index
:
nextcloud-server.git
27-shared-null-storage-merged
3rdparty-aws-diet
3rdparty/justinrainbow/json-schema
3rdparty/stable28/sabre-dav-itip-broker
3rdparty/stable29/sabre-dav-itip-broker
3rdparty/stable30/sabre-dav-itip-broker
44287-fix-avatar-fed-share-receiver
44319-fix-fed-share-user-avatars
Dennis1993-patch-1
Fix/app-menu-overflow
Fix/mp3_regex
Jerome-Herbinet-better-devices-wipe-action-wording
Jerome-Herbinet-better-new-wording-better-than-delete-and-unshare
Jerome-Herbinet-internal-shares-parameter-better-distinction
Jerome-Herbinet-patch-1
Jerome-Herbinet-replace-remove-wording-with-delete
Valdnet-patch-1
add-VersionCreatedEvent
add-caldav-repair-middleware
add-command-to-cleanup-preview
add-default-request-timeout-const
add-integration-tests-for-deleting-a-file-copied-from-a-share
add-integration-tests-for-moving-a-file-from-and-to-a-shared-folder
add-integration-tests-for-renaming-a-share-by-a-user-with-stale-shares
addAllToGroupBy
addConstrDep
admin-audit-listen-failed-login
admin_audit/enh/move-to-event-listeners
allowMkcolAndPut
allowUnderCustLink
appStoreCacheFolder
appStoreDisabledOcc
artonge/backport/52121/stable29
artonge/backport/stable27/47770
artonge/backport/stable29/48207
artonge/chore/increase_log_in_trashbin
artonge/chore/ldap_wizard_rewrite
artonge/chore/update_nc_cypress_beta.11
artonge/chore/update_nc_pwd_confirmation_v5.3.1
artonge/chore/update_password_confirmation_v5.3.1
artonge/chore/user_retry_trait
artonge/debt/core_main.js
artonge/feat/add_retry_support_to_query_builder
artonge/feat/allow_deleting_metadata
artonge/feat/allow_partial_seen_users
artonge/feat/compare_hashed_password_when_updating_global_cred_in_files_external
artonge/feat/do_not_require_samesite_strict_cookie_on_public.php
artonge/feat/files_trashbin_parallel_expire_job
artonge/feat/forward_sizeDifference_on_write
artonge/feat/implement_custom_updater_for_object_storage
artonge/feat/implement_custom_updater_for_object_storage-squashed
artonge/feat/implement_custom_updater_for_object_storage-squashed-29
artonge/feat/maintenance_warn_encrypt_all
artonge/feat/pwd_confirmation_allow_set_period
artonge/feat/reset_route_when_sidebar_and_viewer_are_close
artonge/feat/skip-trash-header
artonge/feat/validate_keychecksum
artonge/fix/access_list_unaccepted_shares
artonge/fix/attribute_in_sidebar
artonge/fix/catch_exception_in_expire_trash
artonge/fix/color_debounce
artonge/fix/copy_cache_during_copy_operations
artonge/fix/copy_subfolders_s3
artonge/fix/count_users
artonge/fix/displayname_in_sidebar
artonge/fix/do_not_pass_parent_for_activity_tab_comments_plugin
artonge/fix/drop_unecessary_exit
artonge/fix/epehmeral_sessions
artonge/fix/extra_files_integrity_check
artonge/fix/file_list_jump_on_viewer_close
artonge/fix/forward_extra
artonge/fix/generate_metadata_perf
artonge/fix/getting_cache_entry
artonge/fix/handle_folders_copy_live_photos
artonge/fix/hash_return_type
artonge/fix/listen_to_group_removal_for_share
artonge/fix/login_flow_v2_sessions
artonge/fix/login_flow_v2_sessions_2
artonge/fix/make_error_a_info
artonge/fix/metadata_field_search
artonge/fix/min_age_rentention_files_versions
artonge/fix/missing_dot
artonge/fix/opening_a_secondly_created_file
artonge/fix/prevent_missing_users_from_crashing_disabled_users_search
artonge/fix/publicpage_attribute
artonge/fix/remove_duplicate_propfind_call
artonge/fix/remove_unnecessary_formating
artonge/fix/restoring_encrypted_version
artonge/fix/sidebar_davpath
artonge/fix/skip_blurhash_if_previews_are_disabled
artonge/fix/storage_full_warning
artonge/fix/systemtag_rendering
artonge/fix/transfer_ownership
artonge/fix/uid_type
artonge/fix/use_loginname_to_check_password
artonge/fix/use_preview_api_for_blurhash_generation
artonge/fix/vue_app_names
artonge/local/IONOS/feat/config_unified_search_providers_allowed
artonge/local/IONOS/tl/dev/disable-mailing
artonge/local/georglauterbach/feat/skip_cname
artonge/optim/close_connection_before_s3_upload
