liquid_feedback_frontend: cae2a205da8b model/member.lua

252 selector:join("privilege", "__model_member__privilege", { "member.id = __model_member__privilege.member_id AND __model_member__privilege.voting_right AND __model_member__privilege.unit_id = ?", args.voting_right_for_unit_id })

253 end

254 if args.admin_search then

255 local search_string = "%" .. args.admin_search .. "%"

256 selector:add_where{ "member.identification ILIKE ? OR member.name ILIKE ?", search_string, search_string }

257 end

258 if args.order then

259 if args.order == "id" then

260 selector:add_order_by("id")

261 elseif args.order == "identification" then

262 selector:add_order_by("identification")

263 elseif args.order == "name" then

264 selector:add_order_by("name")

265 else

266 error("invalid order")

267 end

268 end

269 return selector

270 end

271

272 function Member.object:set_password(password)

273 trace.disable()

274

275 local hash_prefix

276 local salt_length

277

278 local function rounds()

279 return multirand.integer(

280 config.password_hash_min_rounds,

281 config.password_hash_max_rounds

282 )

283 end

284

285 if config.password_hash_algorithm == "crypt_md5" then

286 hash_prefix = "$1$"

287 salt_length = 8

288

289 elseif config.password_hash_algorithm == "crypt_sha256" then

290 hash_prefix = "$5$rounds=" .. rounds() .. "$"

291 salt_length = 16

292

293 elseif config.password_hash_algorithm == "crypt_sha512" then

294 hash_prefix = "$6$rounds=" .. rounds() .. "$"

295 salt_length = 16

296

297 else

298 error("Unknown hash algorithm selected in configuration")

299

300 end

301

302 hash_prefix = hash_prefix .. multirand.string(

303 salt_length,

304 "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz./"

305 )

306

307 local hash = extos.crypt(password, hash_prefix)

308

309 if not hash or hash:sub(1, #hash_prefix) ~= hash_prefix then

310 error("Password hashing algorithm failed")

311 end

312

313 self.password = hash

314 end

315

316 function Member.object:check_password(password)

317 if type(password) == "string" and type(self.password) == "string" then

318 return extos.crypt(password, self.password) == self.password

319 else

320 return false

321 end

322 end

323

324 function Member.object_get:password_hash_needs_update()

325

326 if self.password == nil then

327 return nil

328 end

329

330 local function check_rounds(rounds)

331 if rounds then

332 rounds = tonumber(rounds)

333 if

334 rounds >= config.password_hash_min_rounds and

335 rounds <= config.password_hash_max_rounds

336 then

337 return false

338 end

339 end

340 return true

341 end

342

343 if config.password_hash_algorithm == "crypt_md5" then

344

345 return self.password:sub(1,3) ~= "$1$"

346

347 elseif config.password_hash_algorithm == "crypt_sha256" then

348

349 return check_rounds(self.password:match("^%$5%$rounds=([1-9][0-9]*)%$"))

350

351 elseif config.password_hash_algorithm == "crypt_sha512" then

352

353 return check_rounds(self.password:match("^%$6%$rounds=([1-9][0-9]*)%$"))

354

355 else

356 error("Unknown hash algorithm selected in configuration")

357

358 end

359

360 end

361

362 function Member.object_get:published_contacts()

363 return Member:new_selector()

364 :join('"contact"', nil, '"contact"."other_member_id" = "member"."id"')

365 :add_where{ '"contact"."member_id" = ?', self.id }

366 :add_where("public")

367 :exec()

368 end

369

370 function Member:by_login_and_password(login, password)

371 local selector = self:new_selector()

372 selector:add_where{'"login" = ?', login }

373 selector:add_where('NOT "locked"')

374 selector:optional_object_mode()

375 local member = selector:exec()

376 if member and member:check_password(password) then

377 return member

378 else

379 return nil

380 end

381 end

382

383 function Member:by_login(login)

384 local selector = self:new_selector()

