2014-08-29 13:02:52 +05:30
|
|
|
// Copyright 2014 The Gogs Authors. All rights reserved.
|
2020-01-25 00:30:29 +05:30
|
|
|
// Copyright 2020 The Gitea Authors.
|
2022-11-27 23:50:29 +05:30
|
|
|
// SPDX-License-Identifier: MIT
|
2014-08-29 13:02:52 +05:30
|
|
|
|
|
|
|
package admin
|
|
|
|
|
|
|
|
import (
|
2021-04-05 21:00:52 +05:30
|
|
|
"net/http"
|
2021-11-16 23:48:25 +05:30
|
|
|
"net/url"
|
2020-12-25 15:29:32 +05:30
|
|
|
"strconv"
|
2014-08-29 13:02:52 +05:30
|
|
|
"strings"
|
|
|
|
|
2016-11-10 21:54:48 +05:30
|
|
|
"code.gitea.io/gitea/models"
|
2022-01-02 18:42:35 +05:30
|
|
|
"code.gitea.io/gitea/models/auth"
|
2021-09-24 17:02:56 +05:30
|
|
|
"code.gitea.io/gitea/models/db"
|
2023-08-31 14:51:18 +05:30
|
|
|
org_model "code.gitea.io/gitea/models/organization"
|
|
|
|
repo_model "code.gitea.io/gitea/models/repo"
|
2023-08-08 13:59:14 +05:30
|
|
|
system_model "code.gitea.io/gitea/models/system"
|
2021-11-11 12:33:30 +05:30
|
|
|
user_model "code.gitea.io/gitea/models/user"
|
2023-02-19 13:05:20 +05:30
|
|
|
"code.gitea.io/gitea/modules/auth/password"
|
2016-11-10 21:54:48 +05:30
|
|
|
"code.gitea.io/gitea/modules/base"
|
|
|
|
"code.gitea.io/gitea/modules/context"
|
|
|
|
"code.gitea.io/gitea/modules/log"
|
|
|
|
"code.gitea.io/gitea/modules/setting"
|
2021-10-12 23:41:35 +05:30
|
|
|
"code.gitea.io/gitea/modules/util"
|
2021-01-26 21:06:53 +05:30
|
|
|
"code.gitea.io/gitea/modules/web"
|
2021-06-09 05:03:54 +05:30
|
|
|
"code.gitea.io/gitea/routers/web/explore"
|
2021-11-22 20:51:55 +05:30
|
|
|
user_setting "code.gitea.io/gitea/routers/web/user/setting"
|
2021-04-07 01:14:05 +05:30
|
|
|
"code.gitea.io/gitea/services/forms"
|
2019-09-24 10:32:49 +05:30
|
|
|
"code.gitea.io/gitea/services/mailer"
|
2021-11-22 20:51:55 +05:30
|
|
|
user_service "code.gitea.io/gitea/services/user"
|
2014-08-29 13:02:52 +05:30
|
|
|
)
|
|
|
|
|
|
|
|
const (
|
2016-11-21 08:51:24 +05:30
|
|
|
tplUsers base.TplName = "admin/user/list"
|
|
|
|
tplUserNew base.TplName = "admin/user/new"
|
2023-08-31 14:51:18 +05:30
|
|
|
tplUserView base.TplName = "admin/user/view"
|
2016-11-21 08:51:24 +05:30
|
|
|
tplUserEdit base.TplName = "admin/user/edit"
|
2014-08-29 13:02:52 +05:30
|
|
|
)
|
|
|
|
|
2016-11-21 08:51:24 +05:30
|
|
|
// Users show all the users
|
2016-03-11 22:26:52 +05:30
|
|
|
func Users(ctx *context.Context) {
|
2014-08-29 18:20:43 +05:30
|
|
|
ctx.Data["Title"] = ctx.Tr("admin.users")
|
|
|
|
ctx.Data["PageIsAdminUsers"] = true
|
|
|
|
|
2022-03-02 21:00:14 +05:30
|
|
|
extraParamStrings := map[string]string{}
|
2021-10-12 23:41:35 +05:30
|
|
|
statusFilterKeys := []string{"is_active", "is_admin", "is_restricted", "is_2fa_enabled", "is_prohibit_login"}
|
|
|
|
statusFilterMap := map[string]string{}
|
|
|
|
for _, filterKey := range statusFilterKeys {
|
2022-03-02 21:00:14 +05:30
|
|
|
paramKey := "status_filter[" + filterKey + "]"
|
|
|
|
paramVal := ctx.FormString(paramKey)
|
|
|
|
statusFilterMap[filterKey] = paramVal
|
|
|
|
if paramVal != "" {
|
|
|
|
extraParamStrings[paramKey] = paramVal
|
|
|
|
}
|
2021-10-12 23:41:35 +05:30
|
|
|
}
|
|
|
|
|
|
|
|
sortType := ctx.FormString("sort")
|
|
|
|
if sortType == "" {
|
2023-05-06 19:34:55 +05:30
|
|
|
sortType = explore.UserSearchDefaultAdminSort
|
|
|
|
ctx.SetFormString("sort", sortType)
|
2021-10-12 23:41:35 +05:30
|
|
|
}
|
2023-07-05 00:06:08 +05:30
|
|
|
ctx.PageData["adminUserListSearchForm"] = map[string]any{
|
2021-10-12 23:41:35 +05:30
|
|
|
"StatusFilterMap": statusFilterMap,
|
|
|
|
"SortType": sortType,
|
|
|
|
}
|
|
|
|
|
2021-11-24 15:19:20 +05:30
|
|
|
explore.RenderUserSearch(ctx, &user_model.SearchUserOptions{
|
2022-03-22 12:33:22 +05:30
|
|
|
Actor: ctx.Doer,
|
2021-11-24 15:19:20 +05:30
|
|
|
Type: user_model.UserTypeIndividual,
|
2021-09-24 17:02:56 +05:30
|
|
|
ListOptions: db.ListOptions{
|
2020-01-25 00:30:29 +05:30
|
|
|
