@ -6,11 +6,13 @@ package models
import ( import (
"errors" "errors"
"fmt"
"os" "os"
"path" "path"
"strings" "strings"
"github.com/Unknwon/com" "github.com/Unknwon/com"
"github.com/go-xorm/xorm"
"github.com/gogits/gogs/modules/base" "github.com/gogits/gogs/modules/base"
) )
@ -137,7 +139,7 @@ func CreateOrganization(org, owner *User) (*User, error) {
Uid : owner . Id , Uid : owner . Id ,
OrgId : org . Id , OrgId : org . Id ,
IsOwner : true , IsOwner : true ,
NumTeam : 1 , NumTeams : 1 ,
} }
if _ , err = sess . Insert ( ou ) ; err != nil { if _ , err = sess . Insert ( ou ) ; err != nil {
sess . Rollback ( ) sess . Rollback ( )
@ -199,7 +201,7 @@ type OrgUser struct {
OrgId int64 ` xorm:"INDEX UNIQUE(s)" ` OrgId int64 ` xorm:"INDEX UNIQUE(s)" `
IsPublic bool IsPublic bool
IsOwner bool IsOwner bool
NumTeam int NumTeams int
} }
// IsOrganizationOwner returns true if given user is in the owner team.
// IsOrganizationOwner returns true if given user is in the owner team.
@ -255,17 +257,17 @@ func AddOrgUser(orgId, uid int64) error {
return nil return nil
} }
ou := & OrgUser {
Uid : uid ,
OrgId : orgId ,
}
sess := x . NewSession ( ) sess := x . NewSession ( )
defer sess . Close ( ) defer sess . Close ( )
if err := sess . Begin ( ) ; err != nil { if err := sess . Begin ( ) ; err != nil {
return err return err
} }
ou := & OrgUser {
Uid : uid ,
OrgId : orgId ,
}
if _ , err := sess . Insert ( ou ) ; err != nil { if _ , err := sess . Insert ( ou ) ; err != nil {
sess . Rollback ( ) sess . Rollback ( )
return err return err
@ -288,12 +290,17 @@ func RemoveOrgUser(orgId, uid int64) error {
return nil return nil
} }
// Check if the user to delete is the last member in owner team.
u , err := GetUserById ( uid )
if IsOrganizationOwner ( orgId , uid ) { if err != nil {
return err
}
org , err := GetUserById ( orgId ) org , err := GetUserById ( orgId )
if err != nil { if err != nil {
return err return err
} }
// Check if the user to delete is the last member in owner team.
if IsOrganizationOwner ( orgId , uid ) {
t , err := org . GetOwnerTeam ( ) t , err := org . GetOwnerTeam ( )
if err != nil { if err != nil {
return err return err
@ -317,6 +324,33 @@ func RemoveOrgUser(orgId, uid int64) error {
return err return err
} }
// Delete all repository accesses.
if err = org . GetRepositories ( ) ; err != nil {
sess . Rollback ( )
return err
}
access := & Access {
UserName : u . LowerName ,
}
for _ , repo := range org . Repos {
access . RepoName = path . Join ( org . LowerName , repo . LowerName )
if _ , err = sess . Delete ( access ) ; err != nil {
sess . Rollback ( )
return err
}
}
// Delete member in his/her teams.
ts , err := GetUserTeams ( org . Id , u . Id )
if err != nil {
return err
}
for _ , t := range ts {
if err = removeTeamMemberWithSess ( org . Id , t . Id , u . Id , sess ) ; err != nil {
return err
}
}
return sess . Commit ( ) return sess . Commit ( )
} }
@ -352,6 +386,11 @@ type Team struct {
NumMembers int NumMembers int
} }
// IsOwnerTeam returns true if team is owner team.
func ( t * Team ) IsOwnerTeam ( ) bool {
return t . Name == OWNER_TEAM
}
// IsTeamMember returns true if given user is a member of team.
