debian-mirror-gitlab/app/controllers/groups_controller.rb

373 lines
10 KiB
Ruby
Raw Normal View History

2018-12-05 23:21:45 +05:30
# frozen_string_literal: true
2015-04-26 12:48:37 +05:30
class GroupsController < Groups::ApplicationController
2018-11-20 20:47:30 +05:30
include API::Helpers::RelatedResourcesHelpers
2019-03-02 22:35:43 +05:30
include IssuableCollectionsAction
2017-08-17 22:00:37 +05:30
include ParamsBackwardCompatibility
2018-03-17 18:26:18 +05:30
include PreviewMarkdown
2019-03-02 22:35:43 +05:30
include RecordUserLastActivity
2020-04-22 19:07:51 +05:30
include SendFileUpload
2020-07-28 23:09:34 +05:30
include FiltersEvents
2021-04-29 21:17:54 +05:30
include Recaptcha::Verify
2019-12-26 22:10:19 +05:30
extend ::Gitlab::Utils::Override
2015-12-23 02:04:40 +05:30
2014-09-02 18:07:02 +05:30
respond_to :html
2016-04-02 18:10:28 +05:30
2018-11-29 20:51:05 +05:30
prepend_before_action(only: [:show, :issues]) { authenticate_sessionless_user!(:rss) }
prepend_before_action(only: [:issues_calendar]) { authenticate_sessionless_user!(:ics) }
2020-04-22 19:07:51 +05:30
prepend_before_action :ensure_export_enabled, only: [:export, :download_export]
2021-04-29 21:17:54 +05:30
prepend_before_action :check_captcha, only: :create, if: -> { captcha_enabled? }
2018-11-29 20:51:05 +05:30
2016-06-02 11:05:42 +05:30
before_action :authenticate_user!, only: [:new, :create]
2016-04-02 18:10:28 +05:30
before_action :group, except: [:index, :new, :create]
2014-09-02 18:07:02 +05:30
# Authorize
2020-04-22 19:07:51 +05:30
before_action :authorize_admin_group!, only: [:edit, :update, :destroy, :projects, :transfer, :export, :download_export]
2018-03-17 18:26:18 +05:30
before_action :authorize_create_group!, only: [:new]
2021-04-29 21:17:54 +05:30
before_action :load_recaptcha, only: [:new], if: -> { captcha_required? }
2014-09-02 18:07:02 +05:30
2017-08-17 22:00:37 +05:30
before_action :group_projects, only: [:projects, :activity, :issues, :merge_requests]
2016-06-02 11:05:42 +05:30
before_action :event_filter, only: [:activity]
2014-09-02 18:07:02 +05:30
2018-11-20 20:47:30 +05:30
before_action :user_actions, only: [:show]
2017-08-17 22:00:37 +05:30
2019-12-26 22:10:19 +05:30
before_action do
push_frontend_feature_flag(:vue_issuables_list, @group)
end
2020-05-24 23:13:21 +05:30
before_action do
set_not_query_feature_flag(@group)
end
2020-04-22 19:07:51 +05:30
before_action :export_rate_limit, only: [:export, :download_export]
2021-04-29 21:17:54 +05:30
helper_method :captcha_required?
2018-03-27 19:54:05 +05:30
skip_cross_project_access_check :index, :new, :create, :edit, :update,
:destroy, :projects
# When loading show as an atom feed, we render events that could leak cross
# project information
skip_cross_project_access_check :show, if: -> { request.format.html? }
2014-09-02 18:07:02 +05:30
layout :determine_layout
2021-01-03 14:25:43 +05:30
feature_category :subgroups, [
:index, :new, :create, :show, :edit, :update,
:destroy, :details, :transfer
]
feature_category :audit_events, [:activity]
feature_category :issue_tracking, [:issues, :issues_calendar, :preview_markdown]
feature_category :code_review, [:merge_requests, :unfoldered_environment_names]
feature_category :projects, [:projects]
feature_category :importers, [:export, :download_export]
2015-09-25 12:07:36 +05:30
def index
redirect_to(current_user ? dashboard_groups_path : explore_groups_path)
end
2014-09-02 18:07:02 +05:30
def new
2018-03-17 18:26:18 +05:30
@group = Group.new(params.permit(:parent_id))
2014-09-02 18:07:02 +05:30
end
def create
2016-06-02 11:05:42 +05:30
@group = Groups::CreateService.new(current_user, group_params).execute
2014-09-02 18:07:02 +05:30
2016-06-02 11:05:42 +05:30
if @group.persisted?