PageSize: setting.UI.Admin.UserPagingNum,
|
|
|
|
},
|
2021-10-12 23:41:35 +05:30
|
|
|
SearchByEmail: true,
|
|
|
|
IsActive: util.OptionalBoolParse(statusFilterMap["is_active"]),
|
|
|
|
IsAdmin: util.OptionalBoolParse(statusFilterMap["is_admin"]),
|
|
|
|
IsRestricted: util.OptionalBoolParse(statusFilterMap["is_restricted"]),
|
|
|
|
IsTwoFactorEnabled: util.OptionalBoolParse(statusFilterMap["is_2fa_enabled"]),
|
|
|
|
IsProhibitLogin: util.OptionalBoolParse(statusFilterMap["is_prohibit_login"]),
|
2023-09-14 12:23:36 +05:30
|
|
|
IncludeReserved: true, // administrator needs to list all acounts include reserved, bot, remote ones
|
2022-03-02 21:00:14 +05:30
|
|
|
ExtraParamStrings: extraParamStrings,
|
2017-10-24 23:06:19 +05:30
|
|
|
}, tplUsers)
|
2014-08-29 13:02:52 +05:30
|
|
|
}
|
|
|
|
|
2016-11-21 08:51:24 +05:30
|
|
|
// NewUser render adding a new user page
|
2016-03-11 22:26:52 +05:30
|
|
|
func NewUser(ctx *context.Context) {
|
2014-08-29 13:02:52 +05:30
|
|
|
ctx.Data["Title"] = ctx.Tr("admin.users.new_account")
|
|
|
|
ctx.Data["PageIsAdminUsers"] = true
|
2021-06-27 01:23:14 +05:30
|
|
|
ctx.Data["DefaultUserVisibilityMode"] = setting.Service.DefaultUserVisibilityMode
|
2021-06-28 00:17:35 +05:30
|
|
|
ctx.Data["AllowedUserVisibilityModes"] = setting.Service.AllowedUserVisibilityModesSlice.ToVisibleTypeSlice()
|
2014-08-29 13:02:52 +05:30
|
|
|
|
2015-09-13 19:21:51 +05:30
|
|
|
ctx.Data["login_type"] = "0-0"
|
|
|
|
|
2022-01-02 18:42:35 +05:30
|
|
|
sources, err := auth.Sources()
|
2014-08-29 13:02:52 +05:30
|
|
|
if err != nil {
|
2022-01-02 18:42:35 +05:30
|
|
|
ctx.ServerError("auth.Sources", err)
|
2014-08-29 13:02:52 +05:30
|
|
|
return
|
|
|
|
}
|
2015-09-13 19:21:51 +05:30
|
|
|
ctx.Data["Sources"] = sources
|
2015-09-26 05:15:44 +05:30
|
|
|
|
|
|
|
ctx.Data["CanSendEmail"] = setting.MailService != nil
|
2021-04-05 21:00:52 +05:30
|
|
|
ctx.HTML(http.StatusOK, tplUserNew)
|
2014-08-29 13:02:52 +05:30
|
|
|
}
|
|
|
|
|
2016-11-21 08:51:24 +05:30
|
|
|
// NewUserPost response for adding a new user
|
2021-01-26 21:06:53 +05:30
|
|
|
func NewUserPost(ctx *context.Context) {
|
2021-04-07 01:14:05 +05:30
|
|
|
form := web.GetForm(ctx).(*forms.AdminCreateUserForm)
|
2014-08-29 13:02:52 +05:30
|
|
|
ctx.Data["Title"] = ctx.Tr("admin.users.new_account")
|
|
|
|
ctx.Data["PageIsAdminUsers"] = true
|
2021-06-27 01:23:14 +05:30
|
|
|
ctx.Data["DefaultUserVisibilityMode"] = setting.Service.DefaultUserVisibilityMode
|
2023-03-30 21:59:57 +05:30
|
|
|
ctx.Data["AllowedUserVisibilityModes"] = setting.Service.AllowedUserVisibilityModesSlice.ToVisibleTypeSlice()
|
2014-08-29 13:02:52 +05:30
|
|
|
|
2022-01-02 18:42:35 +05:30
|
|
|
sources, err := auth.Sources()
|
2015-09-13 19:21:51 +05:30
|
|
|
if err != nil {
|
2022-01-02 18:42:35 +05:30
|
|
|
ctx.ServerError("auth.Sources", err)
|
2014-08-29 13:02:52 +05:30
|
|
|
return
|
|
|
|
}
|
2015-09-13 19:21:51 +05:30
|
|
|
ctx.Data["Sources"] = sources
|
2014-08-29 13:02:52 +05:30
|
|
|
|
2015-09-26 05:15:44 +05:30
|
|
|
ctx.Data["CanSendEmail"] = setting.MailService != nil
|
|
|
|
|
2015-09-13 19:21:51 +05:30
|
|
|
if ctx.HasError() {
|
2021-04-05 21:00:52 +05:30
|
|
|
ctx.HTML(http.StatusOK, tplUserNew)
|
2014-08-29 13:02:52 +05:30
|
|
|
return
|
|
|
|
}
|
|
|
|
|
2021-11-24 15:19:20 +05:30
|
|
|
u := &user_model.User{
|
2019-11-05 00:40:37 +05:30
|
|
|
Name: form.UserName,
|
|
|
|
Email: form.Email,
|
|
|
|
Passwd: form.Password,
|
2022-01-02 18:42:35 +05:30
|
|
|
LoginType: auth.Plain,
|
2014-08-29 13:02:52 +05:30
|
|
|
}
|
|
|
|
|
2022-04-30 01:08:11 +05:30
|
|
|
overwriteDefault := &user_model.CreateUserOverwriteOptions{
|
|
|
|
IsActive: util.OptionalBoolTrue,
|
|
|
|
Visibility: &form.Visibility,
|
|
|
|
}
|
|
|
|
|
2014-08-29 13:02:52 +05:30
|
|
|
if len(form.LoginType) > 0 {
|
|
|
|
fields := strings.Split(form.LoginType, "-")
|
2015-09-13 19:21:51 +05:30