385 selector:add_where{'"login" = ?', login }

386 selector:optional_object_mode()

387 return selector:exec()

388 end

389

390 function Member:by_name(name)

391 local selector = self:new_selector()

392 selector:add_where{'"name" = ?', name }

393 selector:optional_object_mode()

394 return selector:exec()

395 end

396

397 function Member:get_search_selector(search_string)

398 return self:new_selector()

399 :add_field( {'"highlight"("member"."name", ?)', search_string }, "name_highlighted")

400 :add_where{ '"member"."text_search_data" @@ "text_search_query"(?)', search_string }

401 :add_where("activated NOTNULL AND active")

402 end

403

404 function Member.object:send_invitation(template_file, subject)

405 trace.disable()

406 self.invite_code = multirand.string( 24, "23456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz" )

407 self:save()

408

409 local subject = subject

410 local content

411

412 if template_file then

413 local fh = io.open(template_file, "r")

414 content = fh:read("*a")

415 content = (content:gsub("#{invite_code}", self.invite_code))

416 else

417 subject = config.mail_subject_prefix .. _"Invitation to LiquidFeedback"

418 content = slot.use_temporary(function()

419 slot.put(_"Hello\n\n")

420 slot.put(_"You are invited to LiquidFeedback. To register please click the following link:\n\n")

421 slot.put(request.get_absolute_baseurl() .. "index/register.html?invite=" .. self.invite_code .. "\n\n")

422 slot.put(_"If this link is not working, please open following url in your web browser:\n\n")

423 slot.put(request.get_absolute_baseurl() .. "index/register.html\n\n")

424 slot.put(_"On that page please enter the invite key:\n\n")

425 slot.put(self.invite_code .. "\n\n")

426 end)

427 end

428

429 local success = net.send_mail{

430 envelope_from = config.mail_envelope_from,

431 from = config.mail_from,

432 reply_to = config.mail_reply_to,

433 to = self.notify_email_unconfirmed or self.notify_email,

434 subject = subject,

435 content_type = "text/plain; charset=UTF-8",

436 content = content

437 }

438 return success

439 end

440

441 function Member.object:set_notify_email(notify_email)

442 trace.disable()

443 local expiry = db:query("SELECT now() + '7 days'::interval as expiry", "object").expiry

444 self.notify_email_unconfirmed = notify_email

445 self.notify_email_secret = multirand.string( 24, "23456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz" )

446 self.notify_email_secret_expiry = expiry

447 local content = slot.use_temporary(function()

448 slot.put(_"Hello " .. self.name .. ",\n\n")

449 slot.put(_"Please confirm your email address by clicking the following link:\n\n")

450 slot.put(request.get_absolute_baseurl() .. "index/confirm_notify_email.html?secret=" .. self.notify_email_secret .. "\n\n")

451 slot.put(_"If this link is not working, please open following url in your web browser:\n\n")

452 slot.put(request.get_absolute_baseurl() .. "index/confirm_notify_email.html\n\n")

453 slot.put(_"On that page please enter the confirmation code:\n\n")

454 slot.put(self.notify_email_secret .. "\n\n")

455 end)

456 local success = net.send_mail{

457 envelope_from = config.mail_envelope_from,

458 from = config.mail_from,

459 reply_to = config.mail_reply_to,

460 to = self.notify_email_unconfirmed,

461 subject = config.mail_subject_prefix .. _"Email confirmation request",

462 content_type = "text/plain; charset=UTF-8",

463 content = content

464 }

465 if success then

466 local lock_expiry = db:query("SELECT now() + '1 hour'::interval AS lock_expiry", "object").lock_expiry

467 self.notify_email_lock_expiry = lock_expiry

468 end

469 self:save()

470 return success

471 end

472

473 function Member.object:get_setting(key)

474 return Setting:by_pk(self.id, key)

475 end

476

477 function Member.object:get_setting_value(key)

478 local setting = Setting:by_pk(self.id, key)

