liquid_feedback_frontend: b865f87ea810 model/member.lua

252 selector:join("privilege", "__model_member__privilege", { "member.id = __model_member__privilege.member_id AND __model_member__privilege.voting_right AND __model_member__privilege.unit_id = ?", args.voting_right_for_unit_id })

253 end

254 if args.admin_search then

255 local search_string = "%" .. args.admin_search .. "%"

256 selector:add_where{ "member.identification ILIKE ? OR member.name ILIKE ?", search_string, search_string }

257 end

258 if args.order then

259 if args.order == "id" then

260 selector:add_order_by("id")

261 elseif args.order == "identification" then

262 selector:add_order_by("identification")

263 elseif args.order == "name" then

264 selector:add_order_by("name")

265 else

266 error("invalid order")

267 end

268 end

269 return selector

270 end

271

272 function Member:lockForReference()

273 self.get_db_conn().query("LOCK TABLE " .. self:get_qualified_table() .. " IN ROW SHARE MODE")

274 end

275

276 function Member.object:set_password(password)

277 trace.disable()

278

279 local hash_prefix

280 local salt_length

281

282 local function rounds()

283 return multirand.integer(

284 config.password_hash_min_rounds,

285 config.password_hash_max_rounds

286 )

287 end

288

289 if config.password_hash_algorithm == "crypt_md5" then

290 hash_prefix = "$1$"

291 salt_length = 8

292

293 elseif config.password_hash_algorithm == "crypt_sha256" then

294 hash_prefix = "$5$rounds=" .. rounds() .. "$"

295 salt_length = 16

296

297 elseif config.password_hash_algorithm == "crypt_sha512" then

298 hash_prefix = "$6$rounds=" .. rounds() .. "$"

299 salt_length = 16

300

301 else

302 error("Unknown hash algorithm selected in configuration")

303

304 end

305

306 hash_prefix = hash_prefix .. multirand.string(

307 salt_length,

308 "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz./"

309 )

310

311 local hash = extos.crypt(password, hash_prefix)

312

313 if not hash or hash:sub(1, #hash_prefix) ~= hash_prefix then

314 error("Password hashing algorithm failed")

315 end

316

317 self.password = hash

318 end

319

320 function Member.object:check_password(password)

321 if type(password) == "string" and type(self.password) == "string" then

322 return extos.crypt(password, self.password) == self.password

323 else

324 return false

325 end

326 end

327

328 function Member.object_get:password_hash_needs_update()

329

330 if self.password == nil then

331 return nil

332 end

333

334 local function check_rounds(rounds)

335 if rounds then

336 rounds = tonumber(rounds)

337 if

338 rounds >= config.password_hash_min_rounds and

339 rounds <= config.password_hash_max_rounds

340 then

341 return false

342 end

343 end

344 return true

345 end

346

347 if config.password_hash_algorithm == "crypt_md5" then

348

349 return self.password:sub(1,3) ~= "$1$"

350

351 elseif config.password_hash_algorithm == "crypt_sha256" then

352

353 return check_rounds(self.password:match("^%$5%$rounds=([1-9][0-9]*)%$"))

354

355 elseif config.password_hash_algorithm == "crypt_sha512" then

356

357 return check_rounds(self.password:match("^%$6%$rounds=([1-9][0-9]*)%$"))

358

359 else

360 error("Unknown hash algorithm selected in configuration")

361

362 end

363

364 end

365

366 function Member.object_get:published_contacts()

367 return Member:new_selector()

368 :join('"contact"', nil, '"contact"."other_member_id" = "member"."id"')

369 :add_where{ '"contact"."member_id" = ?', self.id }

370 :add_where("public")

371 :exec()

372 end

373

374 function Member:by_login_and_password(login, password)

375 local selector = self:new_selector()

376 selector:add_where{'"login" = ?', login }

377 selector:add_where('NOT "locked"')

378 selector:optional_object_mode()

379 local member = selector:exec()

380 if member and member:check_password(password) then

381 return member

382 else

383 return nil

384 end

385 end

386

387 function Member:by_login(login)