|
|
|
if len(fields) == 2 {
|
2020-12-25 15:29:32 +05:30
|
|
|
lType, _ := strconv.ParseInt(fields[0], 10, 0)
|
2022-01-02 18:42:35 +05:30
|
|
|
u.LoginType = auth.Type(lType)
|
2020-12-25 15:29:32 +05:30
|
|
|
u.LoginSource, _ = strconv.ParseInt(fields[1], 10, 64)
|
2015-09-13 19:21:51 +05:30
|
|
|
u.LoginName = form.LoginName
|
|
|
|
}
|
2014-08-29 13:02:52 +05:30
|
|
|
}
|
2022-01-02 18:42:35 +05:30
|
|
|
if u.LoginType == auth.NoType || u.LoginType == auth.Plain {
|
2019-11-20 05:37:51 +05:30
|
|
|
if len(form.Password) < setting.MinPasswordLength {
|
|
|
|
ctx.Data["Err_Password"] = true
|
|
|
|
ctx.RenderWithErr(ctx.Tr("auth.password_too_short", setting.MinPasswordLength), tplUserNew, &form)
|
|
|
|
return
|
|
|
|
}
|
2019-11-05 00:40:37 +05:30
|
|
|
if !password.IsComplexEnough(form.Password) {
|
2019-11-20 05:37:51 +05:30
|
|
|
ctx.Data["Err_Password"] = true
|
2023-05-08 15:06:54 +05:30
|
|
|
ctx.RenderWithErr(password.BuildComplexityError(ctx.Locale), tplUserNew, &form)
|
2019-11-05 00:40:37 +05:30
|
|
|
return
|
|
|
|
}
|
2021-05-31 11:48:11 +05:30
|
|
|
pwned, err := password.IsPwned(ctx, form.Password)
|
2020-09-09 03:36:39 +05:30
|
|
|
if pwned {
|
|
|
|
ctx.Data["Err_Password"] = true
|
|
|
|
errMsg := ctx.Tr("auth.password_pwned")
|
|
|
|
if err != nil {
|
|
|
|
log.Error(err.Error())
|
|
|
|
errMsg = ctx.Tr("auth.password_pwned_err")
|
|
|
|
}
|
|
|
|
ctx.RenderWithErr(errMsg, tplUserNew, &form)
|
|
|
|
return
|
|
|
|
}
|
2019-11-05 00:40:37 +05:30
|
|
|
u.MustChangePassword = form.MustChangePassword
|
2019-10-14 20:54:26 +05:30
|
|
|
}
|
2021-06-27 01:23:14 +05:30
|
|
|
|
2023-09-14 22:39:32 +05:30
|
|
|
if err := user_model.CreateUser(ctx, u, overwriteDefault); err != nil {
|
2015-03-27 02:41:47 +05:30
|
|
|
switch {
|
2021-11-24 15:19:20 +05:30
|
|
|
case user_model.IsErrUserAlreadyExist(err):
|
2014-08-29 13:02:52 +05:30
|
|
|
ctx.Data["Err_UserName"] = true
|
2016-11-21 08:51:24 +05:30
|
|
|
ctx.RenderWithErr(ctx.Tr("form.username_been_taken"), tplUserNew, &form)
|
2021-11-11 12:33:30 +05:30
|
|
|
case user_model.IsErrEmailAlreadyUsed(err):
|
2014-08-29 13:02:52 +05:30
|
|
|
ctx.Data["Err_Email"] = true
|
2016-11-21 08:51:24 +05:30
|
|
|
ctx.RenderWithErr(ctx.Tr("form.email_been_used"), tplUserNew, &form)
|
2022-03-14 23:09:54 +05:30
|
|
|
case user_model.IsErrEmailCharIsNotSupported(err):
|
|
|
|
ctx.Data["Err_Email"] = true
|
|
|
|
ctx.RenderWithErr(ctx.Tr("form.email_invalid"), tplUserNew, &form)
|
2021-11-11 12:33:30 +05:30
|
|
|
case user_model.IsErrEmailInvalid(err):
|
2020-11-14 22:23:43 +05:30
|
|
|
ctx.Data["Err_Email"] = true
|
|
|
|
ctx.RenderWithErr(ctx.Tr("form.email_invalid"), tplUserNew, &form)
|
2021-11-24 15:19:20 +05:30
|
|
|
case db.IsErrNameReserved(err):
|
2014-08-29 13:02:52 +05:30
|
|
|
ctx.Data["Err_UserName"] = true
|
2021-11-24 15:19:20 +05:30
|
|
|
ctx.RenderWithErr(ctx.Tr("user.form.name_reserved", err.(db.ErrNameReserved).Name), tplUserNew, &form)
|
|
|
|
case db.IsErrNamePatternNotAllowed(err):
|
2015-03-27 02:41:47 +05:30
|
|
|
ctx.Data["Err_UserName"] = true
|
2021-11-24 15:19:20 +05:30
|
|
|
ctx.RenderWithErr(ctx.Tr("user.form.name_pattern_not_allowed", err.(db.ErrNamePatternNotAllowed).Pattern), tplUserNew, &form)
|
|
|
|
case db.IsErrNameCharsNotAllowed(err):
|
2020-02-24 01:22:05 +05:30
|
|
|
ctx.Data["Err_UserName"] = true
|
2021-11-24 15:19:20 +05:30
|
|
|
ctx.RenderWithErr(ctx.Tr("user.form.name_chars_not_allowed", err.(db.ErrNameCharsNotAllowed).Name), tplUserNew, &form)
|
2014-08-29 13:02:52 +05:30
|
|
|
default:
|
2018-01-11 03:04:17 +05:30
|
|
|
ctx.ServerError("CreateUser", err)
|
2014-08-29 13:02:52 +05:30
|
|
|
}
|
|
|
|
return
|
|
|
|
}
|
2022-03-22 12:33:22 +05:30
|
|
|
log.Trace("Account created by admin (%s): %s", ctx.Doer.Name, u.Name)
|
2015-09-13 19:21:51 +05:30
|
|
|
|
2016-07-15 22:06:39 +05:30
|
|
|
// Send email notification.
