2018-09-14 05:42:05 +00:00
|
|
|
# frozen_string_literal: true
|
|
|
|
|
2015-03-12 15:08:48 +00:00
|
|
|
class GroupsController < Groups::ApplicationController
|
2018-09-03 13:16:23 +00:00
|
|
|
include API::Helpers::RelatedResourcesHelpers
|
2019-01-07 00:00:48 +00:00
|
|
|
include IssuableCollectionsAction
|
2017-03-03 10:35:04 +00:00
|
|
|
include ParamsBackwardCompatibility
|
2017-10-11 09:03:19 +00:00
|
|
|
include PreviewMarkdown
|
2019-02-05 14:55:31 +00:00
|
|
|
include RecordUserLastActivity
|
2020-04-09 12:09:24 +00:00
|
|
|
include SendFileUpload
|
2020-06-19 18:08:39 +00:00
|
|
|
include FiltersEvents
|
2021-03-19 09:08:53 +00:00
|
|
|
include Recaptcha::Verify
|
2019-10-29 12:06:40 +00:00
|
|
|
extend ::Gitlab::Utils::Override
|
2015-11-17 10:03:18 +00:00
|
|
|
|
2012-10-02 17:42:15 +00:00
|
|
|
respond_to :html
|
2016-01-24 00:08:15 +00:00
|
|
|
|
2018-11-28 19:06:02 +00:00
|
|
|
prepend_before_action(only: [:show, :issues]) { authenticate_sessionless_user!(:rss) }
|
|
|
|
prepend_before_action(only: [:issues_calendar]) { authenticate_sessionless_user!(:ics) }
|
2020-04-09 12:09:24 +00:00
|
|
|
prepend_before_action :ensure_export_enabled, only: [:export, :download_export]
|
2021-03-19 09:08:53 +00:00
|
|
|
prepend_before_action :check_captcha, only: :create, if: -> { captcha_enabled? }
|
2018-11-28 19:06:02 +00:00
|
|
|
|
2016-03-20 20:03:53 +00:00
|
|
|
before_action :authenticate_user!, only: [:new, :create]
|
2016-01-24 00:08:15 +00:00
|
|
|
before_action :group, except: [:index, :new, :create]
|
2012-10-02 17:42:15 +00:00
|
|
|
|
2012-11-29 15:17:01 +00:00
|
|
|
# Authorize
|
2020-04-09 12:09:24 +00:00
|
|
|
before_action :authorize_admin_group!, only: [:edit, :update, :destroy, :projects, :transfer, :export, :download_export]
|
2017-09-07 18:35:45 +00:00
|
|
|
before_action :authorize_create_group!, only: [:new]
|
2021-03-19 09:08:53 +00:00
|
|
|
before_action :load_recaptcha, only: [:new], if: -> { captcha_required? }
|
2013-01-24 15:47:09 +00:00
|
|
|
|
2017-01-24 15:32:34 +00:00
|
|
|
before_action :group_projects, only: [:projects, :activity, :issues, :merge_requests]
|
2016-03-10 13:29:38 +00:00
|
|
|
before_action :event_filter, only: [:activity]
|
2013-06-08 13:26:57 +00:00
|
|
|
|
2018-09-07 06:09:13 +00:00
|
|
|
before_action :user_actions, only: [:show]
|
2017-01-24 15:32:34 +00:00
|
|
|
|
2019-11-06 21:06:44 +00:00
|
|
|
before_action do
|
|
|
|
push_frontend_feature_flag(:vue_issuables_list, @group)
|
|
|
|
end
|
|
|
|
|
2020-05-07 03:09:46 +00:00
|
|
|
before_action do
|
|
|
|
set_not_query_feature_flag(@group)
|
|
|
|
end
|
|
|
|
|
2020-04-09 12:09:24 +00:00
|
|
|
before_action :export_rate_limit, only: [:export, :download_export]
|
|
|
|
|
2021-03-19 09:08:53 +00:00
|
|
|
helper_method :captcha_required?
