user.rb 15.9 KB
Newer Older
1
2
3
4
# == Schema Information
#
# Table name: users
#
Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
#  id                       :integer          not null, primary key
#  email                    :string(255)      default(""), not null
#  encrypted_password       :string(255)      default(""), not null
#  reset_password_token     :string(255)
#  reset_password_sent_at   :datetime
#  remember_created_at      :datetime
#  sign_in_count            :integer          default(0)
#  current_sign_in_at       :datetime
#  last_sign_in_at          :datetime
#  current_sign_in_ip       :string(255)
#  last_sign_in_ip          :string(255)
#  created_at               :datetime
#  updated_at               :datetime
#  name                     :string(255)
#  admin                    :boolean          default(FALSE), not null
#  projects_limit           :integer          default(10)
#  skype                    :string(255)      default(""), not null
#  linkedin                 :string(255)      default(""), not null
#  twitter                  :string(255)      default(""), not null
#  authentication_token     :string(255)
#  theme_id                 :integer          default(1), not null
#  bio                      :string(255)
#  failed_attempts          :integer          default(0)
#  locked_at                :datetime
#  extern_uid               :string(255)
#  provider                 :string(255)
#  username                 :string(255)
#  can_create_group         :boolean          default(TRUE), not null
#  can_create_team          :boolean          default(TRUE), not null
#  state                    :string(255)
#  color_scheme_id          :integer          default(1), not null
#  notification_level       :integer          default(1), not null
#  password_expires_at      :datetime
#  created_by_id            :integer
#  last_credential_check_at :datetime
#  avatar                   :string(255)
#  confirmation_token       :string(255)
#  confirmed_at             :datetime
#  confirmation_sent_at     :datetime
#  unconfirmed_email        :string(255)
#  hide_no_ssh_key          :boolean          default(FALSE)
#  website_url              :string(255)      default(""), not null
47
48
#

Steven Thonus's avatar
Steven Thonus committed
49
50
51
require 'carrierwave/orm/activerecord'
require 'file_size_validator'

gitlabhq's avatar
gitlabhq committed
52
class User < ActiveRecord::Base
53
54
  include Gitlab::ConfigHelper
  extend Gitlab::ConfigHelper
55
  include TokenAuthenticatable
56

57
  default_value_for :admin, false
58
  default_value_for :can_create_group, gitlab_config.default_can_create_group
59
60
  default_value_for :can_create_team, false
  default_value_for :hide_no_ssh_key, false
61
62
  default_value_for :projects_limit, gitlab_config.default_projects_limit
  default_value_for :theme_id, gitlab_config.default_theme
63

64
  devise :database_authenticatable, :lockable, :async,
65
         :recoverable, :rememberable, :trackable, :validatable, :omniauthable, :confirmable, :registerable
gitlabhq's avatar
gitlabhq committed
66

67
  attr_accessor :force_random_password
gitlabhq's avatar
gitlabhq committed
68

69
70
71
  # Virtual attribute for authenticating by either username or email
  attr_accessor :login

72
73
74
75
  #
  # Relations
  #

76
  # Namespace for personal projects
77
  has_one :namespace, -> { where type: nil }, dependent: :destroy, foreign_key: :owner_id, class_name: "Namespace"
78
79
80

  # Profile
  has_many :keys, dependent: :destroy
81
  has_many :emails, dependent: :destroy
82
83

  # Groups
84
85
86
87
88
89
  has_many :members, dependent: :destroy
  has_many :project_members, source: 'ProjectMember'
  has_many :group_members, source: 'GroupMember'
  has_many :groups, through: :group_members
  has_many :owned_groups, -> { where group_members: { access_level: Gitlab::Access::OWNER } }, through: :group_members, source: :group
  has_many :masters_groups, -> { where group_members: { access_level: Gitlab::Access::MASTER } }, through: :group_members, source: :group
90

