mirror of
https://github.com/publiclab/mapknitter.git
synced 2025-12-12 19:29:58 +01:00
21504ea363
* add warpables and users relationship * make front-ui mobile responsive * clean and reorganize images * handle maps with no images * gallery page * link to all maps if no location selected * test warpables and user relationship * add test/reports to gitignore * add pagination for mappers
60 lines
1.5 KiB
Ruby
60 lines
1.5 KiB
Ruby
require 'digest/sha1'
|
|
|
|
class User < ActiveRecord::Base
|
|
has_many :maps
|
|
has_many :tags
|
|
has_many :comments
|
|
has_many :exports
|
|
has_many :warpables, through: :maps
|
|
|
|
validates_presence_of :login
|
|
validates_length_of :login, within: 3..40
|
|
validates_uniqueness_of :login
|
|
validates_length_of :name, maximum: 100
|
|
|
|
validates_presence_of :email
|
|
validates_length_of :email, within: 6..100 # r@a.wk
|
|
validates_uniqueness_of :email
|
|
|
|
# HACK: HACK HACK -- how to do attr_accessible from here?
|
|
# prevents a user from submitting a crafted form that bypasses activation
|
|
# anything else you want your user to change should be added here.
|
|
|
|
# Authenticates a user by their login name and unencrypted password. Returns the user or nil.
|
|
#
|
|
# uff. this is really an authorization, not authentication routine.
|
|
# We really need a Dispatch Chain here or something.
|
|
# This will also let us return a human error message.
|
|
#
|
|
|
|
def login=(value)
|
|
write_attribute :login, (value ? value.downcase : nil)
|
|
end
|
|
|
|
def email=(value)
|
|
write_attribute :email, (value ? value.downcase : nil)
|
|
end
|
|
|
|
def last_action
|
|
maps.order('updated_at DESC').limit(1).first.updated_at
|
|
end
|
|
|
|
# Permissions for editing and deleting resources
|
|
|
|
def owns?(resource)
|
|
resource.user_id.to_i == id
|
|
end
|
|
|
|
def owns_map?(resource)
|
|
resource.respond_to?(:map) && resource.map.user_id.to_i == id
|
|
end
|
|
|
|
def can_delete?(resource)
|
|
owns?(resource) || owns_map?(resource) || role == "admin"
|
|
end
|
|
|
|
def can_edit?(resource)
|
|
owns?(resource)
|
|
end
|
|
end
|