forked from mirror/gitea
c337ff0ec7
Fixes #17453 This PR adds the abbility to block a user from a personal account or organization to restrict how the blocked user can interact with the blocker. The docs explain what's the consequence of blocking a user. Screenshots: ![grafik](https://github.com/go-gitea/gitea/assets/1666336/4ed884f3-e06a-4862-afd3-3b8aa2488dc6) ![grafik](https://github.com/go-gitea/gitea/assets/1666336/ae6d4981-f252-4f50-a429-04f0f9f1cdf1) ![grafik](https://github.com/go-gitea/gitea/assets/1666336/ca153599-5b0f-4b4a-90fe-18bdfd6f0b6b) --------- Co-authored-by: Lauris BH <lauris@nix.lv>
179 lines
5.0 KiB
Go
179 lines
5.0 KiB
Go
// Copyright 2022 The Gitea Authors. All rights reserved.
|
|
// SPDX-License-Identifier: MIT
|
|
|
|
package repo
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
|
|
"code.gitea.io/gitea/models/db"
|
|
"code.gitea.io/gitea/models/perm"
|
|
"code.gitea.io/gitea/models/unit"
|
|
user_model "code.gitea.io/gitea/models/user"
|
|
"code.gitea.io/gitea/modules/timeutil"
|
|
|
|
"xorm.io/builder"
|
|
)
|
|
|
|
// Collaboration represent the relation between an individual and a repository.
|
|
type Collaboration struct {
|
|
ID int64 `xorm:"pk autoincr"`
|
|
RepoID int64 `xorm:"UNIQUE(s) INDEX NOT NULL"`
|
|
UserID int64 `xorm:"UNIQUE(s) INDEX NOT NULL"`
|
|
Mode perm.AccessMode `xorm:"DEFAULT 2 NOT NULL"`
|
|
CreatedUnix timeutil.TimeStamp `xorm:"INDEX created"`
|
|
UpdatedUnix timeutil.TimeStamp `xorm:"INDEX updated"`
|
|
}
|
|
|
|
func init() {
|
|
db.RegisterModel(new(Collaboration))
|
|
}
|
|
|
|
// Collaborator represents a user with collaboration details.
|
|
type Collaborator struct {
|
|
*user_model.User
|
|
Collaboration *Collaboration
|
|
}
|
|
|
|
type FindCollaborationOptions struct {
|
|
db.ListOptions
|
|
RepoID int64
|
|
RepoOwnerID int64
|
|
CollaboratorID int64
|
|
}
|
|
|
|
func (opts *FindCollaborationOptions) ToConds() builder.Cond {
|
|
cond := builder.NewCond()
|
|
if opts.RepoID != 0 {
|
|
cond = cond.And(builder.Eq{"collaboration.repo_id": opts.RepoID})
|
|
}
|
|
if opts.RepoOwnerID != 0 {
|
|
cond = cond.And(builder.Eq{"repository.owner_id": opts.RepoOwnerID})
|
|
}
|
|
if opts.CollaboratorID != 0 {
|
|
cond = cond.And(builder.Eq{"collaboration.user_id": opts.CollaboratorID})
|
|
}
|
|
return cond
|
|
}
|
|
|
|
func (opts *FindCollaborationOptions) ToJoins() []db.JoinFunc {
|
|
if opts.RepoOwnerID != 0 {
|
|
return []db.JoinFunc{
|
|
func(e db.Engine) error {
|
|
e.Join("INNER", "repository", "repository.id = collaboration.repo_id")
|
|
return nil
|
|
},
|
|
}
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// GetCollaborators returns the collaborators for a repository
|
|
func GetCollaborators(ctx context.Context, opts *FindCollaborationOptions) ([]*Collaborator, int64, error) {
|
|
collaborations, total, err := db.FindAndCount[Collaboration](ctx, opts)
|
|
if err != nil {
|
|
return nil, 0, fmt.Errorf("db.FindAndCount[Collaboration]: %w", err)
|
|
}
|
|
|
|
collaborators := make([]*Collaborator, 0, len(collaborations))
|
|
userIDs := make([]int64, 0, len(collaborations))
|
|
for _, c := range collaborations {