91
  # Projects
92
93
  has_many :groups_projects,          through: :groups, source: :projects
  has_many :personal_projects,        through: :namespace, source: :projects
94
  has_many :projects,                 through: :project_members
95
  has_many :created_projects,         foreign_key: :creator_id, class_name: 'Project'
Ciro Santilli's avatar
Ciro Santilli committed
96
97
  has_many :users_star_projects, dependent: :destroy
  has_many :starred_projects, through: :users_star_projects, source: :project
98

99
  has_many :snippets,                 dependent: :destroy, foreign_key: :author_id, class_name: "Snippet"
100
  has_many :project_members,           dependent: :destroy
101
102
103
104
  has_many :issues,                   dependent: :destroy, foreign_key: :author_id
  has_many :notes,                    dependent: :destroy, foreign_key: :author_id
  has_many :merge_requests,           dependent: :destroy, foreign_key: :author_id
  has_many :events,                   dependent: :destroy, foreign_key: :author_id,   class_name: "Event"
105
  has_many :recent_events, -> { order "id DESC" }, foreign_key: :author_id,   class_name: "Event"
106
107
108
  has_many :assigned_issues,          dependent: :destroy, foreign_key: :assignee_id, class_name: "Issue"
  has_many :assigned_merge_requests,  dependent: :destroy, foreign_key: :assignee_id, class_name: "MergeRequest"

109

110
111
112
  #
  # Validations
  #
Cyril Jouve's avatar
Cyril Jouve committed
113
  validates :name, presence: true
114
  validates :email, presence: true, email: {strict_mode: true}, uniqueness: true
115
  validates :bio, length: { maximum: 255 }, allow_blank: true
116
  validates :extern_uid, allow_blank: true, uniqueness: {scope: :provider}
Nihad Abbasov's avatar
Nihad Abbasov committed
117
  validates :projects_limit, presence: true, numericality: {greater_than_or_equal_to: 0}
118
  validates :username, presence: true, uniqueness: { case_sensitive: false },
Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
119
            exclusion: { in: Gitlab::Blacklist.path },
120
            format: { with: Gitlab::Regex.username_regex,
121
                      message: Gitlab::Regex.username_regex_message }
122

Andrey Kumanyaev's avatar
Andrey Kumanyaev committed
123
  validates :notification_level, inclusion: { in: Notification.notification_levels }, presence: true
124
  validate :namespace_uniq, if: ->(user) { user.username_changed? }
125
  validate :avatar_type, if: ->(user) { user.avatar_changed? }
126
  validate :unique_email, if: ->(user) { user.email_changed? }
Steven Thonus's avatar
Steven Thonus committed
127
  validates :avatar, file_size: { maximum: 100.kilobytes.to_i }
128

129
  before_validation :generate_password, on: :create
130
131
  before_validation :sanitize_attrs

Nihad Abbasov's avatar
Nihad Abbasov committed
132
  before_save :ensure_authentication_token
Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
133
134
135
136
  after_save :ensure_namespace_correct
  after_create :post_create_hook
  after_destroy :post_destroy_hook

137

Nihad Abbasov's avatar
Nihad Abbasov committed
138
  alias_attribute :private_token, :authentication_token
139

140
  delegate :path, to: :namespace, allow_nil: true, prefix: true
141

142
143
144
  state_machine :state, initial: :active do
    after_transition any => :blocked do |user, transition|
      # Remove user from all projects and
145
      user.project_members.find_each do |membership|
Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
146
147
148
149
150
151
152
        # skip owned resources
        next if membership.project.owner == user

        return false unless membership.destroy
      end

      # Remove user from all groups
153
      user.group_members.find_each do |membership|
Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
154
        # skip owned resources
155
        next if membership.group.last_owner?(user)
Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
156

157
158
159
160
161
162
163
164
165
166
167
168
169
        return false unless membership.destroy
      end
    end

    event :block do
      transition active: :blocked
    end

    event :activate do
      transition blocked: :active
    end
  end

Steven Thonus's avatar
Steven Thonus committed
170
171
  mount_uploader :avatar, AttachmentUploader

