liquid_feedback_frontend: d35d84938556 model/member.lua

252 selector:join("privilege", "__model_member__privilege", { "member.id = __model_member__privilege.member_id AND __model_member__privilege.voting_right AND __model_member__privilege.unit_id = ?", args.voting_right_for_unit_id })

253 end

254 if args.admin_search then

255 local search_string = "%" .. args.admin_search .. "%"

256 selector:add_where{ "member.identification ILIKE ? OR member.name ILIKE ?", search_string, search_string }

257 end

258 if args.order then

259 if args.order == "id" then

260 selector:add_order_by("id")

261 elseif args.order == "identification" then

262 selector:add_order_by("identification")

263 elseif args.order == "name" then

264 selector:add_order_by("name")

265 else

266 error("invalid order")

267 end

268 end

269 return selector

270 end

271

272 function Member:lockForReference()

273 self.get_db_conn().query("LOCK TABLE " .. self:get_qualified_table() .. " IN ROW SHARE MODE")

274 end

275

276 function Member.object:set_password(password)

277 trace.disable()

278

279 local hash_prefix

280 local salt_length

281

282 local function rounds()

283 return multirand.integer(

284 config.password_hash_min_rounds,

285 config.password_hash_max_rounds

286 )

287 end

288

289 if config.password_hash_algorithm == "crypt_md5" then

290 hash_prefix = "$1$"

291 salt_length = 8

292

293 elseif config.password_hash_algorithm == "crypt_sha256" then

294 hash_prefix = "$5$rounds=" .. rounds() .. "$"

295 salt_length = 16

296

297 elseif config.password_hash_algorithm == "crypt_sha512" then

298 hash_prefix = "$6$rounds=" .. rounds() .. "$"

299 salt_length = 16

300

301 else

302 error("Unknown hash algorithm selected in configuration")

303

304 end

305

306 hash_prefix = hash_prefix .. multirand.string(

307 salt_length,

308 "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz./"

309 )

310

311 local hash = extos.crypt(password, hash_prefix)

312

313 if not hash or hash:sub(1, #hash_prefix) ~= hash_prefix then

314 error("Password hashing algorithm failed")

315 end

316

317 self.password = hash

318 end

319

320 function Member.object:check_password(password)

321 if type(password) == "string" and type(self.password) == "string" then

322 return extos.crypt(password, self.password) == self.password

323 else

324 return false

325 end

326 end

327

328 function Member.object_get:password_hash_needs_update()

329

330 if self.password == nil then

331 return nil

332 end

333

334 local function check_rounds(rounds)

335 if rounds then

336 rounds = tonumber(rounds)

337 if

338 rounds >= config.password_hash_min_rounds and

339 rounds <= config.password_hash_max_rounds

340 then

341 return false

342 end

343 end

344 return true

345 end

346

347 if config.password_hash_algorithm == "crypt_md5" then

348

349 return self.password:sub(1,3) ~= "$1$"

350

351 elseif config.password_hash_algorithm == "crypt_sha256" then

352

353 return check_rounds(self.password:match("^%$5%$rounds=([1-9][0-9]*)%$"))

354

355 elseif config.password_hash_algorithm == "crypt_sha512" then

356

357 return check_rounds(self.password:match("^%$6%$rounds=([1-9][0-9]*)%$"))

358

359 else

360 error("Unknown hash algorithm selected in configuration")

361

362 end

363

364 end

365

366 function Member.object_get:published_contacts()

367 return Member:new_selector()

368 :join('"contact"', nil, '"contact"."other_member_id" = "member"."id"')

369 :add_where{ '"contact"."member_id" = ?', self.id }

370 :add_where("public")

371 :exec()

372 end

373

374 function Member:by_login_and_password(login, password)

375 local selector = self:new_selector()

376 selector:add_field({ "now() > COALESCE(last_delegation_check, activated) + ?::interval", config.check_delegations_interval_hard }, "needs_delegation_check_hard")

377 selector:add_where{'"login" = ?', login }

378 selector:add_where('NOT "locked"')

379 selector:optional_object_mode()