|
|
|
|
|
2017-12-11 14:21:06 +00:00
|
|
|
skip_cross_project_access_check :index, :new, :create, :edit, :update,
|
|
|
|
:destroy, :projects
|
|
|
|
# When loading show as an atom feed, we render events that could leak cross
|
|
|
|
# project information
|
|
|
|
skip_cross_project_access_check :show, if: -> { request.format.html? }
|
|
|
|
|
2015-05-01 08:39:11 +00:00
|
|
|
layout :determine_layout
|
|
|
|
|
2020-10-06 12:08:38 +00:00
|
|
|
feature_category :subgroups, [
|
|
|
|
:index, :new, :create, :show, :edit, :update,
|
|
|
|
:destroy, :details, :transfer
|
|
|
|
]
|
|
|
|
|
|
|
|
feature_category :audit_events, [:activity]
|
|
|
|
feature_category :issue_tracking, [:issues, :issues_calendar, :preview_markdown]
|
2020-10-19 06:09:08 +00:00
|
|
|
feature_category :code_review, [:merge_requests, :unfoldered_environment_names]
|
2020-10-06 12:08:38 +00:00
|
|
|
feature_category :projects, [:projects]
|
|
|
|
feature_category :importers, [:export, :download_export]
|
|
|
|
|
2015-09-08 13:49:20 +00:00
|
|
|
def index
|
2015-09-08 14:14:14 +00:00
|
|
|
redirect_to(current_user ? dashboard_groups_path : explore_groups_path)
|
2015-09-08 13:49:20 +00:00
|
|
|
end
|
|
|
|
|
2013-01-24 15:47:09 +00:00
|
|
|
def new
|
2017-09-07 18:35:45 +00:00
|
|
|
@group = Group.new(params.permit(:parent_id))
|
2013-01-24 15:47:09 +00:00
|
|
|
end
|
|
|
|
|
|
|
|
def create
|
2016-03-17 22:42:46 +00:00
|
|
|
@group = Groups::CreateService.new(current_user, group_params).execute
|
2013-01-24 15:47:09 +00:00
|
|
|
|
2016-03-17 22:42:46 +00:00
|
|
|
if @group.persisted?
|
2020-12-15 21:09:53 +00:00
|
|
|
successful_creation_hooks
|
2020-06-10 18:09:15 +00:00
|
|
|
|
2017-03-01 19:34:29 +00:00
|
|
|
notice = if @group.chat_team.present?
|
|
|
|
"Group '#{@group.name}' and its Mattermost team were successfully created."
|
|
|
|
else
|
2017-03-03 08:01:54 +00:00
|
|
|
"Group '#{@group.name}' was successfully created."
|
2017-03-01 19:34:29 +00:00
|
|
|
end
|
|
|
|
|
|
|
|
redirect_to @group, notice: notice
|
2013-01-24 15:47:09 +00:00
|
|
|
else
|
|
|
|
render action: "new"
|
|
|
|
end
|
|
|
|
end
|
2012-11-29 15:17:01 +00:00
|
|
|
|
2012-10-02 17:42:15 +00:00
|
|
|
def show
|
|
|
|
respond_to do |format|
|
2019-03-14 12:55:46 +00:00
|
|
|
format.html do
|
2020-06-15 00:08:43 +00:00
|
|
|
if @group.import_state&.in_progress?
