123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765 |
- // Copyright 2018 The Gitea Authors. All rights reserved.
- // Copyright 2016 The Gogs Authors. All rights reserved.
- // Use of this source code is governed by a MIT-style
- // license that can be found in the LICENSE file.
-
- package models
-
- import (
- "errors"
- "fmt"
- "strings"
-
- "code.gitea.io/gitea/modules/log"
- "github.com/go-xorm/xorm"
- )
-
- const ownerTeamName = "Owners"
-
- // Team represents a organization team.
- type Team struct {
- ID int64 `xorm:"pk autoincr"`
- OrgID int64 `xorm:"INDEX"`
- LowerName string
- Name string
- Description string
- Authorize AccessMode
- Repos []*Repository `xorm:"-"`
- Members []*User `xorm:"-"`
- NumRepos int
- NumMembers int
- Units []*TeamUnit `xorm:"-"`
- }
-
- func (t *Team) getUnits(e Engine) (err error) {
- if t.Units != nil {
- return nil
- }
-
- t.Units, err = getUnitsByTeamID(e, t.ID)
- return err
- }
-
- // HasWriteAccess returns true if team has at least write level access mode.
- func (t *Team) HasWriteAccess() bool {
- return t.Authorize >= AccessModeWrite
- }
-
- // IsOwnerTeam returns true if team is owner team.
- func (t *Team) IsOwnerTeam() bool {
- return t.Name == ownerTeamName
- }
-
- // IsMember returns true if given user is a member of team.
- func (t *Team) IsMember(userID int64) bool {
- isMember, err := IsTeamMember(t.OrgID, t.ID, userID)
- if err != nil {
- log.Error(4, "IsMember: %v", err)
- return false
- }
- return isMember
- }
-
- func (t *Team) getRepositories(e Engine) error {
- return e.Join("INNER", "team_repo", "repository.id = team_repo.repo_id").
- Where("team_repo.team_id=?", t.ID).Find(&t.Repos)
- }
-
- // GetRepositories returns all repositories in team of organization.
- func (t *Team) GetRepositories() error {
- return t.getRepositories(x)
- }
-
- func (t *Team) getMembers(e Engine) (err error) {
- t.Members, err = getTeamMembers(e, t.ID)
- return err
- }
-
- // GetMembers returns all members in team of organization.
- func (t *Team) GetMembers() (err error) {
- return t.getMembers(x)
- }
-
- // AddMember adds new membership of the team to the organization,
- // the user will have membership to the organization automatically when needed.
- func (t *Team) AddMember(userID int64) error {
- return AddTeamMember(t, userID)
- }
-
- // RemoveMember removes member from team of organization.
- func (t *Team) RemoveMember(userID int64) error {
- return RemoveTeamMember(t, userID)
- }
-
- func (t *Team) hasRepository(e Engine, repoID int64) bool {
- return hasTeamRepo(e, t.OrgID, t.ID, repoID)
- }
-
- // HasRepository returns true if given repository belong to team.
- func (t *Team) HasRepository(repoID int64) bool {
- return t.hasRepository(x, repoID)
- }
-
- func (t *Team) addRepository(e Engine, repo *Repository) (err error) {
- if err = addTeamRepo(e, t.OrgID, t.ID, repo.ID); err != nil {
- return err
- }
-
- if _, err = e.Incr("num_repos").ID(t.ID).Update(new(Team)); err != nil {
- return fmt.Errorf("update team: %v", err)
- }
-
- t.NumRepos++
-
- if err = repo.recalculateTeamAccesses(e, 0); err != nil {
- return fmt.Errorf("recalculateAccesses: %v", err)
- }
-
- if err = t.getMembers(e); err != nil {
- return fmt.Errorf("getMembers: %v", err)
- }
- for _, u := range t.Members {
- if err = watchRepo(e, u.ID, repo.ID, true); err != nil {
- return fmt.Errorf("watchRepo: %v", err)
- }
- }
- return nil
- }
-
- // AddRepository adds new repository to team of organization.
- func (t *Team) AddRepository(repo *Repository) (err error) {
- if repo.OwnerID != t.OrgID {
- return errors.New("Repository does not belong to organization")
- } else if t.HasRepository(repo.ID) {
- return nil
- }
-
- sess := x.NewSession()
- defer sess.Close()
- if err = sess.Begin(); err != nil {
- return err
- }
-
- if err = t.addRepository(sess, repo); err != nil {
- return err
- }
-
- return sess.Commit()
- }
-
- func (t *Team) removeRepository(e Engine, repo *Repository, recalculate bool) (err error) {
- if err = removeTeamRepo(e, t.ID, repo.ID); err != nil {
- return err
- }
-
- t.NumRepos--
- if _, err = e.ID(t.ID).Cols("num_repos").Update(t); err != nil {
- return err
- }
-
- // Don't need to recalculate when delete a repository from organization.