|
|
userIDs = append(userIDs, c.UserID)
|
|
}
|
|
|
|
usersMap := make(map[int64]*user_model.User)
|
|
if err := db.GetEngine(ctx).In("id", userIDs).Find(&usersMap); err != nil {
|
|
return nil, 0, fmt.Errorf("Find users map by user ids: %w", err)
|
|
}
|
|
|
|
for _, c := range collaborations {
|
|
u := usersMap[c.UserID]
|
|
if u == nil {
|
|
u = user_model.NewGhostUser()
|
|
}
|
|
collaborators = append(collaborators, &Collaborator{
|
|
User: u,
|
|
Collaboration: c,
|
|
})
|
|
}
|
|
return collaborators, total, nil
|
|
}
|
|
|
|
// GetCollaboration get collaboration for a repository id with a user id
|
|
func GetCollaboration(ctx context.Context, repoID, uid int64) (*Collaboration, error) {
|
|
collaboration := &Collaboration{
|
|
RepoID: repoID,
|
|
UserID: uid,
|
|
}
|
|
has, err := db.GetEngine(ctx).Get(collaboration)
|
|
if !has {
|
|
collaboration = nil
|
|
}
|
|
return collaboration, err
|
|
}
|
|
|
|
// IsCollaborator check if a user is a collaborator of a repository
|
|
func IsCollaborator(ctx context.Context, repoID, userID int64) (bool, error) {
|
|
return db.GetEngine(ctx).Get(&Collaboration{RepoID: repoID, UserID: userID})
|
|
}
|
|
|
|
// ChangeCollaborationAccessMode sets new access mode for the collaboration.
|
|
func ChangeCollaborationAccessMode(ctx context.Context, repo *Repository, uid int64, mode perm.AccessMode) error {
|
|
// Discard invalid input
|
|
if mode <= perm.AccessModeNone || mode > perm.AccessModeOwner {
|
|
return nil
|
|
}
|
|
|
|
return db.WithTx(ctx, func(ctx context.Context) error {
|
|
e := db.GetEngine(ctx)
|
|
|
|
collaboration := &Collaboration{
|
|
RepoID: repo.ID,
|
|
UserID: uid,
|
|
}
|
|
has, err := e.Get(collaboration)
|
|
if err != nil {
|
|
return fmt.Errorf("get collaboration: %w", err)
|
|
} else if !has {
|
|
return nil
|
|
}
|
|
|
|
if collaboration.Mode == mode {
|
|
return nil
|
|
}
|
|
collaboration.Mode = mode
|
|
|
|
if _, err = e.
|
|
ID(collaboration.ID).
|
|
Cols("mode").
|
|
Update(collaboration); err != nil {
|
|
return fmt.Errorf("update collaboration: %w", err)
|
|
} else if _, err = e.Exec("UPDATE access SET mode = ? WHERE user_id = ? AND repo_id = ?", mode, uid, repo.ID); err != nil {
|
|
return fmt.Errorf("update access table: %w", err)
|
|
}
|
|
|
|
return nil
|
|
})
|
|
}
|
|
|
|
// IsOwnerMemberCollaborator checks if a provided user is the owner, a collaborator or a member of a team in a repository
|
|
func IsOwnerMemberCollaborator(ctx context.Context, repo *Repository, userID int64) (bool, error) {
|
|
if repo.OwnerID == userID {
|
|
return true, nil
|
|
}
|
|
teamMember, err := db.GetEngine(ctx).Join("INNER", "team_repo", "team_repo.team_id = team_user.team_id").
|
|
Join("INNER", "team_unit", "team_unit.team_id = team_user.team_id").
|
|
Where("team_repo.repo_id = ?", repo.ID).
|
|
And("team_unit.`type` = ?", unit.TypeCode).
|
|
And("team_user.uid = ?", userID).Table("team_user").Exist()
|
|
if err != nil {
|
|
return false, err
|
|
}
|
|
if teamMember {
|
|
return true, nil
|
|
}
|
|
|
|
return db.GetEngine(ctx).Get(&Collaboration{RepoID: repo.ID, UserID: userID})
|
|
}
|