From 6046f3c63bda5ef2dff46385d5ff5369f75f7056 Mon Sep 17 00:00:00 2001
From: Antoine LAURENT <antoine.laurent@inclusion.gouv.fr>
Date: Mon, 14 Oct 2024 11:51:42 +0200
Subject: [PATCH] apply: Mask sender email when he left his organization

---
 itou/job_applications/models.py               | 13 +++++
 .../includes/job_application_sender_info.html | 17 ++++++
 tests/job_applications/test_models.py         | 58 +++++++++++++++++++
 .../www/apply/__snapshots__/test_process.ambr | 48 ++++++++++++++-
 tests/www/apply/test_process.py               | 46 +++++++++++++++
 5 files changed, 180 insertions(+), 2 deletions(-)
 create mode 100644 tests/job_applications/test_models.py

diff --git a/itou/job_applications/models.py b/itou/job_applications/models.py
index 12d27d237f3..9f36f9305f8 100644
--- a/itou/job_applications/models.py
+++ b/itou/job_applications/models.py
@@ -1,4 +1,5 @@
 import uuid
+from functools import cached_property
 
 from django.conf import settings
 from django.core.exceptions import ValidationError
@@ -938,6 +939,18 @@ def get_sender_kind_display(self):
         else:
             return SenderKind(self.sender_kind).label
 
+    @cached_property
+    def sender_left_org(self):
+        if self.sender_prescriber_organization_id:
+            return not (
+                self.sender.prescribermembership_set.active()
+                .filter(organization_id=self.sender_prescriber_organization_id)
+                .exists()
+            )
+        if self.sender_company_id:
+            return not (self.sender.companymembership_set.active().filter(company_id=self.sender_company_id).exists())
+        return False
+
     @property
     def is_in_transferable_state(self):
         return self.state in JobApplicationWorkflow.CAN_BE_TRANSFERRED_STATES
diff --git a/itou/templates/apply/includes/job_application_sender_info.html b/itou/templates/apply/includes/job_application_sender_info.html
index 4b0e570cbbd..1ca020f7550 100644
--- a/itou/templates/apply/includes/job_application_sender_info.html
+++ b/itou/templates/apply/includes/job_application_sender_info.html
@@ -1,6 +1,21 @@
 {% load format_filters %}
 {% load matomo %}
 
