253 lines
7.9 KiB
Ruby
253 lines
7.9 KiB
Ruby
require 'digest/sha1'
|
|
# specific user rights through memberships (see Group)
|
|
class User < ApplicationRecord
|
|
include CustomFields
|
|
# TODO: acts_as_paraniod ??
|
|
|
|
has_many :memberships, :dependent => :destroy
|
|
has_many :groups, :through => :memberships
|
|
# has_one :ordergroup, :through => :memberships, :source => :group, :class_name => "Ordergroup"
|
|
def ordergroup
|
|
Ordergroup.joins(:memberships).where(memberships: { user_id: self.id }).first
|
|
end
|
|
|
|
has_many :workgroups, :through => :memberships, :source => :group, :class_name => "Workgroup"
|
|
has_many :assignments, :dependent => :destroy
|
|
has_many :tasks, :through => :assignments
|
|
has_many :send_messages, :class_name => "Message", :foreign_key => "sender_id"
|
|
has_many :created_orders, :class_name => 'Order', :foreign_key => 'created_by_user_id', :dependent => :nullify
|
|
has_many :mail_delivery_status, :class_name => 'MailDeliveryStatus', :foreign_key => 'email', :primary_key => 'email'
|
|
|
|
attr_accessor :create_ordergroup, :password, :send_welcome_mail, :settings_attributes
|
|
|
|
scope :deleted, -> { where.not(deleted_at: nil) }
|
|
scope :undeleted, -> { where(deleted_at: nil) }
|
|
|
|
# makes the current_user (logged-in-user) available in models
|
|
cattr_accessor :current_user
|
|
|
|
validates_presence_of :email
|
|
validates_presence_of :password, :on => :create
|
|
validates_format_of :email, :with => /\A([^@\s]+)@((?:[-a-z0-9]+\.)+[a-z]{2,})\z/i
|
|
validates_uniqueness_of :email, :case_sensitive => false
|
|
validates_presence_of :first_name # for simple_form validations
|
|
validates_length_of :first_name, :in => 2..50
|
|
validates_confirmation_of :password
|
|
validates_length_of :password, :in => 12..50, :allow_blank => true
|
|
# allow nick to be nil depending on foodcoop config
|
|
# TODO Rails 4 may have a more beautiful way
|
|
# http://stackoverflow.com/questions/19845910/conditional-allow-nil-part-of-validation
|
|
validates_length_of :nick, :in => 2..25, :allow_nil => true, :unless => Proc.new { FoodsoftConfig[:use_nick] }
|
|
validates_length_of :nick, :in => 2..25, :allow_nil => false, :if => Proc.new { FoodsoftConfig[:use_nick] }
|
|
validates_uniqueness_of :nick, :case_sensitive => false, :allow_nil => true # allow_nil in length validation
|
|
validates_format_of :iban, :with => /\A[A-Z]{2}[0-9]{2}[0-9A-Z]{,30}\z/, :allow_blank => true
|
|
validates_uniqueness_of :iban, :case_sensitive => false, :allow_blank => true
|
|
|
|
before_validation :set_password
|
|
after_initialize do
|
|
settings.defaults['profile'] = { 'language' => I18n.default_locale } unless settings.profile
|
|
settings.defaults['messages'] = { 'send_as_email' => true } unless settings.messages
|
|
settings.defaults['notify'] = { 'upcoming_tasks' => true } unless settings.notify
|
|
end
|
|
|
|
before_save do
|
|
if send_welcome_mail?
|
|
self.reset_password_token = new_random_password(16)
|
|
self.reset_password_expires = Time.now.advance(days: 2)
|
|
end
|
|
end
|
|
|
|
after_save do
|
|
settings_attributes.each do |key, value|
|
|
value.each do |k, v|
|
|
case v
|
|
when '1'
|
|
value[k] = true
|
|
when '0'
|
|
value[k] = false
|
|
end
|
|
end
|
|
self.settings.merge!(key, value)
|
|
end if settings_attributes
|
|
|
|
if ActiveModel::Type::Boolean.new.cast(create_ordergroup)
|
|
og = Ordergroup.new({ name: name })
|
|
og.memberships.build({ user: self })
|
|
og.save!
|
|
end
|
|
|
|
Mailer.welcome(self).deliver_now if send_welcome_mail?
|
|
end
|
|
|
|
def send_welcome_mail?
|
|
ActiveModel::Type::Boolean.new.cast(send_welcome_mail)
|
|
end
|
|
|
|
# sorted by display name
|
|
def self.natural_order
|
|
# would be sensible to match ApplicationController#show_user
|
|
if FoodsoftConfig[:use_nick]
|
|
order('nick')
|
|
else
|
|
order('first_name', 'last_name')
|
|
end
|
|
end
|
|
|
|
# search by (nick)name
|
|
def self.natural_search(q)
|
|
q = q.strip
|
|
users = User.arel_table
|
|
# full string as nickname
|
|
match_nick = users[:nick].matches("%#{q}%")
|
|
# or each word matches either first or last name
|
|
match_name = q.split.map do |a|
|
|
users[:first_name].matches("%#{a}%").or users[:last_name].matches("%#{a}%")
|
|
end.reduce(:and)
|
|
User.where(match_nick.or match_name)
|
|
end
|
|
|
|
def locale
|
|
settings.profile['language']
|
|
end
|
|
|
|
def name
|
|
[first_name, last_name].join(" ")
|
|
end
|
|
|
|
def receive_email?