|
2019-09-24 10:32:49 +05:30
|
|
|
if form.SendNotify {
|
2021-04-02 15:55:13 +05:30
|
|
|
mailer.SendRegisterNotifyMail(u)
|
2015-09-26 05:15:44 +05:30
|
|
|
}
|
|
|
|
|
2015-09-13 19:21:51 +05:30
|
|
|
ctx.Flash.Success(ctx.Tr("admin.users.new_success", u.Name))
|
2021-11-16 23:48:25 +05:30
|
|
|
ctx.Redirect(setting.AppSubURL + "/admin/users/" + strconv.FormatInt(u.ID, 10))
|
2014-08-29 13:02:52 +05:30
|
|
|
}
|
|
|
|
|
2021-11-24 15:19:20 +05:30
|
|
|
func prepareUserInfo(ctx *context.Context) *user_model.User {
|
2022-12-03 08:18:26 +05:30
|
|
|
u, err := user_model.GetUserByID(ctx, ctx.ParamsInt64(":userid"))
|
2014-08-29 13:02:52 +05:30
|
|
|
if err != nil {
|
2022-08-29 19:14:39 +05:30
|
|
|
if user_model.IsErrUserNotExist(err) {
|
|
|
|
ctx.Redirect(setting.AppSubURL + "/admin/users")
|
|
|
|
} else {
|
|
|
|
ctx.ServerError("GetUserByID", err)
|
|
|
|
}
|
2015-09-13 20:37:21 +05:30
|
|
|
return nil
|
2014-08-29 13:02:52 +05:30
|
|
|
}
|
|
|
|
ctx.Data["User"] = u
|
2015-09-13 19:21:51 +05:30
|
|
|
|
2015-09-13 20:37:21 +05:30
|
|
|
if u.LoginSource > 0 {
|
2022-01-02 18:42:35 +05:30
|
|
|
ctx.Data["LoginSource"], err = auth.GetSourceByID(u.LoginSource)
|
2015-09-13 20:37:21 +05:30
|
|
|
if err != nil {
|
2022-01-02 18:42:35 +05:30
|
|
|
ctx.ServerError("auth.GetSourceByID", err)
|
2015-09-13 20:37:21 +05:30
|
|
|
return nil
|
|
|
|
}
|
|
|
|
} else {
|
2022-01-02 18:42:35 +05:30
|
|
|
ctx.Data["LoginSource"] = &auth.Source{}
|
2015-09-13 20:37:21 +05:30
|
|
|
}
|
|
|
|
|
2022-01-02 18:42:35 +05:30
|
|
|
sources, err := auth.Sources()
|
2014-08-29 13:02:52 +05:30
|
|
|
if err != nil {
|
2022-01-02 18:42:35 +05:30
|
|
|
ctx.ServerError("auth.Sources", err)
|
2015-09-13 20:37:21 +05:30
|
|
|
return nil
|
2014-08-29 13:02:52 +05:30
|
|
|
}
|
2015-09-13 20:37:21 +05:30
|
|
|
ctx.Data["Sources"] = sources
|
|
|
|
|
2023-09-15 11:43:19 +05:30
|
|
|
hasTOTP, err := auth.HasTwoFactorByUID(ctx, u.ID)
|
2021-01-05 19:24:48 +05:30
|
|
|
if err != nil {
|
2022-03-02 05:54:31 +05:30
|
|
|
ctx.ServerError("auth.HasTwoFactorByUID", err)
|
|
|
|
return nil
|
|
|
|
}
|
2023-09-16 20:09:12 +05:30
|
|
|
hasWebAuthn, err := auth.HasWebAuthnRegistrationsByUID(ctx, u.ID)
|
2022-03-02 05:54:31 +05:30
|
|
|
if err != nil {
|
|
|
|
ctx.ServerError("auth.HasWebAuthnRegistrationsByUID", err)
|
|
|
|
return nil
|
2021-01-05 19:24:48 +05:30
|
|
|
}
|
2022-03-02 05:54:31 +05:30
|
|
|
ctx.Data["TwoFactorEnabled"] = hasTOTP || hasWebAuthn
|
2021-01-05 19:24:48 +05:30
|
|
|
|
2015-09-13 20:37:21 +05:30
|
|
|
return u
|
2014-08-29 13:02:52 +05:30
|
|
|
}
|
|
|
|
|
2023-08-31 14:51:18 +05:30
|
|
|
func ViewUser(ctx *context.Context) {
|
|
|
|
ctx.Data["Title"] = ctx.Tr("admin.users.details")
|
|
|
|
ctx.Data["PageIsAdminUsers"] = true
|
|
|
|
ctx.Data["DisableRegularOrgCreation"] = setting.Admin.DisableRegularOrgCreation
|
|
|
|
ctx.Data["DisableMigrations"] = setting.Repository.DisableMigrations
|
|
|
|
ctx.Data["AllowedUserVisibilityModes"] = setting.Service.AllowedUserVisibilityModesSlice.ToVisibleTypeSlice()
|
|
|
|
|
|
|
|
u := prepareUserInfo(ctx)
|
|
|
|
if ctx.Written() {
|
|
|
|
return
|
|
|
|
}
|
|
|
|
|
|
|
|
repos, count, err := repo_model.SearchRepository(ctx, &repo_model.SearchRepoOptions{
|
|
|
|
ListOptions: db.ListOptions{
|
|
|
|
ListAll: true,
|
|
|
|
},
|
|
|
|
OwnerID: u.ID,
|
|
|
|
OrderBy: db.SearchOrderByAlphabetically,