380 local member = selector:exec()

381 if member and member:check_password(password) then

382 return member

383 else

384 return nil

385 end

386 end

387

388 function Member:by_login(login)

389 local selector = self:new_selector()

390 selector:add_where{'"login" = ?', login }

391 selector:optional_object_mode()

392 return selector:exec()

393 end

394

395 function Member:by_name(name)

396 local selector = self:new_selector()

397 selector:add_where{'"name" = ?', name }

398 selector:optional_object_mode()

399 return selector:exec()

400 end

401

402 function Member:get_search_selector(search_string)

403 return self:new_selector()

404 :add_field( {'"highlight"("member"."name", ?)', search_string }, "name_highlighted")

405 :add_where{ '"member"."text_search_data" @@ "text_search_query"(?)', search_string }

406 :add_where("activated NOTNULL AND active")

407 end

408

409 function Member.object:send_invitation(template_file, subject)

410 trace.disable()

411 self.invite_code = multirand.string( 24, "23456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz" )

412 self:save()

413

414 local subject = subject

415 local content

416

417 if template_file then

418 local fh = io.open(template_file, "r")

419 content = fh:read("*a")

420 content = (content:gsub("#{invite_code}", self.invite_code))

421 else

422 subject = config.mail_subject_prefix .. _"Invitation to LiquidFeedback"

423 content = slot.use_temporary(function()

424 slot.put(_"Hello\n\n")

425 slot.put(_"You are invited to LiquidFeedback. To register please click the following link:\n\n")

426 slot.put(request.get_absolute_baseurl() .. "index/register.html?invite=" .. self.invite_code .. "\n\n")

427 slot.put(_"If this link is not working, please open following url in your web browser:\n\n")

428 slot.put(request.get_absolute_baseurl() .. "index/register.html\n\n")

429 slot.put(_"On that page please enter the invite key:\n\n")

430 slot.put(self.invite_code .. "\n\n")

431 end)

432 end

433

434 local success = net.send_mail{

435 envelope_from = config.mail_envelope_from,

436 from = config.mail_from,

437 reply_to = config.mail_reply_to,

438 to = self.notify_email_unconfirmed or self.notify_email,

439 subject = subject,

440 content_type = "text/plain; charset=UTF-8",

441 content = content

442 }

443 return success

444 end

445

446 function Member.object:set_notify_email(notify_email)

447 trace.disable()

448 local expiry = db:query("SELECT now() + '7 days'::interval as expiry", "object").expiry

449 self.notify_email_unconfirmed = notify_email

450 self.notify_email_secret = multirand.string( 24, "23456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz" )

451 self.notify_email_secret_expiry = expiry

452 local content = slot.use_temporary(function()

453 slot.put(_"Hello " .. self.name .. ",\n\n")

454 slot.put(_"Please confirm your email address by clicking the following link:\n\n")

455 slot.put(request.get_absolute_baseurl() .. "index/confirm_notify_email.html?secret=" .. self.notify_email_secret .. "\n\n")

456 slot.put(_"If this link is not working, please open following url in your web browser:\n\n")

457 slot.put(request.get_absolute_baseurl() .. "index/confirm_notify_email.html\n\n")

458 slot.put(_"On that page please enter the confirmation code:\n\n")

459 slot.put(self.notify_email_secret .. "\n\n")

460 end)

461 local success = net.send_mail{

462 envelope_from = config.mail_envelope_from,

463 from = config.mail_from,

464 reply_to = config.mail_reply_to,

465 to = self.notify_email_unconfirmed,

466 subject = config.mail_subject_prefix .. _"Email confirmation request",

467 content_type = "text/plain; charset=UTF-8",

468 content = content

469 }

470 if success then

471 local lock_expiry = db:query("SELECT now() + '1 hour'::interval AS lock_expiry", "object").lock_expiry

472 self.notify_email_lock_expiry = lock_expiry

473 end

474 self:save()

475 return success

476 end

477

478 function Member.object:get_setting(key)

479 return Setting:by_pk(self.id, key)

480 end

481

482 function Member.object:get_setting_value(key)