|
|
|
|
redirect_to group_import_path(@group)
|
|
|
|
else
|
|
|
|
render_show_html
|
|
|
|
end
|
2019-03-14 12:55:46 +00:00
|
|
|
end
|
2015-02-18 08:16:42 +00:00
|
|
|
|
2015-02-18 17:38:46 +00:00
|
|
|
format.atom do
|
2019-03-14 12:55:46 +00:00
|
|
|
render_details_view_atom
|
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
def details
|
|
|
|
respond_to do |format|
|
|
|
|
format.html do
|
|
|
|
render_details_html
|
|
|
|
end
|
|
|
|
|
|
|
|
format.atom do
|
|
|
|
render_details_view_atom
|
2015-02-18 17:38:46 +00:00
|
|
|
end
|
2012-10-02 17:42:15 +00:00
|
|
|
end
|
|
|
|
end
|
|
|
|
|
2016-03-10 13:29:38 +00:00
|
|
|
def activity
|
2016-02-06 17:36:46 +00:00
|
|
|
respond_to do |format|
|
2016-03-10 13:29:38 +00:00
|
|
|
format.html
|
|
|
|
|
2016-02-06 17:36:46 +00:00
|
|
|
format.json do
|
|
|
|
load_events
|
2020-01-30 21:08:47 +00:00
|
|
|
pager_json("events/_events", @events.count { |event| event.visible_to_user?(current_user) })
|
2016-02-06 17:36:46 +00:00
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
2013-02-01 17:04:11 +00:00
|
|
|
def edit
|
2020-02-19 12:09:13 +00:00
|
|
|
@badge_api_endpoint = expose_path(api_v4_groups_badges_path(id: @group.id))
|
2013-02-01 17:04:11 +00:00
|
|
|
end
|
|
|
|
|
2016-06-22 13:50:19 +00:00
|
|
|
def projects
|
2016-11-22 16:58:10 +00:00
|
|
|
@projects = @group.projects.with_statistics.page(params[:page])
|
2016-06-22 13:50:19 +00:00
|
|
|
end
|
|
|
|
|
2013-02-01 17:04:11 +00:00
|
|
|
def update
|
2016-03-09 00:01:33 +00:00
|
|
|
if Groups::UpdateService.new(@group, current_user, group_params).execute
|
2020-11-04 15:08:41 +00:00
|
|
|
notice = "Group '#{@group.name}' was successfully updated."
|
|
|
|
|
|
|
|
redirect_to edit_group_origin_location, notice: notice
|
2013-02-01 17:04:11 +00:00
|
|
|
else
|
2020-08-26 03:10:11 +00:00
|
|
|
@group.reset
|
2016-12-21 10:50:31 +00:00
|
|
|
render action: "edit"
|
2013-02-01 17:04:11 +00:00
|
|
|
end
|
|
|
|
end
|
|
|
|
|
2020-11-04 15:08:41 +00:00
|
|
|
def edit_group_origin_location
|
|
|
|
if params.dig(:group, :redirect_target) == 'repository_settings'
|
|
|
|
group_settings_repository_path(@group, anchor: 'js-default-branch-name')
|
|
|
|
else
|
|
|
|
edit_group_path(@group, anchor: params[:update_section])
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
2013-02-01 17:04:11 +00:00
|
|
|
def destroy
|
2016-08-13 12:45:31 +00:00
|
|
|
Groups::DestroyService.new(@group, current_user).async_execute
|
2013-02-01 17:04:11 +00:00
|
|
|
|
2019-11-17 12:06:19 +00:00
|
|
|
redirect_to root_path, status: :found, alert: "Group '#{@group.name}' was scheduled for deletion."
|
2013-02-01 17:04:11 +00:00
|
|
|
end
|
|
|
|
|
2018-08-27 15:31:01 +00:00
|
|
|
# rubocop: disable CodeReuse/ActiveRecord
|
2018-02-06 00:10:58 +00:00
|
|
|
def transfer
|
|
|
|
parent_group = Group.find_by(id: params[:new_parent_group_id])
|
|
|
|
service = ::Groups::TransferService.new(@group, current_user)
|
|
|
|
|
|
|
|
if service.execute(parent_group)
|
|
|
|
flash[:notice] = "Group '#{@group.name}' was successfully transferred."
