Merge pull request #410 from zendesk/sxie/privacy-policy

add page with link to privacy policy

app.json

@@ -53,6 +53,10 @@
       "description": "Google tag manager ID. Create an account to add analytics etc.",
       "required": false
     },
+    "PRIVACY_POLICY_LINK": {
+      "description": "The portal privacy policy page will have a link to this link. Required for google oauth.",
+      "required": false
+    },
     "IP_BLOCK_ALL": {
       "description": "If enabled (IP_BLOCK_ALL='true') then all IP addresses will be blocked. Add IPs to the safe list to allow access.",
       "required": false

app/controllers/legal_controller.rb

@@ -0,0 +1,9 @@
+# rubocop:disable Rails/ApplicationController
+class LegalController < ActionController::Base
+  protect_from_forgery with: :exception
+
+  def index
+    render "privacy.html.erb"
+  end
+end
+# rubocop:enable Rails/ApplicationController

app/views/legal/privacy.html.erb

@@ -0,0 +1,9 @@
+<div id="root">
+  <div style="margin:0 auto;text-align:center;">
+    <h3>Privacy Policy</h3>
+    <% if ENV['PRIVACY_POLICY_LINK'] %>
+      <p>Please read our <a href="<%= ENV['PRIVACY_POLICY_LINK'] %>" target="_blank">privacy policy</a>.</p>
+    <% else %>
+      <p>Sorry, no policy has been crafted yet.</p>
+    <% end %>
+</div>

config/routes.rb

@@ -3,6 +3,8 @@
 
   root 'standalone#portal'
 
+  get 'legal',        to: 'legal#index'
+
   get 'volunteer/ping', to: 'ping#index'
   get 'z/ping',         to: 'ping#index'
 

test/integration/cleanliness_test.rb

@@ -20,6 +20,7 @@
         app/controllers/application_controller.rb
         app/controllers/gauth_controller.rb
         app/controllers/graphql_controller.rb
+        app/controllers/legal_controller.rb
         app/controllers/omniauth_callbacks_controller.rb
         app/controllers/ping_controller.rb
         app/controllers/standalone_controller.rb