Andrey Kumanyaev's avatar
Andrey Kumanyaev committed
172
  # Scopes
Andrew8xx8's avatar
Andrew8xx8 committed
173
  scope :admins, -> { where(admin:  true) }
174
175
  scope :blocked, -> { with_state(:blocked) }
  scope :active, -> { with_state(:active) }
Andrew8xx8's avatar
Andrew8xx8 committed
176
  scope :alphabetically, -> { order('name ASC') }
177
178
  scope :in_team, ->(team){ where(id: team.member_ids) }
  scope :not_in_team, ->(team){ where('users.id NOT IN (:ids)', ids: team.member_ids) }
skv's avatar
skv committed
179
  scope :not_in_project, ->(project) { project.users.present? ? where("id not in (:ids)", ids: project.users.map(&:id) ) : all }
180
  scope :without_projects, -> { where('id NOT IN (SELECT DISTINCT(user_id) FROM project_members)') }
181
  scope :ldap, -> { where(provider:  'ldap') }
Andrey Kumanyaev's avatar
Andrey Kumanyaev committed
182

183
  scope :potential_team_members, ->(team) { team.members.any? ? active.not_in_team(team) : active  }
Andrey Kumanyaev's avatar
Andrey Kumanyaev committed
184

185
186
187
  #
  # Class methods
  #
Andrey Kumanyaev's avatar
Andrey Kumanyaev committed
188
  class << self
189
    # Devise method overridden to allow sign in with email or username
190
191
192
193
194
195
196
197
    def find_for_database_authentication(warden_conditions)
      conditions = warden_conditions.dup
      if login = conditions.delete(:login)
        where(conditions).where(["lower(username) = :value OR lower(email) = :value", { value: login.downcase }]).first
      else
        where(conditions).first
      end
    end
198

199
200
201
202
203
204
    def find_for_commit(email, name)
      # Prefer email match over name match
      User.where(email: email).first ||
        User.joins(:emails).where(emails: { email: email }).first ||
        User.where(name: name).first
    end
205

Andrey Kumanyaev's avatar
Andrey Kumanyaev committed
206
207
208
209
210
211
212
213
    def filter filter_name
      case filter_name
      when "admins"; self.admins
      when "blocked"; self.blocked
      when "wop"; self.without_projects
      else
        self.active
      end
214
215
    end

Andrey Kumanyaev's avatar
Andrey Kumanyaev committed
216
    def search query
217
      where("lower(name) LIKE :query OR lower(email) LIKE :query OR lower(username) LIKE :query", query: "%#{query.downcase}%")
Andrey Kumanyaev's avatar
Andrey Kumanyaev committed
218
    end
219
220

    def by_username_or_id(name_or_id)
221
      where('users.username = ? OR users.id = ?', name_or_id.to_s, name_or_id.to_i).first
222
    end
223

224
225
    def build_user(attrs = {})
      User.new(attrs)
226
    end
vsizov's avatar
vsizov committed
227
  end
randx's avatar
randx committed
228

229
230
231
  #
  # Instance methods
  #
232
233
234
235
236

  def to_param
    username
  end

Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
237
238
239
240
  def notification
    @notification ||= Notification.new(self)
  end

Andrey Kumanyaev's avatar
Andrey Kumanyaev committed
241
242
243
244
  def generate_password
    if self.force_random_password
      self.password = self.password_confirmation = Devise.friendly_token.first(8)
    end
randx's avatar
randx committed
245
  end
246

247
  def generate_reset_token
Marin Jankovski's avatar
Marin Jankovski committed
248
    @reset_token, enc = Devise.token_generator.generate(self.class, :reset_password_token)
249
250
251
252

    self.reset_password_token   = enc
    self.reset_password_sent_at = Time.now.utc

Marin Jankovski's avatar
Marin Jankovski committed
253
    @reset_token
254
255
  end

256
257
  def namespace_uniq
    namespace_name = self.username
skv's avatar
skv committed
258
    if Namespace.find_by(path: namespace_name)
lol768's avatar
lol768 committed
259
      self.errors.add :username, "already exists"
260
261
    end
  end
262