|
|
|
|
redirect_to group_path(@group)
|
|
|
|
else
|
2019-10-16 09:07:51 +00:00
|
|
|
flash[:alert] = service.error.html_safe
|
2019-04-02 01:14:19 +00:00
|
|
|
redirect_to edit_group_path(@group)
|
2018-02-06 00:10:58 +00:00
|
|
|
end
|
|
|
|
end
|
2018-08-27 15:31:01 +00:00
|
|
|
# rubocop: enable CodeReuse/ActiveRecord
|
2018-02-06 00:10:58 +00:00
|
|
|
|
2020-04-09 12:09:24 +00:00
|
|
|
def export
|
|
|
|
export_service = Groups::ImportExport::ExportService.new(group: @group, user: current_user)
|
|
|
|
|
|
|
|
if export_service.async_execute
|
2020-05-18 15:08:15 +00:00
|
|
|
redirect_to edit_group_path(@group), notice: _('Group export started. A download link will be sent by email and made available on this page.')
|
2020-04-09 12:09:24 +00:00
|
|
|
else
|
|
|
|
redirect_to edit_group_path(@group), alert: _('Group export could not be started.')
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
def download_export
|
|
|
|
if @group.export_file_exists?
|
|
|
|
send_upload(@group.export_file, attachment: @group.export_file.filename)
|
|
|
|
else
|
|
|
|
redirect_to edit_group_path(@group),
|
|
|
|
alert: _('Group export link has expired. Please generate a new export from your group settings.')
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
2020-10-19 06:09:08 +00:00
|
|
|
def unfoldered_environment_names
|
|
|
|
respond_to do |format|
|
|
|
|
format.json do
|
2021-04-22 09:09:45 +00:00
|
|
|
render json: Environments::EnvironmentNamesFinder.new(@group, current_user).execute
|
2020-10-19 06:09:08 +00:00
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
2012-10-02 17:42:15 +00:00
|
|
|
protected
|
|
|
|
|
2019-03-14 12:55:46 +00:00
|
|
|
def render_show_html
|
2020-10-26 15:08:40 +00:00
|
|
|
record_experiment_user(:invite_members_empty_group_version_a) if ::Gitlab.com?
|
|
|
|
|
2019-09-13 13:26:31 +00:00
|
|
|
render 'groups/show', locals: { trial: params[:trial] }
|
2019-03-14 12:55:46 +00:00
|
|
|
end
|
|
|
|
|
|
|
|
def render_details_html
|
|
|
|
render 'groups/show'
|
|
|
|
end
|
|
|
|
|
|
|
|
def render_details_view_atom
|
|
|
|
load_events
|
|
|
|
render layout: 'xml.atom', template: 'groups/show'
|
|
|
|
end
|
|
|
|
|
2018-08-27 15:31:01 +00:00
|
|
|
# rubocop: disable CodeReuse/ActiveRecord
|
2013-01-25 09:30:49 +00:00
|
|
|
def authorize_create_group!
|
2017-09-07 18:35:45 +00:00
|
|
|
allowed = if params[:parent_id].present?
|
|
|
|
parent = Group.find_by(id: params[:parent_id])
|
|
|
|
can?(current_user, :create_subgroup, parent)
|
|
|
|
else
|
|
|
|
can?(current_user, :create_group)
|
|
|
|
end
|
|
|
|
|
|
|
|
render_404 unless allowed
|
2013-02-01 17:04:11 +00:00
|
|
|
end
|
2018-08-27 15:31:01 +00:00
|
|
|
# rubocop: enable CodeReuse/ActiveRecord
|
2013-02-01 17:04:11 +00:00
|
|
|
|
2015-05-01 08:39:11 +00:00
|
|
|
