class User < ActiveRecord::Base
  include SentientUser
  include StonePath
  

  stonepath_workowner
  workowner_for :complaints
  
  stonepath_workbench
  workbench_for :follow_up_actions


  
  # new columns need to be added here to be writable through mass assignment
  attr_accessible :username, :role, :email, :password, :password_confirmation
  
  attr_accessor :password
  before_save :prepare_password
  
  validates_presence_of :username
  validates_uniqueness_of :username, :email, :allow_blank => true
  validates_format_of :username,
                      :with => /^[-\w\._@]+$/i,
                      :allow_blank => true,
                      :message => "should only contain letters, numbers, or .-_@"
  validates_format_of :email, :with => /^[-a-z0-9_+\.]+\@([-a-z0-9]+\.)+[a-z0-9]{2,4}$/i
  validates_presence_of :password, :on => :create
  validates_confirmation_of :password
  validates_length_of :password, :minimum => 4, :allow_blank => true
  
  # login can be either username or email address
  def self.authenticate(login, pass)
    user = find_by_username(login) || find_by_email(login)
    return user if user && user.matching_password?(pass)
  end
  
  def matching_password?(pass)
    self.password_hash == encrypt_password(pass)
  end
  
  def self.random_user_in_role(role)
    @users = User.find_all_by_role(role)
    return @users[rand(@users.size)]
  end
    
  private
  
  def prepare_password
    unless password.blank?
      self.password_salt = Digest::SHA1.hexdigest([Time.now, rand].join)
      self.password_hash = encrypt_password(password)
    end
  end
  
  def encrypt_password(pass)
    Digest::SHA1.hexdigest([pass, password_salt].join)
  end
end
