You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173
  1. // Copyright 2014 The Gogs Authors. All rights reserved.
  2. // Copyright 2020 The Gitea Authors.
  3. // Use of this source code is governed by a MIT-style
  4. // license that can be found in the LICENSE file.
  5. package context
  6. import (
  7. "strings"
  8. "code.gitea.io/gitea/models"
  9. "code.gitea.io/gitea/modules/setting"
  10. "gitea.com/macaron/macaron"
  11. )
  12. // Organization contains organization context
  13. type Organization struct {
  14. IsOwner bool
  15. IsMember bool
  16. IsTeamMember bool // Is member of team.
  17. IsTeamAdmin bool // In owner team or team that has admin permission level.
  18. Organization *models.User
  19. OrgLink string
  20. CanCreateOrgRepo bool
  21. Team *models.Team
  22. }
  23. // HandleOrgAssignment handles organization assignment
  24. func HandleOrgAssignment(ctx *Context, args ...bool) {
  25. var (
  26. requireMember bool
  27. requireOwner bool
  28. requireTeamMember bool
  29. requireTeamAdmin bool
  30. )
  31. if len(args) >= 1 {
  32. requireMember = args[0]
  33. }
  34. if len(args) >= 2 {
  35. requireOwner = args[1]
  36. }
  37. if len(args) >= 3 {
  38. requireTeamMember = args[2]
  39. }
  40. if len(args) >= 4 {
  41. requireTeamAdmin = args[3]
  42. }
  43. orgName := ctx.Params(":org")
  44. var err error
  45. ctx.Org.Organization, err = models.GetUserByName(orgName)
  46. if err != nil {
  47. if models.IsErrUserNotExist(err) {
  48. ctx.NotFound("GetUserByName", err)
  49. } else {
  50. ctx.ServerError("GetUserByName", err)
  51. }
  52. return
  53. }
  54. org := ctx.Org.Organization
  55. ctx.Data["Org"] = org
  56. // Force redirection when username is actually a user.
  57. if !org.IsOrganization() {
  58. ctx.Redirect(setting.AppSubURL + "/" + org.Name)
  59. return
  60. }
  61. // Admin has super access.
  62. if ctx.IsSigned && ctx.User.IsAdmin {
  63. ctx.Org.IsOwner = true
  64. ctx.Org.IsMember = true
  65. ctx.Org.IsTeamMember = true
  66. ctx.Org.IsTeamAdmin = true
  67. ctx.Org.CanCreateOrgRepo = true
  68. } else if ctx.IsSigned {
  69. ctx.Org.IsOwner, err = org.IsOwnedBy(ctx.User.ID)
  70. if err != nil {
  71. ctx.ServerError("IsOwnedBy", err)
  72. return
  73. }
  74. if ctx.Org.IsOwner {
  75. ctx.Org.IsMember = true
  76. ctx.Org.IsTeamMember = true
  77. ctx.Org.IsTeamAdmin = true
  78. ctx.Org.CanCreateOrgRepo = true
  79. } else {
  80. ctx.Org.IsMember, err = org.IsOrgMember(ctx.User.ID)
  81. if err != nil {
  82. ctx.ServerError("IsOrgMember", err)
  83. return
  84. }
  85. ctx.Org.CanCreateOrgRepo, err = org.CanCreateOrgRepo(ctx.User.ID)
  86. if err != nil {
  87. ctx.ServerError("CanCreateOrgRepo", err)
  88. return
  89. }
  90. }
  91. } else {
  92. // Fake data.
  93. ctx.Data["SignedUser"] = &models.User{}
  94. }
  95. if (requireMember && !ctx.Org.IsMember) ||
  96. (requireOwner && !ctx.Org.IsOwner) {
  97. ctx.NotFound("OrgAssignment", err)
  98. return
  99. }
  100. ctx.Data["IsOrganizationOwner"] = ctx.Org.IsOwner
  101. ctx.Data["IsOrganizationMember"] = ctx.Org.IsMember
  102. ctx.Data["CanCreateOrgRepo"] = ctx.Org.CanCreateOrgRepo
  103. ctx.Org.OrgLink = setting.AppSubURL + "/org/" + org.Name
  104. ctx.Data["OrgLink"] = ctx.Org.OrgLink
  105. // Team.
  106. if ctx.Org.IsMember {
  107. if ctx.Org.IsOwner {
  108. if err := org.GetTeams(&models.SearchTeamOptions{}); err != nil {
  109. ctx.ServerError("GetTeams", err)
  110. return
  111. }
  112. } else {
  113. org.Teams, err = org.GetUserTeams(ctx.User.ID)
  114. if err != nil {
  115. ctx.ServerError("GetUserTeams", err)
  116. return
  117. }
  118. }
  119. }
  120. teamName := ctx.Params(":team")
  121. if len(teamName) > 0 {
  122. teamExists := false
  123. for _, team := range org.Teams {
  124. if team.LowerName == strings.ToLower(teamName) {
  125. teamExists = true
  126. ctx.Org.Team = team
  127. ctx.Org.IsTeamMember = true
  128. ctx.Data["Team"] = ctx.Org.Team
  129. break
  130. }
  131. }
  132. if !teamExists {
  133. ctx.NotFound("OrgAssignment", err)
  134. return
  135. }
  136. ctx.Data["IsTeamMember"] = ctx.Org.IsTeamMember
  137. if requireTeamMember && !ctx.Org.IsTeamMember {
  138. ctx.NotFound("OrgAssignment", err)
  139. return
  140. }
  141. ctx.Org.IsTeamAdmin = ctx.Org.Team.IsOwnerTeam() || ctx.Org.Team.Authorize >= models.AccessModeAdmin
  142. ctx.Data["IsTeamAdmin"] = ctx.Org.IsTeamAdmin
  143. if requireTeamAdmin && !ctx.Org.IsTeamAdmin {
  144. ctx.NotFound("OrgAssignment", err)
  145. return
  146. }
  147. }
  148. }
  149. // OrgAssignment returns a macaron middleware to handle organization assignment
  150. func OrgAssignment(args ...bool) macaron.Handler {
  151. return func(ctx *Context) {
  152. HandleOrgAssignment(ctx, args...)
  153. }
  154. }