liquid_feedback_frontend: fe39c1fb541b model/member.lua

252 selector:join("privilege", "__model_member__privilege", { "member.id = __model_member__privilege.member_id AND __model_member__privilege.voting_right AND __model_member__privilege.unit_id = ?", args.voting_right_for_unit_id })

253 end

254 if args.admin_search then

255 local search_string = "%" .. args.admin_search .. "%"

256 selector:add_where{ "member.identification ILIKE ? OR member.name ILIKE ?", search_string, search_string }

257 end

258 if args.order then

259 if args.order == "id" then

260 selector:add_order_by("id")

261 elseif args.order == "identification" then

262 selector:add_order_by("identification")

263 elseif args.order == "name" then

264 selector:add_order_by("name")

265 else

266 error("invalid order")

267 end

268 end

269 return selector

270 end

271

272 function Member.object:set_password(password)

273 trace.disable()

274 local hash = extos.crypt(

275 password,

276 "$1$" .. multirand.string(

277 8,

278 "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz./"

279 )

280 )

281 assert(hash, "extos.crypt failed")

282 self.password = hash

283 end

284

285 function Member.object:check_password(password)

286 if type(password) == "string" and type(self.password) == "string" then

287 return extos.crypt(password, self.password) == self.password

288 else

289 return false

290 end

291 end

292

293 function Member.object_get:published_contacts()

294 return Member:new_selector()

295 :join('"contact"', nil, '"contact"."other_member_id" = "member"."id"')

296 :add_where{ '"contact"."member_id" = ?', self.id }

297 :add_where("public")

298 :exec()

299 end

300

301 function Member:by_login_and_password(login, password)

302 local selector = self:new_selector()

303 selector:add_where{'"login" = ?', login }

304 selector:add_where('NOT "locked"')

305 selector:optional_object_mode()

306 local member = selector:exec()

307 if member and member:check_password(password) then

308 return member

309 else

310 return nil

311 end

312 end

313

314 function Member:by_login(login)

315 local selector = self:new_selector()

316 selector:add_where{'"login" = ?', login }

317 selector:optional_object_mode()

318 return selector:exec()

319 end

320

321 function Member:by_name(name)

322 local selector = self:new_selector()

323 selector:add_where{'"name" = ?', name }

324 selector:optional_object_mode()

325 return selector:exec()

326 end

327

328 function Member:get_search_selector(search_string)

329 return self:new_selector()

330 :add_field( {'"highlight"("member"."name", ?)', search_string }, "name_highlighted")

331 :add_where{ '"member"."text_search_data" @@ "text_search_query"(?)', search_string }

332 :add_where("activated NOTNULL AND active")

333 end

334

335 function Member.object:send_invitation(template_file, subject)

336 trace.disable()

337 self.invite_code = multirand.string( 24, "23456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz" )

338 self:save()

339

340 local subject = subject

341 local content

342

343 if template_file then

344 local fh = io.open(template_file, "r")

345 content = fh:read("*a")

346 content = (content:gsub("#{invite_code}", self.invite_code))

347 else

348 subject = config.mail_subject_prefix .. _"Invitation to LiquidFeedback"

349 content = slot.use_temporary(function()

350 slot.put(_"Hello\n\n")

351 slot.put(_"You are invited to LiquidFeedback. To register please click the following link:\n\n")

352 slot.put(request.get_absolute_baseurl() .. "index/register.html?invite=" .. self.invite_code .. "\n\n")

353 slot.put(_"If this link is not working, please open following url in your web browser:\n\n")

354 slot.put(request.get_absolute_baseurl() .. "index/register.html\n\n")

355 slot.put(_"On that page please enter the invite key:\n\n")

356 slot.put(self.invite_code .. "\n\n")

357 end)

358 end

359

360 local success = net.send_mail{

361 envelope_from = config.mail_envelope_from,

362 from = config.mail_from,

363 reply_to = config.mail_reply_to,

364 to = self.notify_email_unconfirmed or self.notify_email,

365 subject = subject,

366 content_type = "text/plain; charset=UTF-8",

367 content = content

368 }

369 return success

370 end

371

372 function Member.object:set_notify_email(notify_email)

373 trace.disable()

374 local expiry = db:query("SELECT now() + '7 days'::interval as expiry", "object").expiry

375 self.notify_email_unconfirmed = notify_email

376 self.notify_email_secret = multirand.string( 24, "23456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz" )

377 self.notify_email_secret_expiry = expiry

378 local content = slot.use_temporary(function()

379 slot.put(_"Hello " .. self.name .. ",\n\n")

380 slot.put(_"Please confirm your email address by clicking the following link:\n\n")

