Add policies and scopes for all admin actions

Profile tab:

• Only user that profile belongs to should be able to update it
• Only user that profile belongs to should be able to view edit page for it.
• Only user that profile belongs to should be able to update it. (including thumbnail update)

Saved projects tab:

• Only users own favorited projects should be listed on this tab
• A user should not be able to favorite a job for someone else.

Account settings tab:

• A user can only update their own email and password

Manage listings tab:

• Only listings a user created will show up on this tab.
• Only users with an employee role can view this tab

Notifications tab:

• A user can only update notification settings for themself.

Billing details:

• A user can only edit their own payment method.
• A user can only cancel their own subscription.
• The user can only view their own billing details.

This is a list of all the ones I could think of, any other edge cases I may have missed.

I have several react components and rails views that don't look to be in use anymore, let's remove those.

PR #47

A job seeker will need to be approved before having access to the site.

The user will need a status on the model indicating if they are pending approval or not.

They will need the "Job Seeker" role.

They will need to be redirected to the "Pending approval" page if they are not approved yet.

There will need to be a pending approval route.

There will need to be a pending approval view and controller.

We need to implement a third party community plugin and connect it to the "Community" link in the Nav.

Similar to what @arthur-nesterenko just did on the account settings page, we need to display errors on the page when backend validations fail.

example:

The jobs are not loading on the Job board page.

This is probably related to the other JS issues. This is the error on the job page:

When I try to upload a thumbnail on the create job page:

/employer/jobs/new

I get this error in the server logs:

web_1  | NoMethodError (undefined method `to_sym' for nil:NilClass):
web_1  |
web_1  | app/services/thumbnail_updater.rb:41:in `model_type'
web_1  | app/services/thumbnail_updater.rb:14:in `update_thumbnail'
web_1  | app/services/thumbnail_updater.rb:10:in `call!'
web_1  | app/controllers/api/v1/thumbnails_controller.rb:7:in `update'

The create job page is styled but all params need to be allowed for the create action in the controller. Add these params and verify that it creates the new job correctly.

Add the javascript validations we have in place to the create listing page.

As can be seen in the above image, the color of the side nav link needs to update to the proper color for "Your profile" since that is the page I am on. This also needs to happen for the rest of the links.

It looks like this is a turbo links issue, because the links have the correct color if you refresh the page.

There don't seem to be any social media links on the live listing page even though the design shows them:

https://app.zeplin.io/project/5c5b1d4ccf0813020c160b10/screen/5c5b2001bcdb4a358321b977

The profile page won't update because it expects there to be a password:

Add policies and scopes for CRUD actions for listings.

Rules:

• A user can only update a listing that belongs to them
• A user can only delete a listing that belongs to them.
• Job listings on the "Manage listings" tab should be scoped by current user
• Only users with a role of "employer" can Create/Update/Delete listings
• Listing preview pages should only be accessible to the employer user that created it.

Any other edge cases I may have missed.

When a listing goes live, it should redirect to the "Manage listings" tab of the employer dashboard with the above flash displayed.

https://app.zeplin.io/project/5c5b1d4ccf0813020c160b10/screen/5c5b2001b02672356b4ed105

We need to remove the "Save for later" button from the create listing page.

We need to add a status enum to the Job model.

When "Preview listing" is clicked on the create listing page, it should create a new job in the database with a status of preview. Create listing should already work.

After the job is saved it should redirect to the preview page for that job:

employer/preview/job/:job_id

We also need some sort of identifier on the job cards on the "Manage listings" tab of the admin dashboard. There also needs to be some sort of indicator that a job is in preview status, or published status.

The image uploader on the job page needs to display a cached version of the image on the page instead of making a request to the thumbnail endpoint.

Then when the job is saved, it should save the image with it.

Style the billing details page according to the designs.

Desktop:

https://app.zeplin.io/project/5c5b1d4ccf0813020c160b10/screen/5c5b23bf7e7c4b6c349ebd4a

Mobile:

https://app.zeplin.io/project/5c5b1d4ccf0813020c160b10/screen/5c5b23bebbafef352f2021fb

This is ready, but there is nothing in the design regarding cancel, expiration date, or when a subscription is in the pending cancellation state. Just add those parts in a way that makes sense according to the design.

