summaryrefslogtreecommitdiffstats
path: root/modules/middleware
diff options
context:
space:
mode:
authorUnknwon <joe2010xtmf@163.com>2014-11-13 02:32:18 -0500
committerUnknwon <joe2010xtmf@163.com>2014-11-13 02:32:18 -0500
commit8eb5120fbd19dac1221f82d84c339b4be9b0975b (patch)
tree3238704d9968d41f3f871adda4c280e3bd73685d /modules/middleware
parent8c9338a5377c60c84cdee1f5781b3de5933bb3b0 (diff)
downloadgitea-8eb5120fbd19dac1221f82d84c339b4be9b0975b.tar.gz
gitea-8eb5120fbd19dac1221f82d84c339b4be9b0975b.zip
#12, API: list user repos, list repo hooks
Diffstat (limited to 'modules/middleware')
-rw-r--r--modules/middleware/repo.go96
1 files changed, 96 insertions, 0 deletions
diff --git a/modules/middleware/repo.go b/modules/middleware/repo.go
index 8608ca8fa0..eb1aa128ae 100644
--- a/modules/middleware/repo.go
+++ b/modules/middleware/repo.go
@@ -18,6 +18,102 @@ import (
"github.com/gogits/gogs/modules/setting"
)
+// FIXME: response error in JSON.
+func ApiRepoAssignment() macaron.Handler {
+ return func(ctx *Context) {
+ userName := ctx.Params(":username")
+ repoName := ctx.Params(":reponame")
+
+ var (
+ u *models.User
+ err error
+ )
+
+ // Collaborators who have write access can be seen as owners.
+ if ctx.IsSigned {
+ ctx.Repo.IsOwner, err = models.HasAccess(ctx.User.Name, userName+"/"+repoName, models.WRITABLE)
+ if err != nil {
+ ctx.Handle(500, "HasAccess", err)
+ return
+ }
+ ctx.Repo.IsTrueOwner = ctx.User.LowerName == strings.ToLower(userName)
+ }
+
+ if !ctx.Repo.IsTrueOwner {
+ u, err = models.GetUserByName(userName)
+ if err != nil {
+ if err == models.ErrUserNotExist {
+ ctx.Error(404)
+ } else {
+ ctx.Handle(500, "GetUserByName", err)
+ }
+ return
+ }
+ } else {
+ u = ctx.User
+ }
+ ctx.Repo.Owner = u
+
+ // Organization owner team members are true owners as well.
+ if ctx.IsSigned && ctx.Repo.Owner.IsOrganization() && ctx.Repo.Owner.IsOrgOwner(ctx.User.Id) {
+ ctx.Repo.IsTrueOwner = true
+ }
+
+ // Get repository.
+ repo, err := models.GetRepositoryByName(u.Id, repoName)
+ if err != nil {
+ if err == models.ErrRepoNotExist {
+ ctx.Error(404)
+ return
+ }
+ ctx.Handle(500, "GetRepositoryByName", err)
+ return
+ } else if err = repo.GetOwner(); err != nil {
+ ctx.Handle(500, "GetOwner", err)
+ return
+ }
+
+ // Check if the mirror repository owner(mirror repository doesn't have access).
+ if ctx.IsSigned && !ctx.Repo.IsOwner {
+ if repo.OwnerId == ctx.User.Id {
+ ctx.Repo.IsOwner = true
+ }
+ // Check if current user has admin permission to repository.
+ if u.IsOrganization() {
+ auth, err := models.GetHighestAuthorize(u.Id, ctx.User.Id, repo.Id, 0)
+ if err != nil {
+ ctx.Handle(500, "GetHighestAuthorize", err)
+ return
+ }
+ if auth == models.ORG_ADMIN {
+ ctx.Repo.IsOwner = true
+ ctx.Repo.IsAdmin = true
+ }
+ }
+ }
+
+ // Check access.
+ if repo.IsPrivate && !ctx.Repo.IsOwner {
+ if ctx.User == nil {
+ ctx.Error(404)
+ return
+ }
+
+ hasAccess, err := models.HasAccess(ctx.User.Name, ctx.Repo.Owner.Name+"/"+repo.Name, models.READABLE)
+ if err != nil {
+ ctx.Handle(500, "HasAccess", err)
+ return
+ } else if !hasAccess {
+ ctx.Error(404)
+ return
+ }
+ }
+ ctx.Repo.HasAccess = true
+
+ ctx.Repo.Repository = repo
+ }
+}
+
// RepoRef handles repository reference name including those contain `/`.
func RepoRef() macaron.Handler {
return func(ctx *Context) {