// IsTeamMember returns true if given user is a member of team.
func ( t * Team ) IsMember ( uid int64 ) bool { func ( t * Team ) IsMember ( uid int64 ) bool {
return IsTeamMember ( t . OrgId , t . Id , uid ) return IsTeamMember ( t . OrgId , t . Id , uid )
@ -362,7 +401,10 @@ func (t *Team) GetRepositories() error {
idStrs := strings . Split ( t . RepoIds , "|" ) idStrs := strings . Split ( t . RepoIds , "|" )
t . Repos = make ( [ ] * Repository , 0 , len ( idStrs ) ) t . Repos = make ( [ ] * Repository , 0 , len ( idStrs ) )
for _ , str := range idStrs { for _ , str := range idStrs {
id := com . StrTo ( str ) . MustInt64 ( ) if len ( str ) == 0 {
continue
}
id := com . StrTo ( str [ 1 : ] ) . MustInt64 ( )
if id == 0 { if id == 0 {
continue continue
} }
@ -459,15 +501,177 @@ func GetTeamById(teamId int64) (*Team, error) {
return t , nil return t , nil
} }
// GetHighestAuthorize returns highest repository authorize level for given user and team.
func GetHighestAuthorize ( orgId , uid , teamId , repoId int64 ) ( AuthorizeType , error ) {
ts , err := GetUserTeams ( orgId , uid )
if err != nil {
return 0 , err
}
var auth AuthorizeType = 0
for _ , t := range ts {
// Not current team and has given repository.
if t . Id != teamId && strings . Contains ( t . RepoIds , "$" + com . ToStr ( repoId ) + "|" ) {
// Fast return.
if t . Authorize == ORG_WRITABLE {
return ORG_WRITABLE , nil
}
if t . Authorize > auth {
auth = t . Authorize
}
}
}
return auth , nil
}
// UpdateTeam updates information of team.
// UpdateTeam updates information of team.
func UpdateTeam ( t * Team ) error { func UpdateTeam ( t * Team , authChanged bool ) ( err error ) {
if ! IsLegalName ( t . Name ) {
return ErrTeamNameIllegal
}
if len ( t . Description ) > 255 { if len ( t . Description ) > 255 {
t . Description = t . Description [ : 255 ] t . Description = t . Description [ : 255 ]
} }
sess := x . NewSession ( )
defer sess . Close ( )
if err = sess . Begin ( ) ; err != nil {
return err
}
// Update access for team members if needed.
if authChanged && ! t . IsOwnerTeam ( ) {
if err = t . GetRepositories ( ) ; err != nil {
return err
} else if err = t . GetMembers ( ) ; err != nil {
return err
}
// Get organization.
org , err := GetUserById ( t . OrgId )
if err != nil {
return err
}
mode := READABLE
if t . Authorize > ORG_READABLE {
mode = WRITABLE
}
access := & Access {
Mode : mode ,
}
for _ , repo := range t . Repos {
access . RepoName = path . Join ( org . LowerName , repo . LowerName )
for _ , u := range t . Members {
// ORG_WRITABLE is the highest authorize level for now.
// Skip checking others if current team has this level.
if t . Authorize < ORG_WRITABLE {
auth , err := GetHighestAuthorize ( org . Id , u . Id , t . Id , repo . Id )
if err != nil {
sess . Rollback ( )
return err
}
if auth >= t . Authorize {
continue // Other team has higher or same authorize level.
}
}
access . UserName = u . LowerName
if _ , err = sess . Update ( access ) ; err != nil {
sess . Rollback ( )
return err
}
}
}
}
t . LowerName = strings . ToLower ( t . Name ) t . LowerName = strings . ToLower ( t . Name )
_ , err := x . Id ( t . Id ) . AllCols ( ) . Update ( t ) if _ , err = sess . Id ( t . Id ) . AllCols ( ) . Update ( t ) ; err != nil {
sess . Rollback ( )
return err
}
return sess . Commit ( )
}
// DeleteTeam deletes given team.