artonge/support_oc_checksum_in_bulk_upload
artonge/test/remove_only_calls
authPropertyPromotion
automated/noid/main-fix-npm-audit
automated/noid/master-fix-npm-audit
automated/noid/master-update-ca-cert-bundle
automated/noid/master-update-code-signing-crl
automated/noid/master-update-psalm-baseline
automated/noid/stable22-update-ca-cert-bundle
automated/noid/stable22-update-code-signing-crl
automated/noid/stable23-update-ca-cert-bundle
automated/noid/stable23-update-code-signing-crl
automated/noid/stable24-update-ca-cert-bundle
automated/noid/stable24-update-code-signing-crl
automated/noid/stable25-update-ca-cert-bundle
automated/noid/stable25-update-code-signing-crl
automated/noid/stable26-update-ca-cert-bundle
automated/noid/stable26-update-code-signing-crl
automated/noid/stable27-fix-npm-audit
automated/noid/stable27-update-ca-cert-bundle
automated/noid/stable27-update-code-signing-crl
automated/noid/stable28-fix-npm-audit
automated/noid/stable28-update-ca-cert-bundle
automated/noid/stable28-update-code-signing-crl
automated/noid/stable28-update-psalm-baseline
automated/noid/stable29-fix-npm-audit
automated/noid/stable29-update-ca-cert-bundle
automated/noid/stable29-update-code-signing-crl
automated/noid/stable29-update-psalm-baseline
automated/noid/stable30-fix-npm-audit
automated/noid/stable30-update-ca-cert-bundle
automated/noid/stable30-update-code-signing-crl
automated/noid/stable30-update-psalm-baseline
automated/noid/stable31-fix-npm-audit
automated/noid/stable31-update-ca-cert-bundle
automated/noid/stable31-update-code-signing-crl
automated/update-workflows/default
avatar-work-29
avoidStatusSessions
background-job-list-reserved
background-scan-eq
backport/29-openfile
backport/30/fix_move_on_same_bucket
backport/38630/stable28
backport/38630/stable29
backport/38630/stable30
backport/39607/stable26
backport/39611/stable30
backport/40367/stable25
backport/40367/stable26
backport/40394/stable25
backport/40394/stable26
backport/40394/stable27
backport/40394/stable28
backport/40394/stable29
backport/40394/stable30
backport/41065/stable29
backport/41065/stable30
backport/41065/stable31
backport/41327/stable26
backport/42099/stable29
backport/42099/stable31
backport/42170/stable28
backport/42172/stable26
backport/42548/stable22
backport/42930/stable26
backport/42971/stable25
backport/43025/stable28
backport/43025/stable29
backport/43025/stable30
backport/43252/stable26
backport/43580/stable26
backport/44017/stable26
backport/44130/stable26
backport/44218/stable29
backport/44236/stable28
backport/44295/stable29
backport/44533/stable29
backport/44555/stable27
backport/44745/stable27
backport/44745/stable28
backport/44838/stable27
backport/44912/stable27
backport/44945/stable30
backport/44956/stable28
backport/45026/stable26
backport/45098/stable28
backport/45098/stable29
backport/45364/stable29
backport/45364/stable30
backport/45364/stable31
backport/45765/master
backport/45765/stable30
backport/45848/stable28
backport/46013/stable26
backport/46013/stable27
backport/46013/stable28
backport/46114/stable30
backport/46124/stable28
backport/46124/stable29
backport/46124/stable30
backport/46140/stable28
backport/46140/stable29
backport/46140/stable30
backport/46218/stable27
backport/46218/stable28
backport/46218/stable29
backport/46218/stable30
backport/46222/stable30
backport/46307/stable29
backport/46418/stable29
backport/46480/stable28
backport/46480/stable29
backport/46480/stable30
backport/46534/stable27
backport/46691/stable30
backport/46780/stable30
backport/46780/stable31
backport/46887/stable29
backport/46931/stable28
backport/47180/stable26
backport/47180/stable28
ss="kn">import
com.gitblit.Constants.AccessRestrictionType
;
import
com.gitblit.Constants.PermissionType
;
import
com.gitblit.Constants.RegistrantType
;
import
com.gitblit.Constants.Unused
;
import
com.gitblit.utils.StringUtils
;
/**
* TeamModel is a serializable model class that represents a group of users and
* a list of accessible repositories.
