# frozen_string_literal: true module Members # This class serves as more of an app-wide way we add/create members # All roads to add members should take this path. class CreatorService class << self def parsed_access_level(access_level) access_levels.fetch(access_level) { access_level.to_i } end def access_levels raise NotImplementedError end end def initialize(source, user, access_level, **args) @source = source @user = user @access_level = self.class.parsed_access_level(access_level) @args = args end def execute find_or_build_member update_member member end private attr_reader :source, :user, :access_level, :member, :args def update_member return unless can_update_member? member.attributes = member_attributes if member.request? approve_request else member.save end end def can_update_member? # There is no current user for bulk actions, in which case anything is allowed !current_user # inheriting classes will add more logic end # Populates the attributes of a member. # # This logic resides in a separate method so that EE can extend this logic, # without having to patch the `add_user` method directly. def member_attributes { created_by: member.created_by || current_user, access_level: access_level, expires_at: args[:expires_at] } end def approve_request ::Members::ApproveAccessRequestService.new(current_user, access_level: access_level) .execute( member, skip_authorization: ldap, skip_log_audit_event: ldap ) end def current_user args[:current_user] end def find_or_build_member @user = parse_user_param @member = if user.is_a?(User) find_or_initialize_member_by_user else source.members.build(invite_email: user) end end # This method is used to find users that have been entered into the "Add members" field. # These can be the User objects directly, their IDs, their emails, or new emails to be invited. def parse_user_param case user when User user when Integer # might not return anything - this needs enhancement User.find_by(id: user) # rubocop:todo CodeReuse/ActiveRecord else # must be an email or at least we'll consider it one User.find_by_any_email(user) || user end end def find_or_initialize_member_by_user # have to use members and requesters here since project/group limits on requested_at being nil for members and # wouldn't be found in `source.members` if it already existed # this of course will not treat active invites the same since we aren't searching on email source.members_and_requesters.find_or_initialize_by(user_id: user.id) # rubocop:disable CodeReuse/ActiveRecord end def ldap args[:ldap] || false end end end Members::CreatorService.prepend_mod_with('Members::CreatorService')