Read about our upcoming Code of Conduct on this issue

group.rb 6.39 KB
Newer Older
Steven Thonus's avatar
Steven Thonus committed
1
2
require 'carrierwave/orm/activerecord'

3
class Group < Namespace
4
  include Gitlab::ConfigHelper
Felipe Artur's avatar
Felipe Artur committed
5
  include Gitlab::VisibilityLevel
Rémy Coutable's avatar
Rémy Coutable committed
6
  include AccessRequestable
7
  include Avatarable
8
  include Referable
9
  include SelectForProjectAuthorization
Felipe Artur's avatar
Felipe Artur committed
10

11
  has_many :group_members, -> { where(requested_at: nil) }, dependent: :destroy, as: :source
12
  alias_method :members, :group_members
13
  has_many :users, through: :group_members
14
  has_many :owners,
15
    -> { where(members: { access_level: Gitlab::Access::OWNER }) },
16
17
18
    through: :group_members,
    source: :user

19
20
  has_many :requesters, -> { where.not(requested_at: nil) }, dependent: :destroy, as: :source, class_name: 'GroupMember'

21
22
  has_many :project_group_links, dependent: :destroy
  has_many :shared_projects, through: :project_group_links, source: :project
23
  has_many :notification_settings, dependent: :destroy, as: :source
24
  has_many :labels, class_name: 'GroupLabel'
Andrey Kumanyaev's avatar
Andrey Kumanyaev committed
25

26
  validate :avatar_type, if: ->(user) { user.avatar.present? && user.avatar_changed? }
27
28
  validate :visibility_level_allowed_by_projects

29
  validates :avatar, file_size: { maximum: 200.kilobytes.to_i }
Steven Thonus's avatar
Steven Thonus committed
30

31
32
  validates :two_factor_grace_period, presence: true, numericality: { greater_than_or_equal_to: 0 }

Douwe Maan's avatar
Douwe Maan committed
33
  mount_uploader :avatar, AvatarUploader
34
  has_many :uploads, as: :model, dependent: :destroy
35

36
37
  after_create :post_create_hook
  after_destroy :post_destroy_hook
38
  after_save :update_two_factor_requirement
39

40
  class << self
41
42
43
44
45
46
47
    # Searches for groups matching the given query.
    #
    # This method uses ILIKE on PostgreSQL and LIKE on MySQL.
    #
    # query - The search query as a String
    #
    # Returns an ActiveRecord::Relation.
48
    def search(query)
49
      table   = Namespace.arel_table
50
51
52
      pattern = "%#{query}%"

      where(table[:name].matches(pattern).or(table[:path].matches(pattern)))
53
54
55
    end

    def sort(method)
Markus Koller's avatar
Markus Koller committed
56
57
58
59
60
61
62
      if method == 'storage_size_desc'
        # storage_size is a virtual column so we need to
        # pass a string to avoid AR adding the table name
        reorder('storage_size DESC, namespaces.id DESC')
      else
        order_by(method)
      end
63
    end
64
65

    def reference_prefix
66
67
68
69
70
      User.reference_prefix
    end

    def reference_pattern
      User.reference_pattern
71
    end
72
73
74
75

    def visible_to_user(user)
      where(id: user.authorized_groups.select(:id).reorder(nil))
    end
76
77
78

    def select_for_project_authorization
      if current_scope.joins_values.include?(:shared_projects)
79
80
81
        joins('INNER JOIN namespaces project_namespace ON project_namespace.id = projects.namespace_id')
          .where('project_namespace.share_with_group_lock = ?',  false)
          .select("members.user_id, projects.id AS project_id, LEAST(project_group_links.group_access, members.access_level) AS access_level")
82
83
84
85
      else
        super
      end
    end
86
87
  end

88
  def to_reference(_from_project = nil, full: nil)
89
    "#{self.class.reference_prefix}#{full_path}"
90
91
  end

92
  def web_url
93
    Gitlab::Routing.url_helpers.group_canonical_url(self)
94
95
  end

96
  def human_name
97
    full_name
98
  end
99

Felipe Artur's avatar
Felipe Artur committed
100
  def visibility_level_field
101
    :visibility_level
Felipe Artur's avatar
Felipe Artur committed
102
103
  end

