1 files changed, 59 insertions, 0 deletions
diff --git a/app/models/user.rb b/app/models/user.rb
new file mode 100644
index 0000000..7e8ade3
--- /dev/null
+++ b/app/models/user.rb
@@ -0,0 +1,59 @@
+class User < ActiveRecord::Base
+
+  hobo_user_model # Don't put anything above this
+
+  fields do
+    name          :string, :required, :unique
+    email_address :email_address, :login => true
+    administrator :boolean, :default => false
+    timestamps
+  end
+
+  # This gives admin rights to the first sign-up.
+  # Just remove it if you don't want that
+  before_create { |user| user.administrator = true if !Rails.env.test? && count == 0 }
+
+  
+  # --- Signup lifecycle --- #
+
+  lifecycle do
+
+    state :active, :default => true
+
+    create :signup, :available_to => "Guest",
+           :params => [:name, :email_address, :password, :password_confirmation],
+           :become => :active
+             
+    transition :request_password_reset, { :active => :active }, :new_key => true do
+      UserMailer.deliver_forgot_password(self, lifecycle.key)
+    end
+
+    transition :reset_password, { :active => :active }, :available_to => :key_holder,
+               :params => [ :password, :password_confirmation ]
+
+  end
+  
+
+  # --- Permissions --- #
+
+  def create_permitted?
+    false
+  end
+
+  def update_permitted?
+    acting_user.administrator? || 
+      (acting_user == self && only_changed?(:email_address, :crypted_password,
+                                            :current_password, :password, :password_confirmation))
+    # Note: crypted_password has attr_protected so although it is permitted to change, it cannot be changed
+    # directly from a form submission.
+  end
+
+  def destroy_permitted?
+    acting_user.administrator?
+  end
+
+  def view_permitted?(field)
+    true
+  end
+
+end