def determine_layout
|
2013-06-08 13:26:57 +00:00
|
|
|
if [:new, :create].include?(action_name.to_sym)
|
2015-05-01 08:39:11 +00:00
|
|
|
'application'
|
2015-06-15 22:32:14 +00:00
|
|
|
elsif [:edit, :update, :projects].include?(action_name.to_sym)
|
|
|
|
'group_settings'
|
2014-02-13 20:45:51 +00:00
|
|
|
else
|
2015-05-01 08:39:11 +00:00
|
|
|
'group'
|
2013-06-08 13:26:57 +00:00
|
|
|
end
|
|
|
|
end
|
2014-01-15 14:16:45 +00:00
|
|
|
|
2014-06-26 13:57:10 +00:00
|
|
|
def group_params
|
2018-01-31 15:23:15 +00:00
|
|
|
params.require(:group).permit(group_params_attributes)
|
2017-01-10 14:57:09 +00:00
|
|
|
end
|
|
|
|
|
2018-01-31 15:23:15 +00:00
|
|
|
def group_params_attributes
|
2017-01-10 14:57:09 +00:00
|
|
|
[
|
2016-09-06 16:48:00 +00:00
|
|
|
:avatar,
|
2016-09-01 23:49:48 +00:00
|
|
|
:description,
|
2019-08-15 17:37:36 +00:00
|
|
|
:emails_disabled,
|
2019-12-03 12:06:34 +00:00
|
|
|
:mentions_disabled,
|
2016-09-06 16:48:00 +00:00
|
|
|
:lfs_enabled,
|
|
|
|
:name,
|
2016-09-01 23:49:48 +00:00
|
|
|
:path,
|
|
|
|
:public,
|
|
|
|
:request_access_enabled,
|
2016-09-06 16:48:00 +00:00
|
|
|
:share_with_group_lock,
|
2017-01-24 15:32:34 +00:00
|
|
|
:visibility_level,
|
2017-02-20 13:51:47 +00:00
|
|
|
:parent_id,
|
2017-02-07 07:24:57 +00:00
|
|
|
:create_chat_team,
|
2017-01-24 21:09:58 +00:00
|
|
|
:chat_team_name,
|
|
|
|
:require_two_factor_authentication,
|
2019-04-05 18:49:46 +00:00
|
|
|
:two_factor_grace_period,
|
2019-06-27 20:45:58 +00:00
|
|
|
:project_creation_level,
|
2020-03-02 12:07:57 +00:00
|
|
|
:subgroup_creation_level,
|
2020-10-09 00:08:41 +00:00
|
|
|
:default_branch_protection,
|
2020-10-15 21:09:12 +00:00
|
|
|
:default_branch_name,
|
2021-03-26 21:09:22 +00:00
|
|
|
:allow_mfa_for_subgroups,
|
|
|
|
:resource_access_token_creation_allowed
|
2017-01-10 14:57:09 +00:00
|
|
|
]
|
2014-06-26 13:57:10 +00:00
|
|
|
end
|
2015-02-18 17:38:46 +00:00
|
|
|
|
2018-08-27 15:31:01 +00:00
|
|
|
# rubocop: disable CodeReuse/ActiveRecord
|
2015-02-18 17:38:46 +00:00
|
|
|
def load_events
|
2017-10-20 13:39:15 +00:00
|
|
|
params[:sort] ||= 'latest_activity_desc'
|
|
|
|
|
2019-10-11 06:06:27 +00:00
|
|
|
options = { include_subgroups: true }
|
|
|
|
projects = GroupProjectsFinder.new(params: params, group: group, options: options, current_user: current_user)
|
|
|
|
.execute
|
|
|
|
.includes(:namespace)
|
2017-10-20 13:39:15 +00:00
|
|
|
|
2017-07-27 17:42:15 +00:00
|
|
|
@events = EventCollection
|
2020-01-30 21:08:47 +00:00
|
|
|
.new(projects, offset: params[:offset].to_i, filter: event_filter, groups: groups)
|
|
|
|
.to_a
|
|
|
|
.map(&:present)
|
2017-11-06 16:52:56 +00:00
|
|
|
|
2018-04-03 13:45:17 +00:00
|
|
|
Events::RenderService
|
|
|
|
.new(current_user)
|
|
|
|
.execute(@events, atom_request: request.format.atom?)