|
|
|
|
Private: true,
|
|
|
|
Collaborate: util.OptionalBoolFalse,
|
|
|
|
})
|
|
|
|
if err != nil {
|
|
|
|
ctx.ServerError("SearchRepository", err)
|
|
|
|
return
|
|
|
|
}
|
|
|
|
|
|
|
|
ctx.Data["Repos"] = repos
|
|
|
|
ctx.Data["ReposTotal"] = int(count)
|
|
|
|
|
2023-09-14 22:39:32 +05:30
|
|
|
emails, err := user_model.GetEmailAddresses(ctx, u.ID)
|
2023-08-31 14:51:18 +05:30
|
|
|
if err != nil {
|
|
|
|
ctx.ServerError("GetEmailAddresses", err)
|
|
|
|
return
|
|
|
|
}
|
|
|
|
ctx.Data["Emails"] = emails
|
|
|
|
ctx.Data["EmailsTotal"] = len(emails)
|
|
|
|
|
2023-10-03 16:00:41 +05:30
|
|
|
orgs, err := org_model.FindOrgs(ctx, org_model.FindOrgOptions{
|
2023-08-31 14:51:18 +05:30
|
|
|
ListOptions: db.ListOptions{
|
|
|
|
ListAll: true,
|
|
|
|
},
|
|
|
|
UserID: u.ID,
|
|
|
|
IncludePrivate: true,
|
|
|
|
})
|
|
|
|
if err != nil {
|
|
|
|
ctx.ServerError("FindOrgs", err)
|
|
|
|
return
|
|
|
|
}
|
|
|
|
|
|
|
|
ctx.Data["Users"] = orgs // needed to be able to use explore/user_list template
|
|
|
|
ctx.Data["OrgsTotal"] = len(orgs)
|
|
|
|
|
|
|
|
ctx.HTML(http.StatusOK, tplUserView)
|
|
|
|
}
|
|
|
|
|
2021-07-08 17:08:13 +05:30
|
|
|
// EditUser show editing user page
|
2016-03-11 22:26:52 +05:30
|
|
|
func EditUser(ctx *context.Context) {
|
2014-08-29 13:02:52 +05:30
|
|
|
ctx.Data["Title"] = ctx.Tr("admin.users.edit_account")
|
|
|
|
ctx.Data["PageIsAdminUsers"] = true
|
2017-02-14 17:46:00 +05:30
|
|
|
ctx.Data["DisableRegularOrgCreation"] = setting.Admin.DisableRegularOrgCreation
|
2020-12-21 20:09:41 +05:30
|
|
|
ctx.Data["DisableMigrations"] = setting.Repository.DisableMigrations
|
2021-06-28 00:17:35 +05:30
|
|
|
ctx.Data["AllowedUserVisibilityModes"] = setting.Service.AllowedUserVisibilityModesSlice.ToVisibleTypeSlice()
|
2023-09-11 15:44:01 +05:30
|
|
|
ctx.Data["DisableGravatar"] = system_model.GetSettingWithCacheBool(ctx, system_model.KeyPictureDisableGravatar,
|
|
|
|
setting.GetDefaultDisableGravatar(),
|
|
|
|
)
|
2014-08-29 13:02:52 +05:30
|
|
|
|
2015-09-13 20:37:21 +05:30
|
|
|
prepareUserInfo(ctx)
|
|
|
|
if ctx.Written() {
|
2014-08-29 13:02:52 +05:30
|
|
|
return
|
|
|
|
}
|
|
|
|
|
2021-04-05 21:00:52 +05:30
|
|
|
ctx.HTML(http.StatusOK, tplUserEdit)
|
2015-09-13 20:37:21 +05:30
|
|
|
}
|
|
|
|
|
2021-07-08 17:08:13 +05:30
|
|
|
// EditUserPost response for editing user
|
2021-01-26 21:06:53 +05:30
|
|
|
func EditUserPost(ctx *context.Context) {
|
2021-04-07 01:14:05 +05:30
|
|
|
form := web.GetForm(ctx).(*forms.AdminEditUserForm)
|
2015-09-13 20:37:21 +05:30
|
|
|
ctx.Data["Title"] = ctx.Tr("admin.users.edit_account")
|
|
|
|
ctx.Data["PageIsAdminUsers"] = true
|
2020-12-21 20:09:41 +05:30
|
|
|
ctx.Data["DisableMigrations"] = setting.Repository.DisableMigrations
|
2023-03-30 21:59:57 +05:30
|
|
|
ctx.Data["AllowedUserVisibilityModes"] = setting.Service.AllowedUserVisibilityModesSlice.ToVisibleTypeSlice()
|
2023-09-11 15:44:01 +05:30
|
|
|
ctx.Data["DisableGravatar"] = system_model.GetSettingWithCacheBool(ctx, system_model.KeyPictureDisableGravatar,
|
|
|
|
setting.GetDefaultDisableGravatar())
|
2015-09-13 20:37:21 +05:30
|
|
|
|
|
|
|
u := prepareUserInfo(ctx)
|
|
|
|
if ctx.Written() {
|
2014-08-29 13:02:52 +05:30
|
|
|
return
|
|
|
|
}
|
|
|
|
|
|
|
|
if ctx.HasError() {
|
2021-04-05 21:00:52 +05:30
|
|
|
ctx.HTML(http.StatusOK, tplUserEdit)
|
2014-08-29 13:02:52 +05:30
|
|