483 local setting = Setting:by_pk(self.id, key)

484 if setting then

485 return setting.value

486 end

487 end

488

489 function Member.object:set_setting(key, value)

490 local setting = self:get_setting(key)

491 if not setting then

492 setting = Setting:new()

493 setting.member_id = self.id

494 setting.key = key

495 end

496 setting.value = value

497 setting:save()

498 end

499

500 function Member.object:get_setting_maps_by_key(key)

501 return SettingMap:new_selector()

502 :add_where{ "member_id = ?", self.id }

503 :add_where{ "key = ?", key }

504 :add_order_by("subkey")

505 :exec()

506 end

507

508 function Member.object:get_setting_map_by_key_and_subkey(key, subkey)

509 return SettingMap:new_selector()

510 :add_where{ "member_id = ?", self.id }

511 :add_where{ "key = ?", key }

512 :add_where{ "subkey = ?", subkey }

513 :add_order_by("subkey")

514 :optional_object_mode()

515 :exec()

516 end

517

518 function Member.object:set_setting_map(key, subkey, value)

519 setting_map = self:get_setting_map_by_key_and_subkey(key, subkey)

520 if not setting_map then

521 setting_map = SettingMap:new()

522 setting_map.member_id = self.id

523 setting_map.key = key

524 setting_map.subkey = subkey

525 end

526 setting_map.value = value

527 setting_map:save()

528 end

529

530 function Member.object_get:notify_email_locked()

531 return(

532 Member:new_selector()

533 :add_where{ "id = ?", app.session.member.id }

534 :add_where("notify_email_lock_expiry > now()")

535 :count() == 1

536 )

537 end

538

539 function Member.object_get:units_with_voting_right()

540 return(Unit:new_selector()

541 :join("privilege", nil, { "privilege.unit_id = unit.id AND privilege.member_id = ? AND privilege.voting_right", self.id })

542 :exec()

543 )

544 end

545

546 function Member.object:ui_field_text(args)

547 args = args or {}

548 if app.session:has_access("authors_pseudonymous") then

549 -- ugly workaround for getting html into a replaced string and to the user

550 ui.container{label = args.label, label_attr={class="ui_field_label"}, content = function()

551 slot.put(string.format('<span><a href="%s">%s</a></span>',

552 encode.url{

553 module = "member",

554 view = "show",

555 id = self.id,

556 },

557 encode.html(self.name)))

558 end

559 }

560 else

561 ui.field.text{ label = args.label, value = _"[not displayed public]" }

562 end

563 end

564

565 function Member.object:has_voting_right_for_unit_id(unit_id)

566 if not self.__units_with_voting_right_hash then

567 local privileges = Privilege:new_selector()

568 :add_where{ "member_id = ?", self.id }

569 :add_where("voting_right")

570 :exec()

571 self.__units_with_voting_right_hash = {}

572 for i, privilege in ipairs(privileges) do

573 self.__units_with_voting_right_hash[privilege.unit_id] = true

574 end

575 end

576 return self.__units_with_voting_right_hash[unit_id] and true or false

577 end

578

579 function Member.object:has_polling_right_for_unit_id(unit_id)

580 if not self.__units_with_polling_right_hash then

581 local privileges = Privilege:new_selector()

582 :add_where{ "member_id = ?", self.id }

583 :add_where("polling_right")

584 :exec()

585 self.__units_with_polling_right_hash = {}

586 for i, privilege in ipairs(privileges) do

587 self.__units_with_polling_right_hash[privilege.unit_id] = true

588 end

589 end

590 return self.__units_with_polling_right_hash[unit_id] and true or false

591 end

592

593 function Member.object:get_delegatee_member(unit_id, area_id, issue_id)

594 local selector = Member:new_selector()

595 if unit_id then

596 selector:join("delegation", nil, { "delegation.trustee_id = member.id AND delegation.scope = 'unit' AND delegation.unit_id = ? AND delegation.truster_id = ?", unit_id, self.id })

597 end

598 selector:optional_object_mode()

599 return selector:exec()

600 end

601