// It's caller's responsibility to assign organization ID.
func DeleteTeam ( t * Team ) error {
if err := t . GetRepositories ( ) ; err != nil {
return err
} else if err = t . GetMembers ( ) ; err != nil {
return err
}
// Get organization.
org , err := GetUserById ( t . OrgId )
if err != nil {
return err
}
sess := x . NewSession ( )
defer sess . Close ( )
if err = sess . Begin ( ) ; err != nil {
return err
}
// Delete all accesses.
mode := READABLE
if t . Authorize > ORG_READABLE {
mode = WRITABLE
}
access := new ( Access )
for _ , repo := range t . Repos {
access . RepoName = path . Join ( org . LowerName , repo . LowerName )
for _ , u := range t . Members {
access . UserName = u . LowerName
access . Mode = mode
auth , err := GetHighestAuthorize ( org . Id , u . Id , t . Id , repo . Id )
if err != nil {
sess . Rollback ( )
return err
}
if auth == 0 {
if _ , err = sess . Delete ( access ) ; err != nil {
sess . Rollback ( )
return err
}
} else if auth < t . Authorize {
// Downgrade authorize level.
mode := READABLE
if auth > ORG_READABLE {
mode = WRITABLE
}
access . Mode = mode
if _ , err = sess . Update ( access ) ; err != nil {
sess . Rollback ( )
return err
}
}
}
}
// Delete team-user.
if _ , err = sess . Where ( "org_id=?" , org . Id ) . Where ( "team_id=?" , t . Id ) . Delete ( new ( TeamUser ) ) ; err != nil {
sess . Rollback ( )
return err
}
// Delete team.
if _ , err = sess . Id ( t . Id ) . Delete ( new ( Team ) ) ; err != nil {
sess . Rollback ( )
return err
}
// Update organization number of teams.
if _ , err = sess . Exec ( "UPDATE `user` SET num_teams = num_teams - 1 WHERE id = ?" , t . OrgId ) ; err != nil {
sess . Rollback ( )
return err return err
}
return sess . Commit ( )
} }
// ___________ ____ ___
// ___________ ____ ___
@ -509,12 +713,37 @@ func GetTeamMembers(orgId, teamId int64) ([]*User, error) {
return us , nil return us , nil
} }
// GetUserTeams returns all teams that user belongs to in given origanization.
func GetUserTeams ( orgId , uid int64 ) ( [ ] * Team , error ) {
tus := make ( [ ] * TeamUser , 0 , 5 )
if err := x . Where ( "uid=?" , uid ) . And ( "org_id=?" , orgId ) . Find ( & tus ) ; err != nil {
return nil , err
}
ts := make ( [ ] * Team , len ( tus ) )
for i , tu := range tus {
t := new ( Team )
has , err := x . Id ( tu . TeamId ) . Get ( t )
if err != nil {
return nil , err
} else if ! has {
return nil , ErrTeamNotExist
}
ts [ i ] = t
}
return ts , nil
}
// AddTeamMember adds new member to given team of given organization.
// AddTeamMember adds new member to given team of given organization.
func AddTeamMember ( orgId , teamId , uid int64 ) error { func AddTeamMember ( orgId , teamId , uid int64 ) error {
if ! IsOrganizationMember ( orgId , uid ) || IsTeamMember ( orgId , teamId , uid ) { if IsTeamMember ( orgId , teamId , uid ) {
return nil return nil
} }
if err := AddOrgUser ( orgId , uid ) ; err != nil {
return err
}
// Get team and its repositories.
// Get team and its repositories.
t , err := GetTeamById ( teamId ) t , err := GetTeamById ( teamId )
if err != nil { if err != nil {
@ -569,18 +798,49 @@ func AddTeamMember(orgId, teamId, uid int64) error {
// Give access to team repositories.
// Give access to team repositories.
for _ , repo := range t . Repos { for _ , repo := range t . Repos {
auth , err := GetHighestAuthorize ( orgId , uid , teamId , repo . Id )
if err != nil {
sess . Rollback ( )
return err
}
access . Id = 0
access . RepoName = path . Join ( org . LowerName , repo . LowerName ) access . RepoName = path . Join ( org . LowerName , repo . LowerName )
// Equal 0 means given access doesn't exist.
if auth == 0 {
if _ , err = sess . Insert ( access ) ; err != nil { if _ , err = sess . Insert ( access ) ; err != nil {
sess . Rollback ( ) sess . Rollback ( )
return err return err
} }
} else if auth < t . Authorize {
if _ , err = sess . Update ( access ) ; err != nil {
sess . Rollback ( )
return err
}
}
}
fmt . Println ( "kao" )
// We make sure it exists before.