+{% if job_application.sender_left_org %}
+    <div class="alert alert-warning alert-dismissible fade show" role="status">
+        <button type="button" class="btn-close" data-bs-dismiss="alert" aria-label="Fermer"></button>
+        <div class="row">
+            <div class="col-auto pe-0">
+                <i class="ri-information-line ri-xl text-warning" aria-hidden="true"></i>
+            </div>
+            <div class="col">
+                <p class="mb-0">L’émetteur de cette candidature ne fait plus partie de l’organisation émettrice</p>
+            </div>
+        </div>
+    </div>
+
+
+{% endif %}
 <ul class="list-data list-data__two-column-md mb-3">
     <li>
         <small>Émetteur</small>
@@ -14,6 +29,8 @@
         <small>Adresse e-mail</small>
         {% if request.user.is_job_seeker and job_application.sender_kind != SenderKind.JOB_SEEKER %}
             <strong>Non communiquée</strong>
+        {% elif job_application.sender_left_org %}
+            <div class="text-warning fst-italic">Les réponses seront transmises aux administrateurs de l’organisation</div>
         {% else %}
             <strong>{{ job_application.sender.email }}</strong>
             {% matomo_event "candidature" "clic" "copied_sender_email" as matomo_event_attrs %}
diff --git a/tests/job_applications/test_models.py b/tests/job_applications/test_models.py
new file mode 100644
index 00000000000..205fc056de7
--- /dev/null
+++ b/tests/job_applications/test_models.py
@@ -0,0 +1,58 @@
+from tests.companies.factories import CompanyMembershipFactory
+from tests.job_applications.factories import JobApplicationFactory, JobApplicationSentByJobSeekerFactory
+from tests.prescribers.factories import PrescriberMembershipFactory
+
+
+def test_sender_left_org_prescriber():
+    prescriber_membership = PrescriberMembershipFactory()
+    job_app = JobApplicationFactory(
+        sender=prescriber_membership.user, sender_prescriber_organization=prescriber_membership.organization
+    )
+    assert job_app.sender_left_org is False
+
+    # membership is inactive
+    prescriber_membership.is_active = False
+    prescriber_membership.save(update_fields=["is_active"])
+    assert job_app.sender_left_org is True
+
+    # prescriber is inactive
+    prescriber_membership.is_active = True
+    prescriber_membership.save(update_fields=["is_active"])
+    prescriber_membership.user.is_active = False
+    prescriber_membership.user.save(update_fields=["is_active"])
+    assert job_app.sender_left_org is True
+
+    # membership was removed
+    prescriber_membership.user.is_active = True
+    prescriber_membership.user.save(update_fields=["is_active"])
+    prescriber_membership.delete()
+    assert job_app.sender_left_org is True
+
+
+def test_sender_left_org_employer():
+    company_membership = CompanyMembershipFactory()
+    job_app = JobApplicationFactory(sender=company_membership.user, sender_company=company_membership.company)
+    assert job_app.sender_left_org is False
+
+    # membership is inactive
+    company_membership.is_active = False
+    company_membership.save(update_fields=["is_active"])
+    assert job_app.sender_left_org is True
+
+    # prescriber is inactive
+    company_membership.is_active = True
+    company_membership.save(update_fields=["is_active"])
+    company_membership.user.is_active = False
+    company_membership.user.save(update_fields=["is_active"])
+    assert job_app.sender_left_org is True
+
+    # membership was removed
+    company_membership.user.is_active = True
+    company_membership.user.save(update_fields=["is_active"])
+    company_membership.delete()
+    assert job_app.sender_left_org is True
+
+
+def test_sender_left_org_job_seeker():
+    job_app = JobApplicationSentByJobSeekerFactory()
+    assert job_app.sender_left_org is False
diff --git a/tests/www/apply/__snapshots__/test_process.ambr b/tests/www/apply/__snapshots__/test_process.ambr
index 6bbb6dec6f3..587e9905f36 100644
--- a/tests/www/apply/__snapshots__/test_process.ambr
+++ b/tests/www/apply/__snapshots__/test_process.ambr
@@ -941,7 +941,7 @@
 # ---
 # name: TestProcessViews.test_details_for_company_from_approval[job application detail for company]
   dict({
-    'num_queries': 17,
+    'num_queries': 18,
     'queries': list([
       dict({
         'origin': list([
@@ -1800,6 +1800,28 @@
           ORDER BY "approvals_approval"."created_at" DESC
         ''',
       }),
+      dict({
+        'origin': list([
+          'JobApplication.sender_left_org[job_applications/models.py]',
+          'IfNode[apply/includes/job_application_sender_info.html]',
+          'IncludeNode[apply/process_details_company.html]',
+          'BlockNode[apply/process_base.html]',
+          'BlockNode[layout/base.html]',
+          'ExtendsNode[apply/process_base.html]',
+          'ExtendsNode[apply/process_details_company.html]',
+          'details_for_company[www/apply/views/process_views.py]',
+        ]),
+        'sql': '''
+          SELECT %s AS "a"
+          FROM "prescribers_prescribermembership"
+          INNER JOIN "users_user" ON ("prescribers_prescribermembership"."user_id" = "users_user"."id")
+          WHERE ("prescribers_prescribermembership"."user_id" = %s
+                 AND "users_user"."is_active"
+                 AND "prescribers_prescribermembership"."is_active"
+                 AND "prescribers_prescribermembership"."organization_id" = %s)
+          LIMIT 1
+        ''',
+      }),
       dict({
         'origin': list([
           'ForNode[apply/includes/transition_logs.html]',
@@ -1911,7 +1933,7 @@
 # ---
 # name: TestProcessViews.test_details_for_company_from_list[job application detail for company]
   dict({
-    'num_queries': 17,
+    'num_queries': 18,
     'queries': list([
       dict({
         'origin': list([
@@ -2770,6 +2792,28 @@
           ORDER BY "approvals_approval"."created_at" DESC
         ''',
       }),
+      dict({
+        'origin': list([
+          'JobApplication.sender_left_org[job_applications/models.py]',
+          'IfNode[apply/includes/job_application_sender_info.html]',
+          'IncludeNode[apply/process_details_company.html]',
+          'BlockNode[apply/process_base.html]',
+          'BlockNode[layout/base.html]',
+          'ExtendsNode[apply/process_base.html]',
+          'ExtendsNode[apply/process_details_company.html]',
+          'details_for_company[www/apply/views/process_views.py]',
+        ]),
+        'sql': '''
+          SELECT %s AS "a"
+          FROM "prescribers_prescribermembership"
+          INNER JOIN "users_user" ON ("prescribers_prescribermembership"."user_id" = "users_user"."id")
+          WHERE ("prescribers_prescribermembership"."user_id" = %s
+                 AND "users_user"."is_active"
+                 AND "prescribers_prescribermembership"."is_active"
+                 AND "prescribers_prescribermembership"."organization_id" = %s)
+          LIMIT 1
+        ''',
+      }),
       dict({
         'origin': list([
           'ForNode[apply/includes/transition_logs.html]',
diff --git a/tests/www/apply/test_process.py b/tests/www/apply/test_process.py
index 544d122bb65..349b10b97db 100644
--- a/tests/www/apply/test_process.py
+++ b/tests/www/apply/test_process.py
@@ -61,6 +61,7 @@
     PriorActionFactory,
 )
 from tests.jobs.factories import create_test_romes_and_appellations
+from tests.prescribers.factories import PrescriberMembershipFactory
 from tests.siae_evaluations.factories import EvaluatedSiaeFactory
 from tests.users.factories import EmployerFactory, JobSeekerFactory, LaborInspectorFactory, PrescriberFactory
 from tests.utils.htmx.test import assertSoupEqual, update_page_with_htmx
@@ -76,6 +77,8 @@
     "Si les détails apportés dans le message de réponse ne vous ont pas permis d’en savoir plus,"
     " vous pouvez contacter l’employeur."
 )
+SENDER_LEFT_ORG = "Les réponses seront transmises aux administrateurs de l’organisation"
+SENDER_LEFT_ORG_ALERT = "L’émetteur de cette candidature ne fait plus partie de l’organisation émettrice"
 