2021-02-22 17:27:13 +05:30
successful_creation_hooks
2020-06-23 00:09:42 +05:30
2017-08-17 22:00:37 +05:30
notice = if @group.chat_team.present?
"Group '#{@group.name}' and its Mattermost team were successfully created."
else
"Group '#{@group.name}' was successfully created."
end
redirect_to @group, notice: notice
2014-09-02 18:07:02 +05:30
else
render action: "new"
end
end
def show
respond_to do |format|
2019-07-07 11:18:12 +05:30
format.html do
2020-06-23 00:09:42 +05:30
if @group.import_state&.in_progress?
redirect_to group_import_path(@group)
else
render_show_html
end
2019-07-07 11:18:12 +05:30
end
2019-05-18 00:54:41 +05:30
format.atom do
2019-07-07 11:18:12 +05:30
render_details_view_atom
end
end
end
def details
respond_to do |format|
format.html do
render_details_html
end
format.atom do
render_details_view_atom
2015-04-26 12:48:37 +05:30
end
2014-09-02 18:07:02 +05:30
end
end
2016-06-02 11:05:42 +05:30
def activity
2016-04-02 18:10:28 +05:30
respond_to do |format|
2016-06-02 11:05:42 +05:30
format.html
2016-04-02 18:10:28 +05:30
format.json do
load_events
2020-02-01 01:16:34 +05:30
pager_json("events/_events", @events.count { |event| event.visible_to_user?(current_user) })
2016-04-02 18:10:28 +05:30
end
end
end
2014-09-02 18:07:02 +05:30
def edit
2020-04-08 14:13:33 +05:30
@badge_api_endpoint = expose_path(api_v4_groups_badges_path(id: @group.id))
2014-09-02 18:07:02 +05:30
end
def projects
2017-08-17 22:00:37 +05:30
@projects = @group.projects.with_statistics.page(params[:page])
2014-09-02 18:07:02 +05:30
end
def update
2016-06-02 11:05:42 +05:30
if Groups::UpdateService.new(@group, current_user, group_params).execute
2021-01-29 00:20:46 +05:30
notice = "Group '#{@group.name}' was successfully updated."
redirect_to edit_group_origin_location, notice: notice
2014-09-02 18:07:02 +05:30
else
2020-10-24 23:57:45 +05:30
@group.reset
2014-09-02 18:07:02 +05:30
render action: "edit"
end
end
2021-01-29 00:20:46 +05:30
def edit_group_origin_location
if params.dig(:group, :redirect_target) == 'repository_settings'
group_settings_repository_path(@group, anchor: 'js-default-branch-name')
else
edit_group_path(@group, anchor: params[:update_section])
end
end
2014-09-02 18:07:02 +05:30
def destroy
2017-08-17 22:00:37 +05:30
Groups::DestroyService.new(@group, current_user).async_execute
2014-09-02 18:07:02 +05:30
2019-12-26 22:10:19 +05:30
redirect_to root_path, status: :found, alert: "Group '#{@group.name}' was scheduled for deletion."