|
return
|
|
|
|
}
|
|
|
|
|
2015-09-13 20:37:21 +05:30
|
|
|
fields := strings.Split(form.LoginType, "-")
|
|
|
|
if len(fields) == 2 {
|
2020-12-25 15:29:32 +05:30
|
|
|
loginType, _ := strconv.ParseInt(fields[0], 10, 0)
|
2022-01-02 18:42:35 +05:30
|
|
|
authSource, _ := strconv.ParseInt(fields[1], 10, 64)
|
2015-09-13 20:37:21 +05:30
|
|
|
|
2022-01-02 18:42:35 +05:30
|
|
|
if u.LoginSource != authSource {
|
|
|
|
u.LoginSource = authSource
|
|
|
|
u.LoginType = auth.Type(loginType)
|
2015-09-13 20:37:21 +05:30
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2020-09-30 01:57:03 +05:30
|
|
|
if len(form.Password) > 0 && (u.IsLocal() || u.IsOAuth2()) {
|
2016-12-20 18:02:02 +05:30
|
|
|
var err error
|
2019-11-20 05:37:51 +05:30
|
|
|
if len(form.Password) < setting.MinPasswordLength {
|
|
|
|
ctx.Data["Err_Password"] = true
|
|
|
|
ctx.RenderWithErr(ctx.Tr("auth.password_too_short", setting.MinPasswordLength), tplUserEdit, &form)
|
2016-12-20 18:02:02 +05:30
|
|
|
return
|
|
|
|
}
|
2019-10-14 20:54:26 +05:30
|
|
|
if !password.IsComplexEnough(form.Password) {
|
2023-05-08 15:06:54 +05:30
|
|
|
ctx.RenderWithErr(password.BuildComplexityError(ctx.Locale), tplUserEdit, &form)
|
2019-10-14 20:54:26 +05:30
|
|
|
return
|
|
|
|
}
|
2021-05-31 11:48:11 +05:30
|
|
|
pwned, err := password.IsPwned(ctx, form.Password)
|
2020-09-09 03:36:39 +05:30
|
|
|
if pwned {
|
|
|
|
ctx.Data["Err_Password"] = true
|
|
|
|
errMsg := ctx.Tr("auth.password_pwned")
|
|
|
|
if err != nil {
|
|
|
|
log.Error(err.Error())
|
|
|
|
errMsg = ctx.Tr("auth.password_pwned_err")
|
|
|
|
}
|
2023-03-30 22:57:00 +05:30
|
|
|
ctx.RenderWithErr(errMsg, tplUserEdit, &form)
|
2020-09-09 03:36:39 +05:30
|
|
|
return
|
|
|
|
}
|
2021-11-26 07:26:16 +05:30
|
|
|
|
|
|
|
if err := user_model.ValidateEmail(form.Email); err != nil {
|
|
|
|
ctx.Data["Err_Email"] = true
|
2023-03-30 22:57:00 +05:30
|
|
|
ctx.RenderWithErr(ctx.Tr("form.email_error"), tplUserEdit, &form)
|
2021-11-26 07:26:16 +05:30
|
|
|
return
|
|
|
|
}
|
|
|
|
|
2021-11-24 15:19:20 +05:30
|
|
|
if u.Salt, err = user_model.GetUserSalt(); err != nil {
|
2019-11-20 05:37:51 +05:30
|
|
|
ctx.ServerError("UpdateUser", err)
|
|
|
|
return
|
|
|
|
}
|
2021-01-10 23:35:18 +05:30
|
|
|
if err = u.SetPassword(form.Password); err != nil {
|
2021-01-15 01:57:22 +05:30
|
|
|
ctx.ServerError("SetPassword", err)
|
2021-01-10 23:35:18 +05:30
|
|
|
return
|
|
|
|
}
|
2014-08-29 13:02:52 +05:30
|
|
|
}
|
|
|
|
|
2021-01-10 17:44:02 +05:30
|
|
|
if len(form.UserName) != 0 && u.Name != form.UserName {
|
2021-11-22 20:51:55 +05:30
|
|
|
if err := user_setting.HandleUsernameChange(ctx, u, form.UserName); err != nil {
|
2023-03-30 22:57:00 +05:30
|
|
|
if ctx.Written() {
|
|
|
|
return
|
|
|
|
}
|
|
|
|
ctx.RenderWithErr(ctx.Flash.ErrorMsg, tplUserEdit, &form)
|
2021-01-10 17:44:02 +05:30
|
|
|
return
|
|
|
|
}
|
|
|
|
u.Name = form.UserName
|
|
|
|
u.LowerName = strings.ToLower(form.UserName)
|
|
|
|
}
|
|
|
|
|
2021-01-05 19:24:48 +05:30
|
|
|
if form.Reset2FA {
|
2023-09-15 11:43:19 +05:30
|
|
|
tf, err := auth.GetTwoFactorByUID(ctx, u.ID)
|
2022-01-02 18:42:35 +05:30
|
|
|
if err != nil && !auth.IsErrTwoFactorNotEnrolled(err) {
|
2022-03-02 05:54:31 +05:30
|
|
|
ctx.ServerError("auth.GetTwoFactorByUID", err)
|
2021-01-05 19:24:48 +05:30
|
|
|
return
|
2022-03-02 05:54:31 +05:30
|
|
|
} else if tf != nil {
|