|
|
settings.messages['send_as_email'] && email.present?
|
|
end
|
|
|
|
# Sets the user's password. It will be stored encrypted along with a random salt.
|
|
def set_password
|
|
unless password.blank?
|
|
salt = [Array.new(6) { rand(256).chr }.join].pack("m").chomp
|
|
self.password_hash, self.password_salt = Digest::SHA1.hexdigest(password + salt), salt
|
|
end
|
|
end
|
|
|
|
# Returns true if the password argument matches the user's password.
|
|
def has_password(password)
|
|
Digest::SHA1.hexdigest(password + self.password_salt) == self.password_hash
|
|
end
|
|
|
|
# Returns a random password.
|
|
def new_random_password(size = 6)
|
|
c = %w(b c d f g h j k l m n p qu r s t v w x z ch cr fr nd ng nk nt ph pr rd sh sl sp st th tr)
|
|
v = %w(a e i o u y)
|
|
f, r = true, ''
|
|
(size * 2).times do
|
|
r << (f ? c[rand * c.size] : v[rand * v.size])
|
|
f = !f
|
|
end
|
|
r
|
|
end
|
|
|
|
# Generates password reset token and sends email
|
|
# @return [Boolean] Whether it succeeded or not
|
|
def request_password_reset!
|
|
self.reset_password_token = new_random_password(16)
|
|
self.reset_password_expires = Time.now.advance(days: 2)
|
|
if save!
|
|
Mailer.reset_password(self).deliver_now
|
|
logger.debug("Sent password reset email to #{email}.")
|
|
true
|
|
else
|
|
false
|
|
end
|
|
end
|
|
|
|
# Checks the admin role
|
|
def role_admin?
|
|
groups.detect { |group| group.role_admin? }
|
|
end
|
|
|
|
# Checks the finance role
|
|
def role_finance?
|
|
FoodsoftConfig[:default_role_finance] || groups.detect { |group| group.role_finance? }
|
|
end
|
|
|
|
# Checks the invoices role
|
|
def role_invoices?
|
|
FoodsoftConfig[:default_role_invoices] || groups.detect { |group| group.role_invoices? }
|
|
end
|
|
|
|
# Checks the article_meta role
|
|
def role_article_meta?
|
|
FoodsoftConfig[:default_role_article_meta] || groups.detect { |group| group.role_article_meta? }
|
|
end
|
|
|
|
# Checks the suppliers role
|
|
def role_suppliers?
|
|
FoodsoftConfig[:default_role_suppliers] || groups.detect { |group| group.role_suppliers? }
|
|
end
|
|
|
|
# Checks the invoices role
|
|
def role_pickups?
|
|
FoodsoftConfig[:default_role_pickups] || groups.detect { |group| group.role_pickups? }
|
|
end
|
|
|
|
# Checks the orders role
|
|
def role_orders?
|
|
FoodsoftConfig[:default_role_orders] || groups.detect { |group| group.role_orders? }
|
|
end
|
|
|
|
def ordergroup_name
|
|
ordergroup ? ordergroup.name : I18n.t('model.user.no_ordergroup')
|
|
end
|
|
|
|
# returns true if user is a member of a given group
|
|
def member_of?(group)
|
|
group.users.exists?(self.id)
|
|
end
|
|
|
|
# Returns an array with the users groups (but without the Ordergroups -> because tpye=>"")
|
|
def member_of_groups()
|
|
self.groups.where(type: '')
|
|
end
|
|
|
|
def deleted?
|
|
deleted_at.present?
|
|
end
|
|
|
|
def mark_as_deleted
|
|
update_column :deleted_at, Time.now
|
|
end
|
|
|
|
def restore
|
|
update_column :deleted_at, nil
|
|
end
|
|
|
|
def self.authenticate(login, password)
|
|
user = find_by_nick(login) || find_by_email(login)
|
|
if user && password && user.has_password(password)
|
|
user
|
|
else
|
|
nil
|
|
end
|
|
end
|
|
|
|
def self.custom_fields
|
|
fields = FoodsoftConfig[:custom_fields] && FoodsoftConfig[:custom_fields][:user]
|
|
return [] unless fields
|
|
|
|
fields.map(&:deep_symbolize_keys)
|
|
end
|
|
|
|
# XXX this is view-related; need to move out things like token_attributes
|
|
# then this can be removed
|
|
def display
|
|
# would be sensible to match ApplicationHelper#show_user
|
|
if FoodsoftConfig[:use_nick]
|
|
nick.nil? ? I18n.t('helpers.application.nick_fallback') : nick
|
|
else
|
|
name
|
|
end
|
|
end
|
|
|
|
def token_attributes
|
|
# would be sensible to match ApplicationController#show_user
|
|
# this should not be part of the model anyway
|
|
{ :id => id, :name => "#{display} (#{ordergroup.try(:name)})" }
|
|
end
|
|
end
|