263
264
265
266
267
268
  def avatar_type
    unless self.avatar.image?
      self.errors.add :avatar, "only images allowed"
    end
  end

269
270
271
272
  def unique_email
    self.errors.add(:email, 'has already been taken') if Email.exists?(email: self.email)
  end

273
274
  # Groups user has access to
  def authorized_groups
275
    @authorized_groups ||= begin
276
                             group_ids = (groups.pluck(:id) + authorized_projects.pluck(:namespace_id))
277
                             Group.where(id: group_ids).order('namespaces.name ASC')
278
                           end
279
280
281
282
283
  end


  # Projects user has access to
  def authorized_projects
284
    @authorized_projects ||= begin
285
286
287
                               project_ids = personal_projects.pluck(:id)
                               project_ids += groups_projects.pluck(:id)
                               project_ids += projects.pluck(:id).uniq
288
                               Project.where(id: project_ids).joins(:namespace).order('namespaces.name ASC')
289
                             end
290
291
  end

292
293
294
295
296
297
  def owned_projects
    @owned_projects ||= begin
                          Project.where(namespace_id: owned_groups.pluck(:id).push(namespace.id)).joins(:namespace)
                        end
  end

298
299
  # Team membership in authorized projects
  def tm_in_authorized_projects
300
    ProjectMember.where(source_id: authorized_projects.map(&:id), user_id: self.id)
301
  end
Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
302
303
304
305
306
307
308
309
310

  def is_admin?
    admin
  end

  def require_ssh_key?
    keys.count == 0
  end

311
  def can_change_username?
312
    gitlab_config.username_changing_enabled
313
314
  end

Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
315
  def can_create_project?
316
    projects_limit_left > 0
Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
317
318
319
  end

  def can_create_group?
320
    can?(:create_group, nil)
Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
321
322
323
324
325
326
327
328
329
330
  end

  def abilities
    @abilities ||= begin
                     abilities = Six.new
                     abilities << Ability
                     abilities
                   end
  end

331
332
333
334
  def can_select_namespace?
    several_namespaces? || admin
  end

Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
335
336
337
338
339
340
341
342
343
  def can? action, subject
    abilities.allowed?(self, action, subject)
  end

  def first_name
    name.split.first unless name.blank?
  end

  def cared_merge_requests
344
    MergeRequest.cared(self)
Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
345
346
  end

347
  def projects_limit_left
348
    projects_limit - personal_projects.count
349
350
  end

Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
351
352
  def projects_limit_percent
    return 100 if projects_limit.zero?
353
    (personal_projects.count.to_f / projects_limit) * 100
Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
  end

  def recent_push project_id = nil
    # Get push events not earlier than 2 hours ago
    events = recent_events.code_push.where("created_at > ?", Time.now - 2.hours)
    events = events.where(project_id: project_id) if project_id

    # Take only latest one
    events = events.recent.limit(1).first
  end

  def projects_sorted_by_activity
    authorized_projects.sorted_by_activity
  end

  def several_namespaces?
370
    owned_groups.any? || masters_groups.any?
Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
371
372
373
374
375
  end

  def namespace_id
    namespace.try :id
  end
376

377
378
379
  def name_with_username
    "#{name} (#{username})"
  end
Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
380
381
382
383

  def tm_of(project)
    project.team_member_by_id(self.id)
  end
384
385
386
387
388
389
390
391
392
393
394
395
396
397

  def already_forked? project
    !!fork_of(project)
  end

  def fork_of project
    links = ForkedProjectLink.where(forked_from_project_id: project, forked_to_project_id: personal_projects)

    if links.any?
      links.first.forked_to_project
    else
      nil
    end
  end
398
399
400
401

  def ldap_user?
    extern_uid && provider == 'ldap'
  end
402

403
  def accessible_deploy_keys
404
    DeployKey.in_projects(self.authorized_projects.pluck(:id)).uniq
405
  end
406
407

  def created_by
skv's avatar
skv committed
408
    User.find_by(id: created_by_id) if created_by_id
409
  end
410
411
412
413
414
415
416

  def sanitize_attrs
    %w(name username skype linkedin twitter bio).each do |attr|
      value = self.send(attr)
      self.send("#{attr}=", Sanitize.clean(value)) if value.present?
    end
  end
417

