From e7e16318d056dbd9ec272085487cce6039627b09 Mon Sep 17 00:00:00 2001 From: elijah Date: Sun, 31 Jan 2016 14:43:19 -0800 Subject: remove cert fingerprints for disabled users, so that they cannot send email anymore. closes #7690 --- app/models/identity.rb | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) (limited to 'app/models/identity.rb') diff --git a/app/models/identity.rb b/app/models/identity.rb index 9dc9c7a..e4162c8 100644 --- a/app/models/identity.rb +++ b/app/models/identity.rb @@ -1,3 +1,11 @@ +# +# NOTE: there is some confusing terminology between User and Identity: +# If a user is disabled, the user still exists but has been marked as disabled +# and this condition can be easily reversed. If an identity is disabled, then +# it loses any association with the user and exists only to reserve that username +# and prevent anyone else from registering it. +# + class Identity < CouchRest::Model::Base include LoginFormatValidation @@ -59,6 +67,16 @@ class Identity < CouchRest::Model::Base end end + # if an identity is disabled, it loses contact + # with its former user. but sometimes we want to keep the association + # and remove the fingerprints that allow the user to send email. + def self.remove_cert_fingerprints_for(user) + Identity.by_user_id.key(user.id).each do |identity| + identity.write_attribute(:cert_fingerprints, {}) + identity.save + end + end + def self.destroy_all_for(user) Identity.by_user_id.key(user.id).each do |identity| identity.destroy -- cgit v1.2.3