- if recalculate {
- if err = repo.recalculateTeamAccesses(e, t.ID); err != nil {
- return err
- }
- }
-
- teamUsers, err := getTeamUsersByTeamID(e, t.ID)
- if err != nil {
- return fmt.Errorf("getTeamUsersByTeamID: %v", err)
- }
- for _, teamUser := range teamUsers {
- has, err := hasAccess(e, teamUser.UID, repo, AccessModeRead)
- if err != nil {
- return err
- } else if has {
- continue
- }
-
- if err = watchRepo(e, teamUser.UID, repo.ID, false); err != nil {
- return err
- }
-
- // Remove all IssueWatches a user has subscribed to in the repositories
- if err := removeIssueWatchersByRepoID(e, teamUser.UID, repo.ID); err != nil {
- return err
- }
- }
-
- return nil
- }
-
- // RemoveRepository removes repository from team of organization.
- func (t *Team) RemoveRepository(repoID int64) error {
- if !t.HasRepository(repoID) {
- return nil
- }
-
- repo, err := GetRepositoryByID(repoID)
- if err != nil {
- return err
- }
-
- sess := x.NewSession()
- defer sess.Close()
- if err = sess.Begin(); err != nil {
- return err
- }
-
- if err = t.removeRepository(sess, repo, true); err != nil {
- return err
- }
-
- return sess.Commit()
- }
-
- // UnitEnabled returns if the team has the given unit type enabled
- func (t *Team) UnitEnabled(tp UnitType) bool {
- return t.unitEnabled(x, tp)
- }
-
- func (t *Team) unitEnabled(e Engine, tp UnitType) bool {
- if err := t.getUnits(e); err != nil {
- log.Warn("Error loading repository (ID: %d) units: %s", t.ID, err.Error())
- }
-
- for _, unit := range t.Units {
- if unit.Type == tp {
- return true
- }
- }
- return false
- }
-
- // IsUsableTeamName tests if a name could be as team name
- func IsUsableTeamName(name string) error {
- switch name {
- case "new":
- return ErrNameReserved{name}
- default:
- return nil
- }
- }
-
- // NewTeam creates a record of new team.
- // It's caller's responsibility to assign organization ID.
- func NewTeam(t *Team) (err error) {
- if len(t.Name) == 0 {
- return errors.New("empty team name")
- }
-
- if err = IsUsableTeamName(t.Name); err != nil {
- return err
- }
-
- has, err := x.ID(t.OrgID).Get(new(User))
- if err != nil {
- return err
- } else if !has {
- return ErrOrgNotExist{t.OrgID, ""}
- }
-
- t.LowerName = strings.ToLower(t.Name)
- has, err = x.
- Where("org_id=?", t.OrgID).
- And("lower_name=?", t.LowerName).
- Get(new(Team))
- if err != nil {
- return err
- } else if has {
- return ErrTeamAlreadyExist{t.OrgID, t.LowerName}
- }
-
- sess := x.NewSession()
- defer sess.Close()
- if err = sess.Begin(); err != nil {
- return err
- }
-
- if _, err = sess.Insert(t); err != nil {
- sess.Rollback()
- return err
- }
-
- // insert units for team
- if len(t.Units) > 0 {
- for _, unit := range t.Units {
- unit.TeamID = t.ID
- }
- if _, err = sess.Insert(&t.Units); err != nil {
- sess.Rollback()
- return err
- }
- }
-
- // Update organization number of teams.
- if _, err = sess.Exec("UPDATE `user` SET num_teams=num_teams+1 WHERE id = ?", t.OrgID); err != nil {
- sess.Rollback()
- return err
- }
- return sess.Commit()
- }
-
- func getTeam(e Engine, orgID int64, name string) (*Team, error) {
- t := &Team{
- OrgID: orgID,
- LowerName: strings.ToLower(name),
- }
- has, err := e.Get(t)
- if err != nil {
- return nil, err
- } else if !has {
- return nil, ErrTeamNotExist
- }
- return t, nil
- }
-
- // GetTeam returns team by given team name and organization.
- func GetTeam(orgID int64, name string) (*Team, error) {
- return getTeam(x, orgID, name)
- }
-
- func getTeamByID(e Engine, teamID int64) (*Team, error) {
- t := new(Team)
- has, err := e.ID(teamID).Get(t)
- if err != nil {
- return nil, err
- } else if !has {
- return nil, ErrTeamNotExist
- }
- return t, nil
- }
-
- // GetTeamByID returns team by given ID.
