liquid_feedback_frontend: e3887fea39fa model/member.lua

252 selector:join("privilege", "__model_member__privilege", { "member.id = __model_member__privilege.member_id AND __model_member__privilege.voting_right AND __model_member__privilege.unit_id = ?", args.voting_right_for_unit_id })

253 end

254 if args.admin_search then

255 local search_string = "%" .. args.admin_search .. "%"

256 selector:add_where{ "member.identification ILIKE ? OR member.name ILIKE ?", search_string, search_string }

257 end

258 if args.order then

259 if args.order == "id" then

260 selector:add_order_by("id")

261 elseif args.order == "identification" then

262 selector:add_order_by("identification")

263 elseif args.order == "name" then

264 selector:add_order_by("name")

265 else

266 error("invalid order")

267 end

268 end

269 return selector

270 end

271

272 function Member.object:set_password(password)

273 trace.disable()

274

275 local hash_prefix

276 local salt_length

277

278 local function rounds()

279 return multirand.integer(

280 config.password_hash_min_rounds,

281 config.password_hash_max_rounds

282 )

283 end

284

285 if config.password_hash_algorithm == "crypt_md5" then

286 hash_prefix = "$1$"

287 salt_length = 8

288

289 elseif config.password_hash_algorithm == "crypt_sha256" then

290 hash_prefix = "$5$rounds=" .. rounds() .. "$"

291 salt_length = 16

292

293 elseif config.password_hash_algorithm == "crypt_sha512" then

294 hash_prefix = "$6$rounds=" .. rounds() .. "$"

295 salt_length = 16

296

297 else

298 error("Unknown hash algorithm selected in configuration")

299

300 end

301

302 local hash = extos.crypt(

303 password,

304 hash_prefix .. multirand.string(

305 salt_length,

306 "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz./"

307 )

308 )

309

310 if not hash or hash:sub(1, #hash_prefix) ~= hash_prefix then

311 error("Password hashing algorithm failed")

312 end

313

314 self.password = hash

315 end

316

317 function Member.object:check_password(password)

318 if type(password) == "string" and type(self.password) == "string" then

319 return extos.crypt(password, self.password) == self.password

320 else

321 return false

322 end

323 end

324

325 function Member.object_get:password_hash_needs_update()

326

327 if self.password == nil then

328 return nil

329 end

330

331 local function check_rounds(rounds)

332 if rounds then

333 rounds = tonumber(rounds)

334 if

335 rounds >= config.password_hash_min_rounds and

336 rounds <= config.password_hash_max_rounds

337 then

338 return false

339 end

340 end

341 return true

342 end

343

344 if config.password_hash_algorithm == "crypt_md5" then

345

346 return self.password:sub(1,3) ~= "$1$"

347

348 elseif config.password_hash_algorithm == "crypt_sha256" then

349

350 return check_rounds(self.password:match("^%$5%$rounds=([1-9][0-9]*)%$"))

351

352 elseif config.password_hash_algorithm == "crypt_sha512" then

353

354 return check_rounds(self.password:match("^%$6%$rounds=([1-9][0-9]*)%$"))

355

356 else

357 error("Unknown hash algorithm selected in configuration")

358

359 end

360

361 end

362

363 function Member.object_get:published_contacts()

364 return Member:new_selector()

365 :join('"contact"', nil, '"contact"."other_member_id" = "member"."id"')

366 :add_where{ '"contact"."member_id" = ?', self.id }

367 :add_where("public")

368 :exec()

369 end

370

371 function Member:by_login_and_password(login, password)

372 local selector = self:new_selector()

373 selector:add_where{'"login" = ?', login }

374 selector:add_where('NOT "locked"')

375 selector:optional_object_mode()

376 local member = selector:exec()

377 if member and member:check_password(password) then

378 return member

379 else

380 return nil

381 end

382 end

383

384 function Member:by_login(login)

385 local selector = self:new_selector()

386 selector:add_where{'"login" = ?', login }

387 selector:optional_object_mode()