479 if setting then

480 return setting.value

481 end

482 end

483

484 function Member.object:set_setting(key, value)

485 local setting = self:get_setting(key)

486 if not setting then

487 setting = Setting:new()

488 setting.member_id = self.id

489 setting.key = key

490 end

491 setting.value = value

492 setting:save()

493 end

494

495 function Member.object:get_setting_maps_by_key(key)

496 return SettingMap:new_selector()

497 :add_where{ "member_id = ?", self.id }

498 :add_where{ "key = ?", key }

499 :add_order_by("subkey")

500 :exec()

501 end

502

503 function Member.object:get_setting_map_by_key_and_subkey(key, subkey)

504 return SettingMap:new_selector()

505 :add_where{ "member_id = ?", self.id }

506 :add_where{ "key = ?", key }

507 :add_where{ "subkey = ?", subkey }

508 :add_order_by("subkey")

509 :optional_object_mode()

510 :exec()

511 end

512

513 function Member.object:set_setting_map(key, subkey, value)

514 setting_map = self:get_setting_map_by_key_and_subkey(key, subkey)

515 if not setting_map then

516 setting_map = SettingMap:new()

517 setting_map.member_id = self.id

518 setting_map.key = key

519 setting_map.subkey = subkey

520 end

521 setting_map.value = value

522 setting_map:save()

523 end

524

525 function Member.object_get:notify_email_locked()

526 return(

527 Member:new_selector()

528 :add_where{ "id = ?", app.session.member.id }

529 :add_where("notify_email_lock_expiry > now()")

530 :count() == 1

531 )

532 end

533

534 function Member.object_get:units_with_voting_right()

535 return(Unit:new_selector()

536 :join("privilege", nil, { "privilege.unit_id = unit.id AND privilege.member_id = ? AND privilege.voting_right", self.id })

537 :exec()

538 )

539 end

540

541 function Member.object:ui_field_text(args)

542 args = args or {}

543 if app.session:has_access("authors_pseudonymous") then

544 -- ugly workaround for getting html into a replaced string and to the user

545 ui.container{label = args.label, label_attr={class="ui_field_label"}, content = function()

546 slot.put(string.format('<span><a href="%s">%s</a></span>',

547 encode.url{

548 module = "member",

549 view = "show",

550 id = self.id,

551 },

552 encode.html(self.name)))

553 end

554 }

555 else

556 ui.field.text{ label = args.label, value = _"[not displayed public]" }

557 end

558 end

559

560 function Member.object:has_voting_right_for_unit_id(unit_id)

561 if not self.__units_with_voting_right_hash then

562 local privileges = Privilege:new_selector()

563 :add_where{ "member_id = ?", self.id }

564 :add_where("voting_right")

565 :exec()

566 self.__units_with_voting_right_hash = {}

567 for i, privilege in ipairs(privileges) do

568 self.__units_with_voting_right_hash[privilege.unit_id] = true

569 end

570 end

571 return self.__units_with_voting_right_hash[unit_id] and true or false

572 end

573

574 function Member.object:has_polling_right_for_unit_id(unit_id)

575 if not self.__units_with_polling_right_hash then

576 local privileges = Privilege:new_selector()

577 :add_where{ "member_id = ?", self.id }

578 :add_where("polling_right")

579 :exec()

580 self.__units_with_polling_right_hash = {}

581 for i, privilege in ipairs(privileges) do

582 self.__units_with_polling_right_hash[privilege.unit_id] = true

583 end

584 end

585 return self.__units_with_polling_right_hash[unit_id] and true or false

586 end

587

588 function Member.object:get_delegatee_member(unit_id, area_id, issue_id)

589 local selector = Member:new_selector()

590 if unit_id then

591 selector:join("delegation", nil, { "delegation.trustee_id = member.id AND delegation.scope = 'unit' AND delegation.unit_id = ? AND delegation.truster_id = ?", unit_id, self.id })

592 end

593 selector:optional_object_mode()

594 return selector:exec()

595 end