- func GetTeamByID(teamID int64) (*Team, error) {
- return getTeamByID(x, teamID)
- }
-
- // UpdateTeam updates information of team.
- func UpdateTeam(t *Team, authChanged bool) (err error) {
- if len(t.Name) == 0 {
- return errors.New("empty team name")
- }
-
- if len(t.Description) > 255 {
- t.Description = t.Description[:255]
- }
-
- sess := x.NewSession()
- defer sess.Close()
- if err = sess.Begin(); err != nil {
- return err
- }
-
- t.LowerName = strings.ToLower(t.Name)
- has, err := sess.
- Where("org_id=?", t.OrgID).
- And("lower_name=?", t.LowerName).
- And("id!=?", t.ID).
- Get(new(Team))
- if err != nil {
- return err
- } else if has {
- return ErrTeamAlreadyExist{t.OrgID, t.LowerName}
- }
-
- if _, err = sess.ID(t.ID).AllCols().Update(t); err != nil {
- return fmt.Errorf("update: %v", err)
- }
-
- // Update access for team members if needed.
- if authChanged {
- if err = t.getRepositories(sess); err != nil {
- return fmt.Errorf("getRepositories: %v", err)
- }
-
- for _, repo := range t.Repos {
- if err = repo.recalculateTeamAccesses(sess, 0); err != nil {
- return fmt.Errorf("recalculateTeamAccesses: %v", err)
- }
- }
- }
-
- return sess.Commit()
- }
-
- // DeleteTeam deletes given team.
- // It's caller's responsibility to assign organization ID.
- func DeleteTeam(t *Team) error {
- if err := t.GetRepositories(); err != nil {
- return err
- }
-
- sess := x.NewSession()
- defer sess.Close()
- if err := sess.Begin(); err != nil {
- return err
- }
-
- if err := t.getMembers(sess); err != nil {
- return err
- }
-
- // Delete all accesses.
- for _, repo := range t.Repos {
- if err := repo.recalculateTeamAccesses(sess, t.ID); err != nil {
- return err
- }
-
- // Remove watches from all users and now unaccessible repos
- for _, user := range t.Members {
- has, err := hasAccess(sess, user.ID, repo, AccessModeRead)
- if err != nil {
- return err
- } else if has {
- continue
- }
-
- if err = watchRepo(sess, user.ID, repo.ID, false); err != nil {
- return err
- }
-
- // Remove all IssueWatches a user has subscribed to in the repositories
- if err = removeIssueWatchersByRepoID(sess, user.ID, repo.ID); err != nil {
- return err
- }
- }
- }
-
- // Delete team-repo
- if _, err := sess.
- Where("team_id=?", t.ID).
- Delete(new(TeamRepo)); err != nil {
- return err
- }
-
- // Delete team-user.
- if _, err := sess.
- Where("org_id=?", t.OrgID).
- Where("team_id=?", t.ID).
- Delete(new(TeamUser)); err != nil {
- return err
- }
-
- // Delete team-unit.
- if _, err := sess.
- Where("team_id=?", t.ID).
- Delete(new(TeamUnit)); err != nil {
- return err
- }
-
- // Delete team.
- if _, err := sess.ID(t.ID).Delete(new(Team)); err != nil {
- return err
- }
- // Update organization number of teams.
- if _, err := sess.Exec("UPDATE `user` SET num_teams=num_teams-1 WHERE id=?", t.OrgID); err != nil {
- return err
- }
-
- return sess.Commit()
- }
-
- // ___________ ____ ___
- // \__ ___/___ _____ _____ | | \______ ___________
- // | |_/ __ \\__ \ / \| | / ___// __ \_ __ \
- // | |\ ___/ / __ \| Y Y \ | /\___ \\ ___/| | \/
- // |____| \___ >____ /__|_| /______//____ >\___ >__|
- // \/ \/ \/ \/ \/
-
- // TeamUser represents an team-user relation.
- type TeamUser struct {
- ID int64 `xorm:"pk autoincr"`
- OrgID int64 `xorm:"INDEX"`
- TeamID int64 `xorm:"UNIQUE(s)"`
- UID int64 `xorm:"UNIQUE(s)"`
- }
-
- func isTeamMember(e Engine, orgID, teamID, userID int64) (bool, error) {
- return e.
- Where("org_id=?", orgID).
- And("team_id=?", teamID).
