by_email(login)
if user && user.has_password(password)
user
else
nil
end
end
# XXX this is view-related; need to move out things like token_attributes
# then this can be removed
def display
2013-10-29 18:58:04 +01:00
# would be sensible to match ApplicationHelper#show_user
if FoodsoftConfig[:use_nick]
nick.nil? ? I18n.t('helpers.application.nick_fallback') : nick
else
name
end
end
2011-05-15 22:06:54 +02:00
def token_attributes
# would be sensible to match ApplicationController#show_user
# this should not be part of the model anyway
{:id => id, :name => "#{display} (#{ordergroup.try(:name)})"}
2011-05-15 22:06:54 +02:00
end
end