The update payment method button should reveal the update card form. There is a javascript toggle() method for this instantiated. If you'd like to do it a different way, that is up to you.

I am able to add users work experiences:

However, on the edit profile page, these user experiences don't show up, it still shows as empty:

Currently the filters on the job board page don't work. They need to be connected to the API endpoints to filter the jobs.

#53

The test suite is almost non-existent. Need to go through and write specs.

Would also be good to set up some CI

Desktop Nav should look like this:

Mobile nav should have same links as Desktop

We need to add a "Sign out" link to the nav.

I would like the "Sign out" on the desktop nav to be in a bubble drop down when you hover over the image on the page. Maybe something like this:

But it will only have "Sign out" in it.

The little icon on the right of each job card on the job board page needs to be hooked up to the api endpoint. When clicked it should add the job to their favorites and change icon to a filled color.

There is no design for this, but we need some sort of UX indicator that a listing is live or not:

https://app.zeplin.io/project/5c5b1d4ccf0813020c160b10/screen/5c5b2001b02672356b4ed105

https://app.zeplin.io/project/5c5b1d4ccf0813020c160b10/screen/5c5b253c8ba127425a0e12c8

It should send users to this page when they click “Join as a creative” after signing up. This is same as the edit template but has “Create your profile at top”.

We will need a new template for the profile page. We will need new and create actions in the controller.

The href for the website button on the live listing show page, doesn't have http on it so it tries to open the link using the skill deploy domain:

Maybe we solve this with validations?

When the preview page for a non-live / saved listings is visited, there is a button to "post" the listing:

When this button is pressed the job should be moved into a "published" state. It should redirect to the "Manage listings" tab of the employer dashboard. It should display a success flash message like the one below:

https://app.zeplin.io/project/5c5b1d4ccf0813020c160b10/screen/5c5b2001b02672356b4ed105

https://app.zeplin.io/project/5c5b1d4ccf0813020c160b10/screen/5c5b20004e18973559529575

Add pundit policies for the employer jobs controller action.

Only users with a role of "Employer" and who have an active paid subscription should be able to access those controller actions.

If their subscription is past due they should be redirected to the edit billing page.

If they don't have a subscription or it is cancelled, they should be redirected to the new subscription page.

If they have the "Job seeker" role they should be redirected to the new subscription sign up page.

PR #50

Add a button called "Send a message" to the job seekers profile as shown in this design:

https://app.zeplin.io/project/5c5b1d4ccf0813020c160b10/screen/5df1c59765649aafde74aefd

When that button is clicked, this modal should pop up:

https://app.zeplin.io/project/5c5b1d4ccf0813020c160b10/screen/5df1c597213e9ea72c8768f6

On the job board right now only one filter works at a time, we need to hook it up to allow filtering by multiple filters.

https://app.zeplin.io/project/5c5b1d4ccf0813020c160b10/screen/5c5b23bf87eef642afb22ec0

This page needs to be built, this is the backend ticket.

We have to two pages that update a profile, from the perspective of Devise, we don't require password for updating fields on the "Your profile" tab. This will probably require some sort of override in Devise.

Add a view for this page with the form elements (no need to style, there is a separate ticket for that).

Make "Account settings" link in side nav functional to this new view.

Users notification settings need to be hooked up to persist on the user in the backend.

https://app.zeplin.io/project/5c5b1d4ccf0813020c160b10/screen/5c5b23be4e1897355952bddc

Desktop:

https://app.zeplin.io/project/5c5b1d4ccf0813020c160b10/screen/5c5b253cfb271342362efb8f

Mobile:

https://app.zeplin.io/project/5c5b1d4ccf0813020c160b10/screen/5c5b253b1ba0a0431111b623

https://app.zeplin.io/project/5c5b1d4ccf0813020c160b10/screen/5c5b1ffdc48ceb5a290a6877

The above flash message has been added and will show up on the new listing page when you sign up for a new subscription.