388 return selector:exec()

389 end

390

391 function Member:by_name(name)

392 local selector = self:new_selector()

393 selector:add_where{'"name" = ?', name }

394 selector:optional_object_mode()

395 return selector:exec()

396 end

397

398 function Member:get_search_selector(search_string)

399 return self:new_selector()

400 :add_field( {'"highlight"("member"."name", ?)', search_string }, "name_highlighted")

401 :add_where{ '"member"."text_search_data" @@ "text_search_query"(?)', search_string }

402 :add_where("activated NOTNULL AND active")

403 end

404

405 function Member.object:send_invitation(template_file, subject)

406 trace.disable()

407 self.invite_code = multirand.string( 24, "23456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz" )

408 self:save()

409

410 local subject = subject

411 local content

412

413 if template_file then

414 local fh = io.open(template_file, "r")

415 content = fh:read("*a")

416 content = (content:gsub("#{invite_code}", self.invite_code))

417 else

418 subject = config.mail_subject_prefix .. _"Invitation to LiquidFeedback"

419 content = slot.use_temporary(function()

420 slot.put(_"Hello\n\n")

421 slot.put(_"You are invited to LiquidFeedback. To register please click the following link:\n\n")

422 slot.put(request.get_absolute_baseurl() .. "index/register.html?invite=" .. self.invite_code .. "\n\n")

423 slot.put(_"If this link is not working, please open following url in your web browser:\n\n")

424 slot.put(request.get_absolute_baseurl() .. "index/register.html\n\n")

425 slot.put(_"On that page please enter the invite key:\n\n")

426 slot.put(self.invite_code .. "\n\n")

427 end)

428 end

429

430 local success = net.send_mail{

431 envelope_from = config.mail_envelope_from,

432 from = config.mail_from,

433 reply_to = config.mail_reply_to,

434 to = self.notify_email_unconfirmed or self.notify_email,

435 subject = subject,

436 content_type = "text/plain; charset=UTF-8",

437 content = content

438 }

439 return success

440 end

441

442 function Member.object:set_notify_email(notify_email)

443 trace.disable()

444 local expiry = db:query("SELECT now() + '7 days'::interval as expiry", "object").expiry

445 self.notify_email_unconfirmed = notify_email

446 self.notify_email_secret = multirand.string( 24, "23456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz" )

447 self.notify_email_secret_expiry = expiry

448 local content = slot.use_temporary(function()

449 slot.put(_"Hello " .. self.name .. ",\n\n")

450 slot.put(_"Please confirm your email address by clicking the following link:\n\n")

451 slot.put(request.get_absolute_baseurl() .. "index/confirm_notify_email.html?secret=" .. self.notify_email_secret .. "\n\n")

452 slot.put(_"If this link is not working, please open following url in your web browser:\n\n")

453 slot.put(request.get_absolute_baseurl() .. "index/confirm_notify_email.html\n\n")

454 slot.put(_"On that page please enter the confirmation code:\n\n")

455 slot.put(self.notify_email_secret .. "\n\n")

456 end)

457 local success = net.send_mail{

458 envelope_from = config.mail_envelope_from,

459 from = config.mail_from,

460 reply_to = config.mail_reply_to,

461 to = self.notify_email_unconfirmed,

462 subject = config.mail_subject_prefix .. _"Email confirmation request",

463 content_type = "text/plain; charset=UTF-8",

464 content = content

465 }

466 if success then

467 local lock_expiry = db:query("SELECT now() + '1 hour'::interval AS lock_expiry", "object").lock_expiry

468 self.notify_email_lock_expiry = lock_expiry

469 end

470 self:save()

471 return success

472 end

473

474 function Member.object:get_setting(key)

475 return Setting:by_pk(self.id, key)

476 end

477

478 function Member.object:get_setting_value(key)

479 local setting = Setting:by_pk(self.id, key)

480 if setting then

481 return setting.value

482 end

483 end

484

485 function Member.object:set_setting(key, value)

