6772312ea7
The primary license of the project is changing to: AGPL-3.0-or-later WITH Web-Template-Output-Additional-Permission-3.0-or-later with some specific files to be licensed under the one of two licenses: CC0-1.0 LGPL-3.0-or-later This commit is one of the many steps to relicense the entire codebase. Documentation granting permission for this relicensing (from all past contributors who hold copyrights) is on file with Software Freedom Conservancy, Inc.
49 lines
1.7 KiB
Ruby
49 lines
1.7 KiB
Ruby
# License: AGPL-3.0-or-later WITH Web-Template-Output-Additional-Permission-3.0-or-later
|
|
class Role < ActiveRecord::Base
|
|
|
|
Names = [
|
|
:super_admin, # global access
|
|
:super_associate, # global access to everything except bank acct info
|
|
:nonprofit_admin, # npo scoped access to everything
|
|
:nonprofit_associate, # npo scoped access to everything except bank acct info
|
|
:campaign_editor, # fundraising tools, without dashboard access
|
|
:event_editor # //
|
|
]
|
|
|
|
attr_accessible \
|
|
:name,
|
|
:user_id, :user,
|
|
:host, :host_id, :host_type # nil, "Nonprofit", "Campaign", "Event"
|
|
|
|
belongs_to :user
|
|
belongs_to :host, polymorphic: true
|
|
|
|
scope :super_admins, -> {where(name: :super_admin)}
|
|
scope :super_associate, -> {where(name: :super_associate)}
|
|
scope :nonprofit_admins, -> {where(name: :nonprofit_admin)}
|
|
scope :nonprofit_personnel, -> {where(name: [:nonprofit_associate, :nonprofit_admin])}
|
|
scope :campaign_editors, -> {where(name: :campaign_editor)}
|
|
scope :event_editors, -> {where(name: :event_editor)}
|
|
|
|
validates :user, presence: true
|
|
validates :name, inclusion: {in: Names}
|
|
validates :host, presence: true, unless: [:super_admin?, :super_associate?]
|
|
|
|
def name; super.to_sym; end
|
|
def super_admin?; name == :super_admin; end
|
|
def super_associate?; name == :super_associate; end
|
|
|
|
def self.create_for_nonprofit(role_name, email, nonprofit)
|
|
user = User.find_or_create_with_email(email)
|
|
role = Role.create(user: user, name: role_name, host: nonprofit)
|
|
return role unless role.valid?
|
|
if user.confirmed?
|
|
NonprofitAdminMailer.delay.existing_invite(role)
|
|
else
|
|
NonprofitAdminMailer.delay.new_invite(role, user.make_confirmation_token!)
|
|
end
|
|
return role
|
|
end
|
|
|
|
end
|
|
|