2023-09-15 11:43:19 +05:30
|
|
|
if err := auth.DeleteTwoFactorByID(ctx, tf.ID, u.ID); err != nil {
|
2022-03-02 05:54:31 +05:30
|
|
|
ctx.ServerError("auth.DeleteTwoFactorByID", err)
|
|
|
|
return
|
|
|
|
}
|
2021-01-05 19:24:48 +05:30
|
|
|
}
|
|
|
|
|
2023-09-16 20:09:12 +05:30
|
|
|
wn, err := auth.GetWebAuthnCredentialsByUID(ctx, u.ID)
|
2022-03-02 05:54:31 +05:30
|
|
|
if err != nil {
|
|
|
|
ctx.ServerError("auth.GetTwoFactorByUID", err)
|
2021-01-05 19:24:48 +05:30
|
|
|
return
|
|
|
|
}
|
2022-03-02 05:54:31 +05:30
|
|
|
for _, cred := range wn {
|
2023-09-16 20:09:12 +05:30
|
|
|
if _, err := auth.DeleteCredential(ctx, cred.ID, u.ID); err != nil {
|
2022-03-02 05:54:31 +05:30
|
|
|
ctx.ServerError("auth.DeleteCredential", err)
|
|
|
|
return
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2021-01-05 19:24:48 +05:30
|
|
|
}
|
|
|
|
|
2015-09-13 20:56:25 +05:30
|
|
|
u.LoginName = form.LoginName
|
2015-04-28 21:29:05 +05:30
|
|
|
u.FullName = form.FullName
|
2021-11-26 07:26:16 +05:30
|
|
|
emailChanged := !strings.EqualFold(u.Email, form.Email)
|
2014-08-29 13:02:52 +05:30
|
|
|
u.Email = form.Email
|
|
|
|
u.Website = form.Website
|
|
|
|
u.Location = form.Location
|
2015-12-10 23:07:53 +05:30
|
|
|
u.MaxRepoCreation = form.MaxRepoCreation
|
2014-08-29 13:02:52 +05:30
|
|
|
u.IsActive = form.Active
|
|
|
|
u.IsAdmin = form.Admin
|
2020-01-13 23:03:46 +05:30
|
|
|
u.IsRestricted = form.Restricted
|
2014-11-18 01:23:41 +05:30
|
|
|
u.AllowGitHook = form.AllowGitHook
|
2015-11-04 05:10:52 +05:30
|
|
|
u.AllowImportLocal = form.AllowImportLocal
|
2016-12-31 08:03:30 +05:30
|
|
|
u.AllowCreateOrganization = form.AllowCreateOrganization
|
2020-04-06 19:53:15 +05:30
|
|
|
|
2021-06-27 01:23:14 +05:30
|
|
|
u.Visibility = form.Visibility
|
|
|
|
|
2020-04-06 19:53:15 +05:30
|
|
|
// skip self Prohibit Login
|
2022-03-22 12:33:22 +05:30
|
|
|
if ctx.Doer.ID == u.ID {
|
2020-04-06 19:53:15 +05:30
|
|
|
u.ProhibitLogin = false
|
|
|
|
} else {
|
|
|
|
u.ProhibitLogin = form.ProhibitLogin
|
|
|
|
}
|
2014-12-01 04:59:16 +05:30
|
|
|
|
2022-05-20 19:38:52 +05:30
|
|
|
if err := user_model.UpdateUser(ctx, u, emailChanged); err != nil {
|
2021-11-11 12:33:30 +05:30
|
|
|
if user_model.IsErrEmailAlreadyUsed(err) {
|
2014-12-01 04:59:16 +05:30
|
|
|
ctx.Data["Err_Email"] = true
|
2016-11-21 08:51:24 +05:30
|
|
|
ctx.RenderWithErr(ctx.Tr("form.email_been_used"), tplUserEdit, &form)
|
2022-03-14 23:09:54 +05:30
|
|
|
} else if user_model.IsErrEmailCharIsNotSupported(err) ||
|
|
|
|
user_model.IsErrEmailInvalid(err) {
|
2020-11-14 22:23:43 +05:30
|
|
|
ctx.Data["Err_Email"] = true
|
|
|
|
ctx.RenderWithErr(ctx.Tr("form.email_invalid"), tplUserEdit, &form)
|
2014-12-01 04:59:16 +05:30
|
|
|
} else {
|
2018-01-11 03:04:17 +05:30
|
|
|
ctx.ServerError("UpdateUser", err)
|
2014-12-01 04:59:16 +05:30
|
|
|
}
|
2014-08-29 13:02:52 +05:30
|
|
|
return
|
|
|
|
}
|
2022-03-22 12:33:22 +05:30
|
|
|
log.Trace("Account profile updated by admin (%s): %s", ctx.Doer.Name, u.Name)
|
2015-09-13 20:37:21 +05:30
|
|
|
|
2014-08-29 13:02:52 +05:30
|
|
|
ctx.Flash.Success(ctx.Tr("admin.users.update_profile_success"))
|
2021-11-16 23:48:25 +05:30
|
|
|
ctx.Redirect(setting.AppSubURL + "/admin/users/" + url.PathEscape(ctx.Params(":userid")))
|
2014-08-29 13:02:52 +05:30
|
|
|
}
|
|
|
|
|
2016-11-21 08:51:24 +05:30
|
|
|
// DeleteUser response for deleting a user
