49 lines
1.4 KiB
Ruby
49 lines
1.4 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
class MemberRole < ApplicationRecord # rubocop:disable Gitlab/NamespacedClass
|
|
include IgnorableColumns
|
|
ignore_column :download_code, remove_with: '15.9', remove_after: '2023-01-22'
|
|
|
|
has_many :members
|
|
belongs_to :namespace
|
|
|
|
validates :namespace, presence: true
|
|
validates :base_access_level, presence: true
|
|
validate :belongs_to_top_level_namespace
|
|
validate :validate_namespace_locked, on: :update
|
|
validate :attributes_locked_after_member_associated, on: :update
|
|
|
|
validates_associated :members
|
|
|
|
before_destroy :prevent_delete_after_member_associated
|
|
|
|
private
|
|
|
|
def belongs_to_top_level_namespace
|
|
return if !namespace || namespace.root?
|
|
|
|
errors.add(:namespace, s_("MemberRole|must be top-level namespace"))
|
|
end
|
|
|
|
def validate_namespace_locked
|
|
return unless namespace_id_changed?
|
|
|
|
errors.add(:namespace, s_("MemberRole|can't be changed"))
|
|
end
|
|
|
|
def attributes_locked_after_member_associated
|
|
return unless members.present?
|
|
|
|
errors.add(:base, s_("MemberRole|cannot be changed because it is already assigned to a user. "\
|
|
"Please create a new Member Role instead"))
|
|
end
|
|
|
|
def prevent_delete_after_member_associated
|
|
return unless members.present?
|
|
|
|
errors.add(:base, s_("MemberRole|cannot be deleted because it is already assigned to a user. "\
|
|
"Please disassociate the member role from all users before deletion."))
|
|
|
|
throw :abort # rubocop:disable Cop/BanCatchThrow
|
|
end
|
|
end
|