*
* @author James Moger
*
*/
public
class
TeamModel
implements
Serializable
,
Comparable
<
TeamModel
>
{
private
static
final
long
serialVersionUID
=
1L
;
// field names are reflectively mapped in EditTeam page
public
String
name
;
public
boolean
canAdmin
;
public
boolean
canFork
;
public
boolean
canCreate
;
public
final
Set
<
String
>
users
=
new
HashSet
<
String
>
();
// retained for backwards-compatibility with RPC clients
@Deprecated
public
final
Set
<
String
>
repositories
=
new
HashSet
<
String
>
();
public
final
Map
<
String
,
AccessPermission
>
permissions
=
new
LinkedHashMap
<
String
,
AccessPermission
>
();
public
final
Set
<
String
>
mailingLists
=
new
HashSet
<
String
>
();
public
final
List
<
String
>
preReceiveScripts
=
new
ArrayList
<
String
>
();
public
final
List
<
String
>
postReceiveScripts
=
new
ArrayList
<
String
>
();
public
TeamModel
(
String
name
)
{
this
.
name
=
name
;
}
/**
* @use hasRepositoryPermission
* @param name
* @return
*/
@Deprecated
@Unused
public
boolean
hasRepository
(
String
name
)
{
return
hasRepositoryPermission
(
name
);
}
@Deprecated
@Unused
public
void
addRepository
(
String
name
)
{
addRepositoryPermission
(
name
);
}
@Deprecated
@Unused
public
void
addRepositories
(
Collection
<
String
>
names
)
{
addRepositoryPermissions
(
names
);
}
@Deprecated
@Unused
public
void
removeRepository
(
String
name
)
{
removeRepositoryPermission
(
name
);
}
/**
* Returns a list of repository permissions for this team.
*
* @return the team's list of permissions
*/
public
List
<
RegistrantAccessPermission
>
getRepositoryPermissions
()
{
List
<
RegistrantAccessPermission
>
list
=
new
ArrayList
<
RegistrantAccessPermission
>
();
if
(
canAdmin
)
{
// team has REWIND access to all repositories
return
list
;
}
for
(
Map
.
Entry
<
String
,
AccessPermission
>
entry
:
permissions
.
entrySet
())
{
String
registrant
=
entry
.
getKey
();
String
source
=
null
;
boolean
editable
=
true
;
PermissionType
pType
=
PermissionType
.
EXPLICIT
;
if
(
StringUtils
.
findInvalidCharacter
(
registrant
)
!=
null
)
{
// a regex will have at least 1 invalid character
pType
=
PermissionType
.
REGEX
;
source
=
registrant
;
}
list
.
add
(
new
RegistrantAccessPermission
(
registrant
,
entry
.
getValue
(),
pType
,
RegistrantType
.
REPOSITORY
,
source
,
editable
));
}
Collections
.
sort
(
list
);
return
list
;
}
/**
* Returns true if the team has any type of specified access permission for
* this repository.
*
* @param name
* @return true if team has a specified access permission for the repository
*/
public
boolean
hasRepositoryPermission
(
String
name
)
{
String
repository
=
AccessPermission
.
repositoryFromRole
(
name
).
toLowerCase
();
if
(
permissions
.
containsKey
(
repository
))
{
// exact repository permission specified
return
true
;
}
else
{
// search for regex permission match
for
(
String
key
:
permissions
.
keySet
())
{
if
(
name
.
matches
(
key
))
{
AccessPermission
p
=
permissions
.
get
(
key
);
if
(
p
!=
null
)
{
return
true
;
}
}
}
}
return
false
;
}
/**
* Returns true if the team has an explicitly specified access permission for
* this repository.
*
* @param name
* @return if the team has an explicitly specified access permission
*/
public
boolean
hasExplicitRepositoryPermission
(
String
name
)
{
String
repository
=
AccessPermission
.
repositoryFromRole
(
name
).
toLowerCase
();
return
permissions
.
containsKey
(
repository
);
}
/**
* Adds a repository permission to the team.
* <p>
* Role may be formatted as:
* <ul>
* <li> myrepo.git <i>(this is implicitly RW+)</i>
* <li> RW+:myrepo.git
* </ul>
* @param role
*/
public
void
addRepositoryPermission
(
String
role
)
{
AccessPermission
permission
=
AccessPermission
.
permissionFromRole
(
role
);
String
repository
=
AccessPermission
.
repositoryFromRole
(
role
).
toLowerCase
();
repositories
.
add
(
repository
);
permissions
.
put
(
repository
,
permission
);
}
public
void
addRepositoryPermissions
(
Collection
<
String
>
roles
)
{
for
(
String
role
:
roles
)
{
addRepositoryPermission
(
role
);
}
}
public
AccessPermission
removeRepositoryPermission
(
String
name
)
{
String
repository
=
AccessPermission
.
repositoryFromRole
(
name
).
toLowerCase
();
repositories
.
remove
(
repository
);
return
permissions
.
remove
(
repository
);
}
public
void
setRepositoryPermission
(
String
repository
,
AccessPermission
permission
)
{
permissions
.
put
(
repository
.
toLowerCase
(),
permission
);
repositories
.
add
(
repository
.
toLowerCase
());
}
public
RegistrantAccessPermission
getRepositoryPermission
(
RepositoryModel
repository
)
{
RegistrantAccessPermission
ap
=
new
RegistrantAccessPermission
();
ap
.
registrant
=
name
;
ap
.
registrantType
=
RegistrantType
.