381 slot.put(request.get_absolute_baseurl() .. "index/confirm_notify_email.html?secret=" .. self.notify_email_secret .. "\n\n")

382 slot.put(_"If this link is not working, please open following url in your web browser:\n\n")

383 slot.put(request.get_absolute_baseurl() .. "index/confirm_notify_email.html\n\n")

384 slot.put(_"On that page please enter the confirmation code:\n\n")

385 slot.put(self.notify_email_secret .. "\n\n")

386 end)

387 local success = net.send_mail{

388 envelope_from = config.mail_envelope_from,

389 from = config.mail_from,

390 reply_to = config.mail_reply_to,

391 to = self.notify_email_unconfirmed,

392 subject = config.mail_subject_prefix .. _"Email confirmation request",

393 content_type = "text/plain; charset=UTF-8",

394 content = content

395 }

396 if success then

397 local lock_expiry = db:query("SELECT now() + '1 hour'::interval AS lock_expiry", "object").lock_expiry

398 self.notify_email_lock_expiry = lock_expiry

399 end

400 self:save()

401 return success

402 end

403

404 function Member.object:get_setting(key)

405 return Setting:by_pk(self.id, key)

406 end

407

408 function Member.object:get_setting_value(key)

409 local setting = Setting:by_pk(self.id, key)

410 if setting then

411 return setting.value

412 end

413 end

414

415 function Member.object:set_setting(key, value)

416 local setting = self:get_setting(key)

417 if not setting then

418 setting = Setting:new()

419 setting.member_id = self.id

420 setting.key = key

421 end

422 setting.value = value

423 setting:save()

424 end

425

426 function Member.object:get_setting_maps_by_key(key)

427 return SettingMap:new_selector()

428 :add_where{ "member_id = ?", self.id }

429 :add_where{ "key = ?", key }

430 :add_order_by("subkey")

431 :exec()

432 end

433

434 function Member.object:get_setting_map_by_key_and_subkey(key, subkey)

435 return SettingMap:new_selector()

436 :add_where{ "member_id = ?", self.id }

437 :add_where{ "key = ?", key }

438 :add_where{ "subkey = ?", subkey }

439 :add_order_by("subkey")

440 :optional_object_mode()

441 :exec()

442 end

443

444 function Member.object:set_setting_map(key, subkey, value)

445 setting_map = self:get_setting_map_by_key_and_subkey(key, subkey)

446 if not setting_map then

447 setting_map = SettingMap:new()

448 setting_map.member_id = self.id

449 setting_map.key = key

450 setting_map.subkey = subkey

451 end

452 setting_map.value = value

453 setting_map:save()

454 end

455

456 function Member.object_get:notify_email_locked()

457 return(

458 Member:new_selector()

459 :add_where{ "id = ?", app.session.member.id }

460 :add_where("notify_email_lock_expiry > now()")

461 :count() == 1

462 )

463 end

464

465 function Member.object_get:units_with_voting_right()

466 return(Unit:new_selector()

467 :join("privilege", nil, { "privilege.unit_id = unit.id AND privilege.member_id = ? AND privilege.voting_right", self.id })

468 :exec()

469 )

470 end

471

472 function Member.object:ui_field_text(args)

473 args = args or {}

474 if app.session:has_access("authors_pseudonymous") then

475 -- ugly workaround for getting html into a replaced string and to the user

476 ui.container{label = args.label, label_attr={class="ui_field_label"}, content = function()

477 slot.put(string.format('<span><a href="%s">%s</a></span>',

478 encode.url{

479 module = "member",

480 view = "show",

481 id = self.id,

482 },

483 encode.html(self.name)))

484 end

485 }

486 else

487 ui.field.text{ label = args.label, value = _"[not displayed public]" }

488 end

489 end

490

491 function Member.object:has_voting_right_for_unit_id(unit_id)

492 if not self.__units_with_voting_right_hash then

493 local privileges = Privilege:new_selector()

494 :add_where{ "member_id = ?", self.id }

495 :add_where("voting_right")

496 :for_share()

497 :exec()

498 self.__units_with_voting_right_hash = {}

499 for i, privilege in ipairs(privileges) do

500 self.__units_with_voting_right_hash[privilege.unit_id] = true

501 end

502 end

503 return self.__units_with_voting_right_hash[unit_id] and true or false

504 end

505

506 function Member.object:get_delegatee_member(unit_id, area_id, issue_id)

507 local selector = Member:new_selector()

508 if unit_id then

509 selector:join("delegation", nil, { "delegation.trustee_id = member.id AND delegation.scope = 'unit' AND delegation.unit_id = ? AND delegation.truster_id = ?", unit_id, self.id })

510 end

511 selector:optional_object_mode()

512 return selector:exec()

513 end