486 local setting = self:get_setting(key)

487 if not setting then

488 setting = Setting:new()

489 setting.member_id = self.id

490 setting.key = key

491 end

492 setting.value = value

493 setting:save()

494 end

495

496 function Member.object:get_setting_maps_by_key(key)

497 return SettingMap:new_selector()

498 :add_where{ "member_id = ?", self.id }

499 :add_where{ "key = ?", key }

500 :add_order_by("subkey")

501 :exec()

502 end

503

504 function Member.object:get_setting_map_by_key_and_subkey(key, subkey)

505 return SettingMap:new_selector()

506 :add_where{ "member_id = ?", self.id }

507 :add_where{ "key = ?", key }

508 :add_where{ "subkey = ?", subkey }

509 :add_order_by("subkey")

510 :optional_object_mode()

511 :exec()

512 end

513

514 function Member.object:set_setting_map(key, subkey, value)

515 setting_map = self:get_setting_map_by_key_and_subkey(key, subkey)

516 if not setting_map then

517 setting_map = SettingMap:new()

518 setting_map.member_id = self.id

519 setting_map.key = key

520 setting_map.subkey = subkey

521 end

522 setting_map.value = value

523 setting_map:save()

524 end

525

526 function Member.object_get:notify_email_locked()

527 return(

528 Member:new_selector()

529 :add_where{ "id = ?", app.session.member.id }

530 :add_where("notify_email_lock_expiry > now()")

531 :count() == 1

532 )

533 end

534

535 function Member.object_get:units_with_voting_right()

536 return(Unit:new_selector()

537 :join("privilege", nil, { "privilege.unit_id = unit.id AND privilege.member_id = ? AND privilege.voting_right", self.id })

538 :exec()

539 )

540 end

541

542 function Member.object:ui_field_text(args)

543 args = args or {}

544 if app.session:has_access("authors_pseudonymous") then

545 -- ugly workaround for getting html into a replaced string and to the user

546 ui.container{label = args.label, label_attr={class="ui_field_label"}, content = function()

547 slot.put(string.format('<span><a href="%s">%s</a></span>',

548 encode.url{

549 module = "member",

550 view = "show",

551 id = self.id,

552 },

553 encode.html(self.name)))

554 end

555 }

556 else

557 ui.field.text{ label = args.label, value = _"[not displayed public]" }

558 end

559 end

560

561 function Member.object:has_voting_right_for_unit_id(unit_id)

562 if not self.__units_with_voting_right_hash then

563 local privileges = Privilege:new_selector()

564 :add_where{ "member_id = ?", self.id }

565 :add_where("voting_right")

566 :for_share()

567 :exec()

568 self.__units_with_voting_right_hash = {}

569 for i, privilege in ipairs(privileges) do

570 self.__units_with_voting_right_hash[privilege.unit_id] = true

571 end

572 end

573 return self.__units_with_voting_right_hash[unit_id] and true or false

574 end

575

576 function Member.object:has_polling_right_for_unit_id(unit_id)

577 if not self.__units_with_polling_right_hash then

578 local privileges = Privilege:new_selector()

579 :add_where{ "member_id = ?", self.id }

580 :add_where("polling_right")

581 :for_share()

582 :exec()

583 self.__units_with_polling_right_hash = {}

584 for i, privilege in ipairs(privileges) do

585 self.__units_with_polling_right_hash[privilege.unit_id] = true

586 end

587 end

588 return self.__units_with_polling_right_hash[unit_id] and true or false

589 end

590

591 function Member.object:get_delegatee_member(unit_id, area_id, issue_id)

592 local selector = Member:new_selector()

593 if unit_id then

594 selector:join("delegation", nil, { "delegation.trustee_id = member.id AND delegation.scope = 'unit' AND delegation.unit_id = ? AND delegation.truster_id = ?", unit_id, self.id })

595 end

596 selector:optional_object_mode()

597 return selector:exec()

598 end