ou := new ( OrgUser )
_ , err = sess . Where ( "uid=?" , uid ) . And ( "org_id=?" , orgId ) . Get ( ou )
if err != nil {
sess . Rollback ( )
return err
}
ou . NumTeams ++
if t . IsOwnerTeam ( ) {
ou . IsOwner = true
}
if _ , err = sess . Id ( ou . Id ) . AllCols ( ) . Update ( ou ) ; err != nil {
sess . Rollback ( )
return err
} }
return sess . Commit ( ) return sess . Commit ( )
} }
// RemoveTeamMember removes member from given team of given organization.
func removeTeamMemberWithSess ( orgId , teamId , uid int64 , sess * xorm . Session ) error {
func RemoveTeamMember ( orgId , teamId , uid int64 ) error {
if ! IsTeamMember ( orgId , teamId , uid ) { if ! IsTeamMember ( orgId , teamId , uid ) {
return nil return nil
} }
@ -590,6 +850,12 @@ func RemoveTeamMember(orgId, teamId, uid int64) error {
if err != nil { if err != nil {
return err return err
} }
// Check if the user to delete is the last member in owner team.
if t . IsOwnerTeam ( ) && t . NumMembers == 1 {
return ErrLastOrgOwner
}
t . NumMembers -- t . NumMembers --
if err = t . GetRepositories ( ) ; err != nil { if err = t . GetRepositories ( ) ; err != nil {
@ -608,22 +874,12 @@ func RemoveTeamMember(orgId, teamId, uid int64) error {
return err return err
} }
sess := x . NewSession ( )
defer sess . Close ( )
if err := sess . Begin ( ) ; err != nil {
return err
}
tu := & TeamUser { tu := & TeamUser {
Uid : uid , Uid : uid ,
OrgId : orgId , OrgId : orgId ,
TeamId : teamId , TeamId : teamId ,
} }
access := & Access {
UserName : u . LowerName ,
}
if _ , err := sess . Delete ( tu ) ; err != nil { if _ , err := sess . Delete ( tu ) ; err != nil {
sess . Rollback ( ) sess . Rollback ( )
return err return err
@ -633,13 +889,63 @@ func RemoveTeamMember(orgId, teamId, uid int64) error {
} }
// Delete access to team repositories.
// Delete access to team repositories.
access := & Access {
UserName : u . LowerName ,
}
for _ , repo := range t . Repos { for _ , repo := range t . Repos {
auth , err := GetHighestAuthorize ( orgId , uid , teamId , repo . Id )
if err != nil {
sess . Rollback ( )
return err
}
// Delete access if this is the last team user belongs to.
if auth == 0 {
access . RepoName = path . Join ( org . LowerName , repo . LowerName ) access . RepoName = path . Join ( org . LowerName , repo . LowerName )
if _ , err = sess . Delete ( access ) ; err != nil { _ , err = sess . Delete ( access )
} else if auth < t . Authorize {
// Downgrade authorize level.
mode := READABLE
if auth > ORG_READABLE {
mode = WRITABLE
}
access . Mode = mode
_ , err = sess . Update ( access )
}
if err != nil {
sess . Rollback ( )
return err
}
}
// This must exist.
ou := new ( OrgUser )
_ , err = sess . Where ( "uid=?" , uid ) . And ( "org_id=?" , org . Id ) . Get ( ou )
if err != nil {
sess . Rollback ( ) sess . Rollback ( )
return err return err
} }
ou . NumTeams --
if t . IsOwnerTeam ( ) {
ou . IsOwner = false
}
if _ , err = sess . Id ( ou . Id ) . AllCols ( ) . Update ( ou ) ; err != nil {
sess . Rollback ( )
return err
} }
return nil
}
// RemoveTeamMember removes member from given team of given organization.
func RemoveTeamMember ( orgId , teamId , uid int64 ) error {
sess := x . NewSession ( )
defer sess . Close ( )
if err := sess . Begin ( ) ; err != nil {
return err
}
if err := removeTeamMemberWithSess ( orgId , teamId , uid , sess ) ; err != nil {
return err
}
return sess . Commit ( ) return sess . Commit ( )
} }
Unknwon
10 years ago