TEAM
;
ap
.
permission
=
AccessPermission
.
NONE
;
ap
.
mutable
=
false
;
if
(
canAdmin
)
{
ap
.
permissionType
=
PermissionType
.
ADMINISTRATOR
;
ap
.
permission
=
AccessPermission
.
REWIND
;
return
ap
;
}
if
(
permissions
.
containsKey
(
repository
.
name
.
toLowerCase
()))
{
// exact repository permission specified
AccessPermission
p
=
permissions
.
get
(
repository
.
name
.
toLowerCase
());
if
(
p
!=
null
)
{
ap
.
permissionType
=
PermissionType
.
EXPLICIT
;
ap
.
permission
=
p
;
ap
.
mutable
=
true
;
return
ap
;
}
}
else
{
// search for case-insensitive regex permission match
for
(
String
key
:
permissions
.
keySet
())
{
if
(
StringUtils
.
matchesIgnoreCase
(
repository
.
name
,
key
))
{
AccessPermission
p
=
permissions
.
get
(
key
);
if
(
p
!=
null
)
{
// take first match
ap
.
permissionType
=
PermissionType
.
REGEX
;
ap
.
permission
=
p
;
ap
.
source
=
key
;
return
ap
;
}
}
}
}
return
ap
;
}
protected
boolean
canAccess
(
RepositoryModel
repository
,
AccessRestrictionType
ifRestriction
,
AccessPermission
requirePermission
)
{
if
(
repository
.
accessRestriction
.
atLeast
(
ifRestriction
))
{
RegistrantAccessPermission
ap
=
getRepositoryPermission
(
repository
);
return
ap
.
permission
.
atLeast
(
requirePermission
);
}
return
true
;
}
public
boolean
canView
(
RepositoryModel
repository
)
{
return
canAccess
(
repository
,
AccessRestrictionType
.
VIEW
,
AccessPermission
.
VIEW
);
}
public
boolean
canClone
(
RepositoryModel
repository
)
{
return
canAccess
(
repository
,
AccessRestrictionType
.
CLONE
,
AccessPermission
.
CLONE
);
}
public
boolean
canPush
(
RepositoryModel
repository
)
{
if
(
repository
.
isFrozen
)
{
return
false
;
}
return
canAccess
(
repository
,
AccessRestrictionType
.
PUSH
,
AccessPermission
.
PUSH
);
}
public
boolean
canCreateRef
(
RepositoryModel
repository
)
{
if
(
repository
.
isFrozen
)
{
return
false
;
}
return
canAccess
(
repository
,
AccessRestrictionType
.
PUSH
,
AccessPermission
.
CREATE
);
}
public
boolean
canDeleteRef
(
RepositoryModel
repository
)
{
if
(
repository
.
isFrozen
)
{
return
false
;
}
return
canAccess
(
repository
,
AccessRestrictionType
.
PUSH
,
AccessPermission
.
DELETE
);
}
public
boolean
canRewindRef
(
RepositoryModel
repository
)
{
if
(
repository
.
isFrozen
)
{
return
false
;
}
return
canAccess
(
repository
,
AccessRestrictionType
.
PUSH
,
AccessPermission
.
REWIND
);
}
public
boolean
hasUser
(
String
name
)
{
return
users
.
contains
(
name
.
toLowerCase
());
}
public
void
addUser
(
String
name
)
{
users
.
add
(
name
.
toLowerCase
());
}
public
void
addUsers
(
Collection
<
String
>
names
)
{
for
(
String
name
:
names
)
{
users
.
add
(
name
.
toLowerCase
());
}
}
public
void
removeUser
(
String
name
)
{
users
.
remove
(
name
.
toLowerCase
());
}
public
void
addMailingLists
(
Collection
<
String
>
addresses
)
{
for
(
String
address
:
addresses
)
{
mailingLists
.
add
(
address
.
toLowerCase
());
}
}
@Override
public
String
toString
()
{
return
name
;
}
@Override
public
int
compareTo
(
TeamModel
o
)
{
return
name
.
compareTo
(
o
.
name
);
}
}