|
2016-03-11 22:26:52 +05:30
|
|
|
func DeleteUser(ctx *context.Context) {
|
2022-12-03 08:18:26 +05:30
|
|
|
u, err := user_model.GetUserByID(ctx, ctx.ParamsInt64(":userid"))
|
2014-08-29 13:02:52 +05:30
|
|
|
if err != nil {
|
2018-01-11 03:04:17 +05:30
|
|
|
ctx.ServerError("GetUserByID", err)
|
2014-08-29 13:02:52 +05:30
|
|
|
return
|
|
|
|
}
|
|
|
|
|
2022-05-09 01:52:55 +05:30
|
|
|
// admin should not delete themself
|
|
|
|
if u.ID == ctx.Doer.ID {
|
|
|
|
ctx.Flash.Error(ctx.Tr("admin.users.cannot_delete_self"))
|
2022-07-14 12:52:09 +05:30
|
|
|
ctx.Redirect(setting.AppSubURL + "/admin/users/" + url.PathEscape(ctx.Params(":userid")))
|
2022-05-09 01:52:55 +05:30
|
|
|
return
|
|
|
|
}
|
|
|
|
|
2022-07-14 12:52:09 +05:30
|
|
|
if err = user_service.DeleteUser(ctx, u, ctx.FormBool("purge")); err != nil {
|
2015-03-18 07:21:39 +05:30
|
|
|
switch {
|
|
|
|
case models.IsErrUserOwnRepos(err):
|
2014-08-29 13:02:52 +05:30
|
|
|
ctx.Flash.Error(ctx.Tr("admin.users.still_own_repo"))
|
2022-07-14 12:52:09 +05:30
|
|
|
ctx.Redirect(setting.AppSubURL + "/admin/users/" + url.PathEscape(ctx.Params(":userid")))
|
2015-03-18 07:21:39 +05:30
|
|
|
case models.IsErrUserHasOrgs(err):
|
2014-11-13 15:57:01 +05:30
|
|
|
ctx.Flash.Error(ctx.Tr("admin.users.still_has_org"))
|
2022-07-14 12:52:09 +05:30
|
|
|
ctx.Redirect(setting.AppSubURL + "/admin/users/" + url.PathEscape(ctx.Params(":userid")))
|
2022-03-30 14:12:47 +05:30
|
|
|
case models.IsErrUserOwnPackages(err):
|
|
|
|
ctx.Flash.Error(ctx.Tr("admin.users.still_own_packages"))
|
2022-07-14 12:52:09 +05:30
|
|
|
ctx.Redirect(setting.AppSubURL + "/admin/users/" + ctx.Params(":userid"))
|
2014-08-29 13:02:52 +05:30
|
|
|
default:
|
2018-01-11 03:04:17 +05:30
|
|
|
ctx.ServerError("DeleteUser", err)
|
2014-08-29 13:02:52 +05:30
|
|
|
}
|
|
|
|
return
|
|
|
|
}
|
2022-03-22 12:33:22 +05:30
|
|
|
log.Trace("Account deleted by admin (%s): %s", ctx.Doer.Name, u.Name)
|
2015-09-13 22:56:20 +05:30
|
|
|
|
|
|
|
ctx.Flash.Success(ctx.Tr("admin.users.deletion_success"))
|
2022-07-14 12:52:09 +05:30
|
|
|
ctx.Redirect(setting.AppSubURL + "/admin/users")
|
2014-08-29 13:02:52 +05:30
|
|
|
}
|
2021-11-17 00:43:13 +05:30
|
|
|
|
|
|
|
// AvatarPost response for change user's avatar request
|
|
|
|
func AvatarPost(ctx *context.Context) {
|
|
|
|
u := prepareUserInfo(ctx)
|
|
|
|
if ctx.Written() {
|
|
|
|
return
|
|
|
|
}
|
|
|
|
|
|
|
|
form := web.GetForm(ctx).(*forms.AvatarForm)
|
2021-11-22 20:51:55 +05:30
|
|
|
if err := user_setting.UpdateAvatarSetting(ctx, form, u); err != nil {
|
2021-11-17 00:43:13 +05:30
|
|
|
ctx.Flash.Error(err.Error())
|
|
|
|
} else {
|
|
|
|
ctx.Flash.Success(ctx.Tr("settings.update_user_avatar_success"))
|
|
|
|
}
|
|
|
|
|
|
|
|
ctx.Redirect(setting.AppSubURL + "/admin/users/" + strconv.FormatInt(u.ID, 10))
|
|
|
|
}
|
|
|
|
|
|
|
|
// DeleteAvatar render delete avatar page
|
|
|
|
func DeleteAvatar(ctx *context.Context) {
|
|
|
|
u := prepareUserInfo(ctx)
|
|
|
|
if ctx.Written() {
|
|
|
|
return
|
|
|
|
}
|
|
|
|
|
2021-11-22 20:51:55 +05:30
|
|
|
if err := user_service.DeleteAvatar(u); err != nil {
|
2021-11-17 00:43:13 +05:30
|
|
|
ctx.Flash.Error(err.Error())
|
|
|
|
}
|
|
|
|
|
2023-08-23 15:06:57 +05:30
|
|
|
ctx.JSONRedirect(setting.AppSubURL + "/admin/users/" + strconv.FormatInt(u.ID, 10))
|
2021-11-17 00:43:13 +05:30
|
|
|
}
|