User summary method is now more secure. Email change method prtects account SQL injec...

[selectricity-live] / app / models / election.rb

diff --git a/app/models/election.rb b/app/models/election.rb
index 08ef1a57c025d7fe5192d0dc396b828ada9a12f0..4ce571a468c4aa91a39fd6696e7a76161e706afd 100644 (file)
--- a/app/models/election.rb
+++ b/app/models/election.rb
@@ -2,19 +2,8 @@
 # Copyright (C) 2007, 2008 Benjamin Mako Hill <mako@atdot.cc>
 # Copyright (C) 2007 Massachusetts Institute of Technology
 #
-# This program is free software: you can redistribute it and/or modify
-# it under the terms of the GNU Affero General Public License as
-# published by the Free Software Foundation, either version 3 of the
-# License, or (at your option) any later version.
-#
-# This program is distributed in the hope that it will be useful, but
-# WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-# Affero General Public License for more details.
-#
-# You should have received a copy of the GNU Affero General Public
-# License along with this program.  If not, see
-# <http://www.gnu.org/licenses/>.
+# This program is free software. Please see the COPYING file for
+# details.
 
 class Election < ActiveRecord::Base
   has_many :candidates
@@ -22,9 +11,12 @@ class Election < ActiveRecord::Base
   has_many :votes
   belongs_to :user
   validates_presence_of :name, :description
-  
+
+  # enforce constraints associated with dependencies (i.e., a kiosk
+  # election can't also be unauthenticated)
+  before_save :enforce_constraints
+
   #validate that method is one of the listed election types
-  
   attr_reader :plurality_result
   attr_reader :approval_result
   attr_reader :condorcet_result
@@ -32,7 +24,7 @@ class Election < ActiveRecord::Base
   attr_reader :borda_result
   
   require 'date'
-  
+ 
   def initialize(params={})
     super
     self.enddate = read_attribute( :enddate ) || \
@@ -82,11 +74,11 @@ class Election < ActiveRecord::Base
 
   def activate!
     self.active = 1
-    self.save!
+    self.save
   end
   
   def quickvote?
-    self.class == 'QuickVote'
+    self.class == QuickVote
   end
 
   def active?
@@ -100,6 +92,10 @@ class Election < ActiveRecord::Base
   def authenticated?
     authenticated
   end
+
+  def kiosk?
+    kiosk
+  end
   
   def shortdesc
     shortdesc = description.split(/\n/)[0]
@@ -171,6 +167,30 @@ class Election < ActiveRecord::Base
     
     names
   end
+
+  def candidate_hash
+    hash = {}
+    self.candidates.each {|c| hash[c.id] = c}
+    return hash
+  end
+
+ 
+  # TODO now that this code is in here, we should go ahead and remove
+  # date checking from other places in the code
+  def after_find
+    if self.active < 2 and self.enddate < Time.now 
+      self.active = 2
+      self.save
+    end
+  end
+
+  private
+  def enforce_constraints
+    # kiosks can't be authenticated
+    self.authenticated = false if kiosk?
+    return true
+  end
+
 end