388 local selector = self:new_selector()

389 selector:add_where{'"login" = ?', login }

390 selector:optional_object_mode()

391 return selector:exec()

392 end

393

394 function Member:by_name(name)

395 local selector = self:new_selector()

396 selector:add_where{'"name" = ?', name }

397 selector:optional_object_mode()

398 return selector:exec()

399 end

400

401 function Member:get_search_selector(search_string)

402 return self:new_selector()

403 :add_field( {'"highlight"("member"."name", ?)', search_string }, "name_highlighted")

404 :add_where{ '"member"."text_search_data" @@ "text_search_query"(?)', search_string }

405 :add_where("activated NOTNULL AND active")

406 end

407

408 function Member.object:send_invitation(template_file, subject)

409 trace.disable()

410 self.invite_code = multirand.string( 24, "23456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz" )

411 self:save()

412

413 local subject = subject

414 local content

415

416 if template_file then

417 local fh = io.open(template_file, "r")

418 content = fh:read("*a")

419 content = (content:gsub("#{invite_code}", self.invite_code))

420 else

421 subject = config.mail_subject_prefix .. _"Invitation to LiquidFeedback"

422 content = slot.use_temporary(function()

423 slot.put(_"Hello\n\n")

424 slot.put(_"You are invited to LiquidFeedback. To register please click the following link:\n\n")

425 slot.put(request.get_absolute_baseurl() .. "index/register.html?invite=" .. self.invite_code .. "\n\n")

426 slot.put(_"If this link is not working, please open following url in your web browser:\n\n")

427 slot.put(request.get_absolute_baseurl() .. "index/register.html\n\n")

428 slot.put(_"On that page please enter the invite key:\n\n")

429 slot.put(self.invite_code .. "\n\n")

430 end)

431 end

432

433 local success = net.send_mail{

434 envelope_from = config.mail_envelope_from,

435 from = config.mail_from,

436 reply_to = config.mail_reply_to,

437 to = self.notify_email_unconfirmed or self.notify_email,

438 subject = subject,

439 content_type = "text/plain; charset=UTF-8",

440 content = content

441 }

442 return success

443 end

444

445 function Member.object:set_notify_email(notify_email)

446 trace.disable()

447 local expiry = db:query("SELECT now() + '7 days'::interval as expiry", "object").expiry

448 self.notify_email_unconfirmed = notify_email

449 self.notify_email_secret = multirand.string( 24, "23456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz" )

450 self.notify_email_secret_expiry = expiry

451 local content = slot.use_temporary(function()

452 slot.put(_"Hello " .. self.name .. ",\n\n")

453 slot.put(_"Please confirm your email address by clicking the following link:\n\n")

454 slot.put(request.get_absolute_baseurl() .. "index/confirm_notify_email.html?secret=" .. self.notify_email_secret .. "\n\n")

455 slot.put(_"If this link is not working, please open following url in your web browser:\n\n")

456 slot.put(request.get_absolute_baseurl() .. "index/confirm_notify_email.html\n\n")

457 slot.put(_"On that page please enter the confirmation code:\n\n")

458 slot.put(self.notify_email_secret .. "\n\n")

459 end)

460 local success = net.send_mail{

461 envelope_from = config.mail_envelope_from,

462 from = config.mail_from,

463 reply_to = config.mail_reply_to,

464 to = self.notify_email_unconfirmed,

465 subject = config.mail_subject_prefix .. _"Email confirmation request",

466 content_type = "text/plain; charset=UTF-8",

467 content = content

468 }

469 if success then

470 local lock_expiry = db:query("SELECT now() + '1 hour'::interval AS lock_expiry", "object").lock_expiry

471 self.notify_email_lock_expiry = lock_expiry

472 end

473 self:save()

474 return success

475 end

476

477 function Member.object:get_setting(key)

478 return Setting:by_pk(self.id, key)

479 end

480

481 function Member.object:get_setting_value(key)

482 local setting = Setting:by_pk(self.id, key)