2014-09-02 18:07:02 +05:30
end
2018-12-05 23:21:45 +05:30
# rubocop: disable CodeReuse/ActiveRecord
2018-03-17 18:26:18 +05:30
def transfer
parent_group = Group.find_by(id: params[:new_parent_group_id])
service = ::Groups::TransferService.new(@group, current_user)
2016-08-24 12:49:21 +05:30
2018-03-17 18:26:18 +05:30
if service.execute(parent_group)
flash[:notice] = "Group '#{@group.name}' was successfully transferred."
redirect_to group_path(@group)
else
2019-12-21 20:55:43 +05:30
flash[:alert] = service.error.html_safe
2019-07-07 11:18:12 +05:30
redirect_to edit_group_path(@group)
2018-03-17 18:26:18 +05:30
end
2016-08-24 12:49:21 +05:30
end
2018-12-05 23:21:45 +05:30
# rubocop: enable CodeReuse/ActiveRecord
2016-08-24 12:49:21 +05:30
2020-04-22 19:07:51 +05:30
def export
export_service = Groups::ImportExport::ExportService.new(group: @group, user: current_user)
if export_service.async_execute
2020-05-24 23:13:21 +05:30
redirect_to edit_group_path(@group), notice: _('Group export started. A download link will be sent by email and made available on this page.')
2020-04-22 19:07:51 +05:30
else
redirect_to edit_group_path(@group), alert: _('Group export could not be started.')
end
end
def download_export
if @group.export_file_exists?
send_upload(@group.export_file, attachment: @group.export_file.filename)
else
redirect_to edit_group_path(@group),
alert: _('Group export link has expired. Please generate a new export from your group settings.')
end
end
2021-01-03 14:25:43 +05:30
def unfoldered_environment_names
respond_to do |format|
format.json do
render json: EnvironmentNamesFinder.new(@group, current_user).execute
end
end
end
2018-03-17 18:26:18 +05:30
protected
2019-07-07 11:18:12 +05:30
def render_show_html
2021-01-29 00:20:46 +05:30
record_experiment_user(:invite_members_empty_group_version_a) if ::Gitlab.com?
2019-12-04 20:38:33 +05:30
render 'groups/show', locals: { trial: params[:trial] }
2019-07-07 11:18:12 +05:30
end
def render_details_html
render 'groups/show'
end
def render_details_view_atom
load_events
render layout: 'xml.atom', template: 'groups/show'
end
2018-12-05 23:21:45 +05:30
# rubocop: disable CodeReuse/ActiveRecord
2014-09-02 18:07:02 +05:30
def authorize_create_group!
2018-03-17 18:26:18 +05:30
allowed = if params[:parent_id].present?
parent = Group.find_by(id: params[:parent_id])
can?(current_user, :create_subgroup, parent)
else
can?(current_user, :create_group)
end
render_404 unless allowed
2014-09-02 18:07:02 +05:30
end
2018-12-05 23:21:45 +05:30
# rubocop: enable CodeReuse/ActiveRecord
2014-09-02 18:07:02 +05:30
def determine_layout
if [:new, :create].include?(action_name.to_sym)
2015-09-11 14:41:01 +05:30
'application'
elsif [:edit, :update, :projects].include?(action_name.to_sym)
'group_settings'
2014-09-02 18:07:02 +05:30
else
2015-09-11 14:41:01 +05:30
'group'
2014-09-02 18:07:02 +05:30
end
end
def group_params
2018-03-17 18:26:18 +05:30
params.require(:group).permit(group_params_attributes)
2017-08-17 22:00:37 +05:30
end
2018-03-17 18:26:18 +05:30
def group_params_attributes
2017-08-17 22:00:37 +05:30
[
2016-09-29 09:46:39 +05:30
:avatar,
:description,
2019-10-12 21:52:04 +05:30
:emails_disabled,
2020-01-01 13:55:28 +05:30
:mentions_disabled,
2016-09-29 09:46:39 +05:30
:lfs_enabled,
:name,
:path,
:public,
:request_access_enabled,
:share_with_group_lock,
2017-08-17 22:00:37 +05:30
:visibility_level,
:parent_id,
:create_chat_team,
:chat_team_name,
:require_two_factor_authentication,
2019-07-07 11:18:12 +05:30
:two_factor_grace_period,
2019-10-12 21:52:04 +05:30
:project_creation_level,
2020-04-08 14:13:33 +05:30
:subgroup_creation_level,
2021-01-03 14:25:43 +05:30
:default_branch_protection,
:default_branch_name,
2021-04-29 21:17:54 +05:30
:allow_mfa_for_subgroups,
:resource_access_token_creation_allowed
2017-08-17 22:00:37 +05:30
]
2014-09-02 18:07:02 +05:30
end
2015-04-26 12:48:37 +05:30
2018-12-05 23:21:45 +05:30
# rubocop: disable CodeReuse/ActiveRecord
2015-04-26 12:48:37 +05:30
def load_events
2018-03-17 18:26:18 +05:30
params[:sort] ||= 'latest_activity_desc'
2019-12-21 20:55:43 +05:30
options = { include_subgroups: true }
projects = GroupProjectsFinder.new(params: params, group: group, options: options, current_user: current_user)
.execute
.includes(:namespace)
2018-03-17 18:26:18 +05:30
2017-09-10 17:25:29 +05:30
@events = EventCollection
2020-02-01 01:16:34 +05:30
.new(projects, offset: params[:offset].to_i, filter: event_filter, groups: groups)
.to_a
.map(&:present)
2018-03-17 18:26:18 +05:30
2018-05-09 12:01:36 +05:30
Events::RenderService
.new(current_user)
.execute(@events, atom_request: request.format.atom?)
