user.rb

class User < ActiveRecord::Base
  # gradual engagement scheme for authlogic:
  # 1. user is created by admin, only name and phone number required
  #    admin may set email address (primary_email) at creation
  # 2. user is then sent invitation to activate their account
  # 3. user#active is set true by hidden field on activation form where
  #    the user sets their login and password
  # authlogic options pulled out and explicitly set here so that it is
  # visible and so that :if conditional statements can be merged
  acts_as_authentic do |c|
    ### email: only validate if email is present
    c.email_field = :primary_email
    c.validates_length_of_email_field_options({
      :if => :email_field_present?,
      :within => 6..100
    })
    c.validates_format_of_email_field_options({
      :if => :email_field_present?,
      :with => Authlogic::Regex.email,
      :message => I18n.t('error_messages.email_invalid', :default => "should look like an email address.")
    })
    c.validates_uniqueness_of_email_field_options({
      :if => :email_field_present_and_primary_email_changed?,
      :case_sensitive => false,
      :scope => validations_scope
    })
    ### password: only validate if user is active
    c.validates_length_of_password_field_options({
      :if => :active_and_require_password?,
      :minimum => 4
    })
    c.validates_confirmation_of_password_field_options({
      :if => :active_and_require_password?
    })
    c.validates_length_of_password_confirmation_field_options({
      :if => :active_and_require_password?,
      :minimum => 4
    })
    ### login: only validate if user is active
    c.validates_length_of_login_field_options({
      :if => :active?,
      :within => 3..100
    })
    c.validates_format_of_login_field_options({
      :if => :active?,
      :with => Authlogic::Regex.login,
      :message => I18n.t('error_messages.login_invalid', :default => "should use only letters, numbers, spaces, and .-_@ please.")
    })
    c.validates_uniqueness_of_login_field_options({
      :if => :active_and_login_changed?,
      :case_sensitive => false,
      :scope => validations_scope
    })
  end
end