- And("uid=?", userID).
- Table("team_user").
- Exist()
- }
-
- // IsTeamMember returns true if given user is a member of team.
- func IsTeamMember(orgID, teamID, userID int64) (bool, error) {
- return isTeamMember(x, orgID, teamID, userID)
- }
-
- func getTeamUsersByTeamID(e Engine, teamID int64) ([]*TeamUser, error) {
- teamUsers := make([]*TeamUser, 0, 10)
- return teamUsers, e.
- Where("team_id=?", teamID).
- Find(&teamUsers)
- }
-
- func getTeamMembers(e Engine, teamID int64) (_ []*User, err error) {
- teamUsers, err := getTeamUsersByTeamID(e, teamID)
- if err != nil {
- return nil, fmt.Errorf("get team-users: %v", err)
- }
- members := make([]*User, len(teamUsers))
- for i, teamUser := range teamUsers {
- member, err := getUserByID(e, teamUser.UID)
- if err != nil {
- return nil, fmt.Errorf("get user '%d': %v", teamUser.UID, err)
- }
- members[i] = member
- }
- return members, nil
- }
-
- // GetTeamMembers returns all members in given team of organization.
- func GetTeamMembers(teamID int64) ([]*User, error) {
- return getTeamMembers(x, teamID)
- }
-
- func getUserTeams(e Engine, orgID, userID int64) (teams []*Team, err error) {
- return teams, e.
- Join("INNER", "team_user", "team_user.team_id = team.id").
- Where("team.org_id = ?", orgID).
- And("team_user.uid=?", userID).
- Find(&teams)
- }
-
- // GetUserTeams returns all teams that user belongs to in given organization.
- func GetUserTeams(orgID, userID int64) ([]*Team, error) {
- return getUserTeams(x, orgID, userID)
- }
-
- // AddTeamMember adds new membership of given team to given organization,
- // the user will have membership to given organization automatically when needed.
- func AddTeamMember(team *Team, userID int64) error {
- isAlreadyMember, err := IsTeamMember(team.OrgID, team.ID, userID)
- if err != nil || isAlreadyMember {
- return err
- }
-
- if err := AddOrgUser(team.OrgID, userID); err != nil {
- return err
- }
-
- // Get team and its repositories.
- if err := team.GetRepositories(); err != nil {
- return err
- }
-
- sess := x.NewSession()
- defer sess.Close()
- if err := sess.Begin(); err != nil {
- return err
- }
-
- if _, err := sess.Insert(&TeamUser{
- UID: userID,
- OrgID: team.OrgID,
- TeamID: team.ID,
- }); err != nil {
- return err
- } else if _, err := sess.Incr("num_members").ID(team.ID).Update(new(Team)); err != nil {
- return err
- }
-
- team.NumMembers++
-
- // Give access to team repositories.
- for _, repo := range team.Repos {
- if err := repo.recalculateTeamAccesses(sess, 0); err != nil {
- return err
- }
-
- if err = watchRepo(sess, userID, repo.ID, true); err != nil {
- return err
- }
- }
-
- return sess.Commit()
- }
-
- func removeTeamMember(e *xorm.Session, team *Team, userID int64) error {
- isMember, err := isTeamMember(e, team.OrgID, team.ID, userID)
- if err != nil || !isMember {
- return err
- }
-
- // Check if the user to delete is the last member in owner team.
- if team.IsOwnerTeam() && team.NumMembers == 1 {
- return ErrLastOrgOwner{UID: userID}
- }
-
- team.NumMembers--
-
- if err := team.getRepositories(e); err != nil {
- return err
- }
-
- if _, err := e.Delete(&TeamUser{
- UID: userID,
- OrgID: team.OrgID,
- TeamID: team.ID,
- }); err != nil {
- return err
- } else if _, err = e.
- ID(team.ID).
- Cols("num_members").
- Update(team); err != nil {
- return err
- }
-
- // Delete access to team repositories.
- for _, repo := range team.Repos {
- if err := repo.recalculateTeamAccesses(e, 0); err != nil {
- return err
- }
-
- // Remove watches from now unaccessible
- has, err := hasAccess(e, userID, repo, AccessModeRead)
- if err != nil {
- return err
- } else if has {
- continue
- }
-
- if err = watchRepo(e, userID, repo.ID, false); err != nil {
- return err
- }
-
- // Remove all IssueWatches a user has subscribed to in the repositories
- if err := removeIssueWatchersByRepoID(e, userID, repo.ID); err != nil {
- return err
- }
- }
-
- // Check if the user is a member of any team in the organization.