2015-04-26 12:48:37 +05:30
end
2018-12-05 23:21:45 +05:30
# rubocop: enable CodeReuse/ActiveRecord
2017-08-17 22:00:37 +05:30
def user_actions
if current_user
@notification_setting = current_user.notification_settings_for(group)
end
end
def build_canonical_path(group)
return group_path(group) if action_name == 'show' # root group path
2017-09-10 17:25:29 +05:30
2017-08-17 22:00:37 +05:30
params[:id] = group.to_param
2018-06-27 16:04:02 +05:30
url_for(safe_params)
2017-08-17 22:00:37 +05:30
end
2019-12-21 20:55:43 +05:30
2020-04-22 19:07:51 +05:30
def export_rate_limit
prefixed_action = "group_#{params[:action]}".to_sym
2020-06-23 00:09:42 +05:30
scope = params[:action] == :download_export ? @group : nil
if Gitlab::ApplicationRateLimiter.throttled?(prefixed_action, scope: [current_user, scope].compact)
2020-04-22 19:07:51 +05:30
Gitlab::ApplicationRateLimiter.log_request(request, "#{prefixed_action}_request_limit".to_sym, current_user)
2020-06-23 00:09:42 +05:30
render plain: _('This endpoint has been requested too many times. Try again later.'), status: :too_many_requests
2020-04-22 19:07:51 +05:30
end
end
def ensure_export_enabled
render_404 unless Feature.enabled?(:group_import_export, @group, default_enabled: true)
end
2019-12-21 20:55:43 +05:30
private
2021-04-29 21:17:54 +05:30
def load_recaptcha
Gitlab::Recaptcha.load_configurations!
end
def check_captcha
return if group_params[:parent_id].present? # Only require for top-level groups
load_recaptcha
return if verify_recaptcha
flash[:alert] = _('There was an error with the reCAPTCHA. Please solve the reCAPTCHA again.')
flash.delete :recaptcha_error
@group = Group.new(group_params)
render action: 'new'
end
2021-03-11 19:13:27 +05:30
def successful_creation_hooks; end
2021-02-22 17:27:13 +05:30
2019-12-21 20:55:43 +05:30
def groups
if @group.supports_events?
@group.self_and_descendants.public_or_visible_to_user(current_user)
end
end
2019-12-26 22:10:19 +05:30
override :markdown_service_params
def markdown_service_params
params.merge(group: group)
end
2021-02-22 17:27:13 +05:30
override :has_project_list?
def has_project_list?
%w(details show index).include?(action_name)
end
2021-04-29 21:17:54 +05:30
def captcha_enabled?
Gitlab::Recaptcha.enabled? && Feature.enabled?(:recaptcha_on_top_level_group_creation, type: :ops)
end
def captcha_required?
captcha_enabled? && !params[:parent_id]
end
2014-09-02 18:07:02 +05:30
end
2019-12-04 20:38:33 +05:30
GroupsController.prepend_if_ee('EE::GroupsController')