418
  def requires_ldap_check?
419
420
421
    if !Gitlab.config.ldap.enabled
      false
    elsif ldap_user?
422
423
424
425
426
427
      !last_credential_check_at || (last_credential_check_at + 1.hour) < Time.now
    else
      false
    end
  end

428
429
430
431
432
  def solo_owned_groups
    @solo_owned_groups ||= owned_groups.select do |group|
      group.owners == [self]
    end
  end
433
434

  def with_defaults
435
436
    User.defaults.each do |k, v|
      self.send("#{k}=", v)
437
    end
438
439

    self
440
  end
441

442
443
444
445
  def can_leave_project?(project)
    project.namespace != namespace &&
      project.project_member(self)
  end
446
447
448
449
450
451
452
453
454
455
456
457
458
459

  # Reset project events cache related to this user
  #
  # Since we do cache @event we need to reset cache in special cases:
  # * when the user changes their avatar
  # Events cache stored like  events/23-20130109142513.
  # The cache key includes updated_at timestamp.
  # Thus it will automatically generate a new fragment
  # when the event is updated because the key changes.
  def reset_events_cache
    Event.where(author_id: self.id).
      order('id DESC').limit(1000).
      update_all(updated_at: Time.now)
  end
Jerome Dalbert's avatar
Jerome Dalbert committed
460
461
462
463
464
465
466
467
468
469

  def full_website_url
    return "http://#{website_url}" if website_url !~ /^https?:\/\//

    website_url
  end

  def short_website_url
    website_url.gsub(/https?:\/\//, '')
  end
GitLab's avatar
GitLab committed
470

471
  def all_ssh_keys
GitLab's avatar
GitLab committed
472
    keys.map(&:key)
473
  end
474
475
476
477
478

  def temp_oauth_email?
    email =~ /\Atemp-email-for-oauth/
  end

Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
479
480
481
  def public_profile?
    authorized_projects.public_only.any?
  end
482
483
484

  def avatar_url(size = nil)
    if avatar.present?
Drew Blessing's avatar
Drew Blessing committed
485
      [gitlab_config.url, avatar.url].join("/")
486
    else
487
      GravatarService.new.execute(email, size)
488
489
    end
  end
Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
490
491
492
493
494
495
496
497
498
499
500
501

  def ensure_namespace_correct
    # Ensure user has namespace
    self.create_namespace!(path: self.username, name: self.username) unless self.namespace

    if self.username_changed?
      self.namespace.update_attributes(path: self.username, name: self.username)
    end
  end

  def post_create_hook
    log_info("User \"#{self.name}\" (#{self.email}) was created")
Marin Jankovski's avatar
Marin Jankovski committed
502
    notification_service.new_user(self, @reset_token)
Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
503
504
505
506
507
508
509
510
    system_hook_service.execute_hooks_for(self, :create)
  end

  def post_destroy_hook
    log_info("User \"#{self.name}\" (#{self.email})  was removed")
    system_hook_service.execute_hooks_for(self, :destroy)
  end

Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
511
  def notification_service
Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
512
513
514
515
516
517
518
519
520
521
    NotificationService.new
  end

  def log_info message
    Gitlab::AppLogger.info message
  end

  def system_hook_service
    SystemHooksService.new
  end
Ciro Santilli's avatar
Ciro Santilli committed
522
523
524
525
526
527

  def starred?(project)
    starred_projects.exists?(project)
  end

  def toggle_star(project)
528
529
    user_star_project = users_star_projects.
      where(project: project, user: self).take
Ciro Santilli's avatar
Ciro Santilli committed
530
531
532
533
534
535
    if user_star_project
      user_star_project.destroy
    else
      UsersStarProject.create!(project: project, user: self)
    end
  end
gitlabhq's avatar
gitlabhq committed
536
end