- if count, err := e.Count(&TeamUser{
- UID: userID,
- OrgID: team.OrgID,
- }); err != nil {
- return err
- } else if count == 0 {
- return removeOrgUser(e, team.OrgID, userID)
- }
-
- return nil
- }
-
- // RemoveTeamMember removes member from given team of given organization.
- func RemoveTeamMember(team *Team, userID int64) error {
- sess := x.NewSession()
- defer sess.Close()
- if err := sess.Begin(); err != nil {
- return err
- }
- if err := removeTeamMember(sess, team, userID); err != nil {
- return err
- }
- return sess.Commit()
- }
-
- // IsUserInTeams returns if a user in some teams
- func IsUserInTeams(userID int64, teamIDs []int64) (bool, error) {
- return x.Where("uid=?", userID).In("team_id", teamIDs).Exist(new(TeamUser))
- }
-
- // ___________ __________
- // \__ ___/___ _____ _____\______ \ ____ ______ ____
- // | |_/ __ \\__ \ / \| _// __ \\____ \ / _ \
- // | |\ ___/ / __ \| Y Y \ | \ ___/| |_> > <_> )
- // |____| \___ >____ /__|_| /____|_ /\___ > __/ \____/
- // \/ \/ \/ \/ \/|__|
-
- // TeamRepo represents an team-repository relation.
- type TeamRepo struct {
- ID int64 `xorm:"pk autoincr"`
- OrgID int64 `xorm:"INDEX"`
- TeamID int64 `xorm:"UNIQUE(s)"`
- RepoID int64 `xorm:"UNIQUE(s)"`
- }
-
- func hasTeamRepo(e Engine, orgID, teamID, repoID int64) bool {
- has, _ := e.
- Where("org_id=?", orgID).
- And("team_id=?", teamID).
- And("repo_id=?", repoID).
- Get(new(TeamRepo))
- return has
- }
-
- // HasTeamRepo returns true if given repository belongs to team.
- func HasTeamRepo(orgID, teamID, repoID int64) bool {
- return hasTeamRepo(x, orgID, teamID, repoID)
- }
-
- func addTeamRepo(e Engine, orgID, teamID, repoID int64) error {
- _, err := e.InsertOne(&TeamRepo{
- OrgID: orgID,
- TeamID: teamID,
- RepoID: repoID,
- })
- return err
- }
-
- func removeTeamRepo(e Engine, teamID, repoID int64) error {
- _, err := e.Delete(&TeamRepo{
- TeamID: teamID,
- RepoID: repoID,
- })
- return err
- }
-
- // GetTeamsWithAccessToRepo returns all teams in an organization that have given access level to the repository.
- func GetTeamsWithAccessToRepo(orgID, repoID int64, mode AccessMode) ([]*Team, error) {
- teams := make([]*Team, 0, 5)
- return teams, x.Where("team.authorize >= ?", mode).
- Join("INNER", "team_repo", "team_repo.team_id = team.id").
- And("team_repo.org_id = ?", orgID).
- And("team_repo.repo_id = ?", repoID).
- Find(&teams)
- }
-
- // ___________ ____ ___ .__ __
- // \__ ___/___ _____ _____ | | \____ |__|/ |_
- // | |_/ __ \\__ \ / \| | / \| \ __\
- // | |\ ___/ / __ \| Y Y \ | / | \ || |
- // |____| \___ >____ /__|_| /______/|___| /__||__|
- // \/ \/ \/ \/
-
- // TeamUnit describes all units of a repository
- type TeamUnit struct {
- ID int64 `xorm:"pk autoincr"`
- OrgID int64 `xorm:"INDEX"`
- TeamID int64 `xorm:"UNIQUE(s)"`
- Type UnitType `xorm:"UNIQUE(s)"`
- }
-
- // Unit returns Unit
- func (t *TeamUnit) Unit() Unit {
- return Units[t.Type]
- }
-
- func getUnitsByTeamID(e Engine, teamID int64) (units []*TeamUnit, err error) {
- return units, e.Where("team_id = ?", teamID).Find(&units)
- }
-
- // UpdateTeamUnits updates a teams's units
- func UpdateTeamUnits(team *Team, units []TeamUnit) (err error) {
- sess := x.NewSession()
- defer sess.Close()
- if err = sess.Begin(); err != nil {
- return err
- }
-
- if _, err = sess.Where("team_id = ?", team.ID).Delete(new(TeamUnit)); err != nil {
- return err
- }
-
- if _, err = sess.Insert(units); err != nil {
- sess.Rollback()
- return err
- }
-
- return sess.Commit()
- }
|