 
 @pytest.mark.ignore_unknown_variable_template_error("has_form_error", "with_matomo_event")
@@ -248,6 +251,21 @@ def test_details_for_company_from_list(self, client, snapshot):
         assertContains(response, resume_link)
         assertNotContains(response, PRIOR_ACTION_SECTION_TITLE)
 
+    def test_details_when_sender_left_org(self, client):
+        job_application = JobApplicationFactory(sent_by_authorized_prescriber_organisation=True)
+        company = job_application.to_company
+        employer = company.members.first()
+        sender = job_application.sender
+        sender.is_active = False
+        sender.save()
+        client.force_login(employer)
+
+        url = reverse("apply:details_for_company", kwargs={"job_application_id": job_application.pk})
+        response = client.get(url)
+        assertNotContains(response, sender.email)
+        assertContains(response, SENDER_LEFT_ORG)
+        assertContains(response, SENDER_LEFT_ORG_ALERT)
+
     def test_details_archived(self, client):
         UNARCHIVE = "Désarchiver"
         job_application = JobApplicationFactory(
@@ -392,6 +410,20 @@ def test_details_for_prescriber(self, client):
         response = client.get(url)
         assertContains(response, LackOfNIRReason.NIR_ASSOCIATED_TO_OTHER.label, html=True)
 
+    def test_details_for_prescriber_when_sender_left_org(self, client):
+        job_application = JobApplicationFactory(sent_by_authorized_prescriber_organisation=True)
+        prescriber = PrescriberMembershipFactory(organization=job_application.sender_prescriber_organization).user
+        sender = job_application.sender
+        sender.is_active = False
+        sender.save()
+        client.force_login(prescriber)
+
+        url = reverse("apply:details_for_prescriber", kwargs={"job_application_id": job_application.pk})
+        response = client.get(url)
+        assertNotContains(response, sender.email)
+        assertContains(response, SENDER_LEFT_ORG)
+        assertContains(response, SENDER_LEFT_ORG_ALERT)
+
     def test_details_for_prescriber_as_company_when_i_am_not_the_sender(self, client):
         job_application = JobApplicationFactory(sent_by_authorized_prescriber_organisation=True)
         employer = job_application.to_company.members.first()
@@ -489,6 +521,20 @@ def test_details_for_job_seeker(self, client):
 
         assertNotContains(response, PRIOR_ACTION_SECTION_TITLE)
 
+    def test_details_for_job_seeker_when_sender_left_org(self, client):
+        job_application = JobApplicationFactory(sent_by_authorized_prescriber_organisation=True)
+        sender = job_application.sender
+        sender.is_active = False
+        sender.save()
+
+        client.force_login(job_application.job_seeker)
+
+        url = reverse("apply:details_for_jobseeker", kwargs={"job_application_id": job_application.pk})
+        response = client.get(url)
+        assertNotContains(response, sender.email)
+        assertNotContains(response, SENDER_LEFT_ORG)  # A job seeker never sees the email of the sender
+        assertContains(response, SENDER_LEFT_ORG_ALERT)
+
     def test_details_for_job_seeker_as_other_user(self, client, subtests):
         job_application = JobApplicationFactory()
         url = reverse("apply:details_for_jobseeker", kwargs={"job_application_id": job_application.pk})