WIP: UI for user access limiting

Author: jamiestamp

app/controllers/admin/editions_controller.rb

@@ -222,6 +222,7 @@ def permitted_edition_attributes
       :scheduled_publication,
       :lock_version,
       :access_limited,
+      :access_limited_named_users,
       :alternative_format_provider_id,
       :opening_at,
       :closing_at,

app/models/concerns/edition/limited_access.rb

@@ -3,6 +3,7 @@ module Edition::LimitedAccess
 
   included do
     enum :access_limited, { disabled: 0, organisations: 1, named_users: 2 }
+    has_many :edition_user_accesses, dependent: :destroy, inverse_of: :edition
     after_initialize :set_access_limited
   end
 

app/models/edition.rb

@@ -443,6 +443,14 @@ def error_labels
     {}
   end
 
+  def access_limited_named_users=(users)
+    user_emails = users.split(",").map(&:strip).reject(&:empty?)
+
+    user_emails.each do |email|
+      edition_user_accesses.create!(email: email)
+    end
+  end
+
 private
 
   def date_for_government

app/views/admin/editions/_access_limiting_fields.html.erb

@@ -1,22 +1,38 @@
 <div class="govuk-!-margin-bottom-6">
-  <%= render "govuk_publishing_components/components/fieldset", {
-    legend_text: "Limit access",
-    heading_level: 3,
-    heading_size: "m",
-  } do %>
-    <%= form.hidden_field :access_limited, value: "disabled" %>
-
-    <%= render "govuk_publishing_components/components/checkboxes", {
+    <%= render "govuk_publishing_components/components/radio", {
+      heading: "Limit access",
       name: "edition[access_limited]",
       id: "edition_access_limited",
-      error_items: errors_for(edition.errors, :access_limited),
       items: [
         {
-          label: "Limit access to publishers from organisations associated with this document before you publish",
-          value: "organisations",
-          checked: edition.access_limited?,
+          value: :disabled,
+          text: "No – This document should be available to all publishers",
+          bold: true,
+          checked: edition.disabled?,
+        },
+        {
+          value: :organisations,
+          text: "Limit access to publishers from organisations associated with this document",
+          bold: true,
+          checked: edition.organisations?,
+        },
+        {
+          value: :named_users,
+          text: "Limit access to named publishers",
+          bold: true,
+          checked: edition.named_users?,
+          conditional: (render "govuk_publishing_components/components/textarea", {
+            label: {
+              text: "Add publishers who will have access",
+              bold: true,
+            },
+            name: "edition[access_limited_named_users]",
+            textarea_id: "edition_access_limited_named_users",
+            error_message: nil,
+            value: nil,
+            hint: "Add the emails of the publishers who will have access to this document before publishing. After publishing the document will be available to all publishers in the organisation associated with this document"
+          }),
         },
       ],
     } %>
-  <% end %>
 </div>

db/schema.rb

@@ -358,7 +358,6 @@
 
   create_table "editions", id: :integer, charset: "utf8mb4", collation: "utf8mb4_unicode_ci", force: :cascade do |t|
     t.integer "access_limited", default: 0, null: false
-    t.integer "accessible_by", default: 0, null: false
     t.string "additional_related_mainstream_content_title"
     t.string "additional_related_mainstream_content_url"
     t.boolean "all_nation_applicability", default: true
@@ -626,7 +625,7 @@
     t.integer "edition_id"
     t.integer "image_data_id"
     t.datetime "updated_at", precision: nil
-    t.string "usage"
+    t.string "usage", null: false
     t.index ["edition_id"], name: "index_images_on_edition_id"
     t.index ["image_data_id"], name: "index_images_on_image_data_id"
   end