483 if setting then

484 return setting.value

485 end

486 end

487

488 function Member.object:set_setting(key, value)

489 local setting = self:get_setting(key)

490 if not setting then

491 setting = Setting:new()

492 setting.member_id = self.id

493 setting.key = key

494 end

495 setting.value = value

496 setting:save()

497 end

498

499 function Member.object:get_setting_maps_by_key(key)

500 return SettingMap:new_selector()

501 :add_where{ "member_id = ?", self.id }

502 :add_where{ "key = ?", key }

503 :add_order_by("subkey")

504 :exec()

505 end

506

507 function Member.object:get_setting_map_by_key_and_subkey(key, subkey)

508 return SettingMap:new_selector()

509 :add_where{ "member_id = ?", self.id }

510 :add_where{ "key = ?", key }

511 :add_where{ "subkey = ?", subkey }

512 :add_order_by("subkey")

513 :optional_object_mode()

514 :exec()

515 end

516

517 function Member.object:set_setting_map(key, subkey, value)

518 setting_map = self:get_setting_map_by_key_and_subkey(key, subkey)

519 if not setting_map then

520 setting_map = SettingMap:new()

521 setting_map.member_id = self.id

522 setting_map.key = key

523 setting_map.subkey = subkey

524 end

525 setting_map.value = value

526 setting_map:save()

527 end

528

529 function Member.object_get:notify_email_locked()

530 return(

531 Member:new_selector()

532 :add_where{ "id = ?", app.session.member.id }

533 :add_where("notify_email_lock_expiry > now()")

534 :count() == 1

535 )

536 end

537

538 function Member.object_get:units_with_voting_right()

539 return(Unit:new_selector()

540 :join("privilege", nil, { "privilege.unit_id = unit.id AND privilege.member_id = ? AND privilege.voting_right", self.id })

541 :exec()

542 )

543 end

544

545 function Member.object:ui_field_text(args)

546 args = args or {}

547 if app.session:has_access("authors_pseudonymous") then

548 -- ugly workaround for getting html into a replaced string and to the user

549 ui.container{label = args.label, label_attr={class="ui_field_label"}, content = function()

550 slot.put(string.format('<span><a href="%s">%s</a></span>',

551 encode.url{

552 module = "member",

553 view = "show",

554 id = self.id,

555 },

556 encode.html(self.name)))

557 end

558 }

559 else

560 ui.field.text{ label = args.label, value = _"[not displayed public]" }

561 end

562 end

563

564 function Member.object:has_voting_right_for_unit_id(unit_id)

565 if not self.__units_with_voting_right_hash then

566 local privileges = Privilege:new_selector()

567 :add_where{ "member_id = ?", self.id }

568 :add_where("voting_right")

569 :exec()

570 self.__units_with_voting_right_hash = {}

571 for i, privilege in ipairs(privileges) do

572 self.__units_with_voting_right_hash[privilege.unit_id] = true

573 end

574 end

575 return self.__units_with_voting_right_hash[unit_id] and true or false

576 end

577

578 function Member.object:has_polling_right_for_unit_id(unit_id)

579 if not self.__units_with_polling_right_hash then

580 local privileges = Privilege:new_selector()

581 :add_where{ "member_id = ?", self.id }

582 :add_where("polling_right")

583 :exec()

584 self.__units_with_polling_right_hash = {}

585 for i, privilege in ipairs(privileges) do

586 self.__units_with_polling_right_hash[privilege.unit_id] = true

587 end

588 end

589 return self.__units_with_polling_right_hash[unit_id] and true or false

590 end

591

592 function Member.object:get_delegatee_member(unit_id, area_id, issue_id)

593 local selector = Member:new_selector()

594 if unit_id then

595 selector:join("delegation", nil, { "delegation.trustee_id = member.id AND delegation.scope = 'unit' AND delegation.unit_id = ? AND delegation.truster_id = ?", unit_id, self.id })

596 end

597 selector:optional_object_mode()

598 return selector:exec()

599 end

600