|
2015-02-18 17:38:46 +00:00
|
|
|
end
|
2018-08-27 15:31:01 +00:00
|
|
|
# rubocop: enable CodeReuse/ActiveRecord
|
2017-01-24 15:32:34 +00:00
|
|
|
|
|
|
|
def user_actions
|
|
|
|
if current_user
|
|
|
|
@notification_setting = current_user.notification_settings_for(group)
|
|
|
|
end
|
|
|
|
end
|
2017-05-18 23:23:05 +00:00
|
|
|
|
|
|
|
def build_canonical_path(group)
|
|
|
|
return group_path(group) if action_name == 'show' # root group path
|
2017-06-06 22:45:16 +00:00
|
|
|
|
2017-05-18 23:23:05 +00:00
|
|
|
params[:id] = group.to_param
|
|
|
|
|
2018-04-08 04:35:30 +00:00
|
|
|
url_for(safe_params)
|
2017-05-18 23:23:05 +00:00
|
|
|
end
|
2019-10-11 06:06:27 +00:00
|
|
|
|
2020-04-09 12:09:24 +00:00
|
|
|
def export_rate_limit
|
|
|
|
prefixed_action = "group_#{params[:action]}".to_sym
|
|
|
|
|
2020-06-03 12:08:21 +00:00
|
|
|
scope = params[:action] == :download_export ? @group : nil
|
|
|
|
|
|
|
|
if Gitlab::ApplicationRateLimiter.throttled?(prefixed_action, scope: [current_user, scope].compact)
|
2020-04-09 12:09:24 +00:00
|
|
|
Gitlab::ApplicationRateLimiter.log_request(request, "#{prefixed_action}_request_limit".to_sym, current_user)
|
|
|
|
|
2020-06-03 12:08:21 +00:00
|
|
|
render plain: _('This endpoint has been requested too many times. Try again later.'), status: :too_many_requests
|
2020-04-09 12:09:24 +00:00
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
def ensure_export_enabled
|
|
|
|
render_404 unless Feature.enabled?(:group_import_export, @group, default_enabled: true)
|
|
|
|
end
|
|
|
|
|
2019-10-11 06:06:27 +00:00
|
|
|
private
|
|
|
|
|
2021-03-19 09:08:53 +00:00
|
|
|
def load_recaptcha
|
|
|
|
Gitlab::Recaptcha.load_configurations!
|
|
|
|
end
|
|
|
|
|
|
|
|
def check_captcha
|
|
|
|
return if group_params[:parent_id].present? # Only require for top-level groups
|
|
|
|
|
|
|
|
load_recaptcha
|
|
|
|
|
|
|
|
return if verify_recaptcha
|
|
|
|
|
|
|
|
flash[:alert] = _('There was an error with the reCAPTCHA. Please solve the reCAPTCHA again.')
|
|
|
|
flash.delete :recaptcha_error
|
|
|
|
@group = Group.new(group_params)
|
|
|
|
render action: 'new'
|
|
|
|
end
|
|
|
|
|
2021-01-26 15:08:58 +00:00
|
|
|
def successful_creation_hooks; end
|
2020-12-15 21:09:53 +00:00
|
|
|
|
2019-10-11 06:06:27 +00:00
|
|
|
def groups
|
|
|
|
if @group.supports_events?
|
|
|
|
@group.self_and_descendants.public_or_visible_to_user(current_user)
|
|
|
|
end
|
|
|
|
end
|
2019-10-29 12:06:40 +00:00
|
|
|
|
|
|
|
override :markdown_service_params
|
|
|
|
def markdown_service_params
|
|
|
|
params.merge(group: group)
|
|
|
|
end
|
2020-11-23 15:09:37 +00:00
|
|
|
|
|
|
|
override :has_project_list?
|
|
|
|
def has_project_list?
|
|
|
|
%w(details show index).include?(action_name)
|
|
|
|
end
|
2021-03-19 09:08:53 +00:00
|
|
|
|
|
|
|
def captcha_enabled?
|
|
|
|
Gitlab::Recaptcha.enabled? && Feature.enabled?(:recaptcha_on_top_level_group_creation, type: :ops)
|
|
|
|
end
|
|
|
|
|
|
|
|
def captcha_required?
|
|
|
|
captcha_enabled? && !params[:parent_id]
|
|
|
|
end
|
2012-10-02 17:42:15 +00:00
|
|
|
end
|
2019-09-13 13:26:31 +00:00
|
|
|
|
|
|
|
GroupsController.prepend_if_ee('EE::GroupsController')
|