The flash message needs to be designed according to the designs above. I am not exactly sure how we are going to add that link onto the flash message itself yet. If you can at least style what is there that would be great.

This flash message styling will be used throughout the application. You can find the code for flash messages in:

app/views/application/_flash_messages.html.haml

The image uploader works now, so the images need to be sized and formatted properly.

PR #48

Right now, the job board isn't displaying the image attached to the job if it exists.

When a new job seeker signs up, they should be put into a pending status until they are approved by an admin.

We need to add an enum field to the user model called review_status with possible values of [:pending, :complete].

We then need to prevent job seekers from viewing any pages until they have a review_status of complete.

#51

When I create a job at the following url /employer/jobs/new, and select an option for the remote status of a job:

It doesn't seem to save the selection to the record. When I visit the edit page for this job next, it doesn't fill in my choice on that page.

Add url validations to the job model like we have on the social media profile:

It should be as simple as adding the same code above for the job model ☝️

Maybe add some sort of location validation for the location field.

In case you were wondering, url is a custom validator inside app/validators/url_validator.rb.

The add work experience section and the "Your skills" section above that are not working due to a JS bug:

Build the account settings page:

Desktop:

https://app.zeplin.io/project/5c5b1d4ccf0813020c160b10/screen/5c5b23bf87eef642afb22ec0

Mobile:

https://app.zeplin.io/project/5c5b1d4ccf0813020c160b10/screen/5c5b23bdbcdb4a358321e0fc

Build the billing details page.

Desktop:

https://app.zeplin.io/project/5c5b1d4ccf0813020c160b10/screen/5c5b23bf7e7c4b6c349ebd4a

Mobile:

https://app.zeplin.io/project/5c5b1d4ccf0813020c160b10/screen/5c5b23bebbafef352f2021fb

We need to setup staging and production environments in Heroku.

Add polices and scopes for create profile

• Only users without a profile should be able to visit the new profile page
• Only users without a profile should be able to create a profile
• A user should only be able to create a profile for their own account

Pending approval page:

• The nav men should be blank

Desktop:

https://app.zeplin.io/project/5c5b1d4ccf0813020c160b10/screen/5c5b23bf87eef642afb22ec0

Mobile:

https://app.zeplin.io/project/5c5b1d4ccf0813020c160b10/screen/5c5b23bdbcdb4a358321e0fc

Also need to style the flash notice after successfully updating password, and the error message when it fails.

• Caching
• Dynos
• n + 1 queries (should we prevent n + 1 or use russian doll caching?)

Backend:

This page needs to be added with a route and controller.

The payment form needs to work with the unity gem. It needs to update payment method through Unity with Stripe.

Verify it updates the token in the local db and in Stripe admin.

https://app.zeplin.io/project/5c5b1d4ccf0813020c160b10/screen/5c5b23bf7e7c4b6c349ebd4a

The admin container widths seem to be a different size on every tab:

https://www.loom.com/share/9ad1362f51714a84a05d7d65394aaacd

We need to add Sentry to the app to catch all errors at least for now.

This error is showing up on the job index and show pages:

The job show page also isn't displaying the empty photo image.

Mobile design:

https://app.zeplin.io/project/5c5b1d4ccf0813020c160b10/screen/5c5b2000df967742a322d24a

Desktop design:

https://app.zeplin.io/project/5c5b1d4ccf0813020c160b10/screen/5c5b2001a0d05c42545f1990

The template for this page is located at /app/views/unity/subscriptions/new.html.haml
The dropin form partial is located at /app/views/unity/payment_method/_card_details.html.haml

To get to this page, sign up as a new user, then click "Get Started" under "Hire Creatives":

This will direct you to the new subscription sign up page at /subscription/new. Do not change the id of the new subscription form from braintree-payment-form, otherwise the drop in will not work.

There is a hidden field with a name of plan_id that will contain the plans gateway id.

We are using the Stripe dropin for the payment form. Try not to change the javascript for the Stripe dropin form, but if you absolutely need to alter the JS to style it properly you can ask me how to do that and I will show you.