104
  def visibility_level_allowed_by_projects
Douwe Maan's avatar
Douwe Maan committed
105
    allowed_by_projects = self.projects.where('visibility_level > ?', self.visibility_level).none?
106
107
108
109
110
111
112
113
114

    unless allowed_by_projects
      level_name = Gitlab::VisibilityLevel.level_name(visibility_level).downcase
      self.errors.add(:visibility_level, "#{level_name} is not allowed since there are projects with higher visibility.")
    end

    allowed_by_projects
  end

115
116
117
118
  def avatar_url(**args)
    # We use avatar_path instead of overriding avatar_url because of carrierwave.
    # See https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/11001/diffs#note_28659864
    avatar_path(args)
119
120
  end

121
122
123
124
125
126
127
  def lfs_enabled?
    return false unless Gitlab.config.lfs.enabled
    return Gitlab.config.lfs.enabled if self[:lfs_enabled].nil?

    self[:lfs_enabled]
  end

128
  def add_users(users, access_level, current_user: nil, expires_at: nil)
129
    GroupMember.add_users(
130
131
132
133
134
135
      self,
      users,
      access_level,
      current_user: current_user,
      expires_at: expires_at
    )
136
137
  end

138
  def add_user(user, access_level, current_user: nil, expires_at: nil)
139
140
141
142
143
144
145
    GroupMember.add_user(
      self,
      user,
      access_level,
      current_user: current_user,
      expires_at: expires_at
    )
146
147
  end

148
  def add_guest(user, current_user = nil)
149
    add_user(user, :guest, current_user: current_user)
150
151
152
  end

  def add_reporter(user, current_user = nil)
153
    add_user(user, :reporter, current_user: current_user)
154
155
156
  end

  def add_developer(user, current_user = nil)
157
    add_user(user, :developer, current_user: current_user)
158
159
160
  end

  def add_master(user, current_user = nil)
161
    add_user(user, :master, current_user: current_user)
162
163
  end

Douwe Maan's avatar
Douwe Maan committed
164
  def add_owner(user, current_user = nil)
165
    add_user(user, :owner, current_user: current_user)
Douwe Maan's avatar
Douwe Maan committed
166
167
168
  end

  def has_owner?(user)
169
    members_with_parents.owners.where(user_id: user).any?
Douwe Maan's avatar
Douwe Maan committed
170
171
172
  end

  def has_master?(user)
173
    members_with_parents.masters.where(user_id: user).any?
Douwe Maan's avatar
Douwe Maan committed
174
175
  end

176
177
  # Check if user is a last owner of the group.
  # Parent owners are ignored for nested groups.
Douwe Maan's avatar
Douwe Maan committed
178
  def last_owner?(user)
179
    owners.include?(user) && owners.size == 1
Douwe Maan's avatar
Douwe Maan committed
180
181
  end

Steven Thonus's avatar
Steven Thonus committed
182
183
184
185
186
  def avatar_type
    unless self.avatar.image?
      self.errors.add :avatar, "only images allowed"
    end
  end
187

188
  def post_create_hook
189
190
    Gitlab::AppLogger.info("Group \"#{name}\" was created")

191
192
193
194
    system_hook_service.execute_hooks_for(self, :create)
  end

  def post_destroy_hook
195
196
    Gitlab::AppLogger.info("Group \"#{name}\" was removed")

197
198
199
200
201
202
    system_hook_service.execute_hooks_for(self, :destroy)
  end

  def system_hook_service
    SystemHooksService.new
  end
203
204

  def refresh_members_authorized_projects
205
206
207
208
209
210
    UserProjectAccessChangedService.new(user_ids_for_project_authorizations).
      execute
  end

  def user_ids_for_project_authorizations
    users_with_parents.pluck(:id)
211
212
213
  end

  def members_with_parents
214
    GroupMember.non_request.where(source_id: ancestors.pluck(:id).push(id))
215
216
217
  end

  def users_with_parents
218
    User.where(id: members_with_parents.select(:user_id))
219
  end
Z.J. van de Weg's avatar
Z.J. van de Weg committed
220
221
222
223
224
225
226
227
228
229

  def mattermost_team_params
    max_length = 59

    {
      name: path[0..max_length],
      display_name: name[0..max_length],
      type: public? ? 'O' : 'I' # Open vs Invite-only
    }
  end
230
231
232
233
234
235
236
237

  protected

  def update_two_factor_requirement
    return unless require_two_factor_authentication_changed? || two_factor_grace_period_changed?

    users.find_each(&:update_two_factor_requirement)
  end
238
end