gitlab-org--gitlab-foss/app/controllers/groups_controller.rb

204 lines
5.3 KiB
Ruby
Raw Normal View History

# frozen_string_literal: true
2015-03-12 11:08:48 -04:00
class GroupsController < Groups::ApplicationController
include API::Helpers::RelatedResourcesHelpers
include IssuesAction
include MergeRequestsAction
include ParamsBackwardCompatibility
include PreviewMarkdown
2012-10-02 13:42:15 -04:00
respond_to :html
prepend_before_action(only: [:show, :issues]) { authenticate_sessionless_user!(:rss) }
prepend_before_action(only: [:issues_calendar]) { authenticate_sessionless_user!(:ics) }
2016-03-20 16:03:53 -04:00
before_action :authenticate_user!, only: [:new, :create]
before_action :group, except: [:index, :new, :create]
2012-10-02 13:42:15 -04:00
# Authorize
before_action :authorize_admin_group!, only: [:edit, :update, :destroy, :projects, :transfer]
before_action :authorize_create_group!, only: [:new]
2013-01-24 10:47:09 -05:00
before_action :group_projects, only: [:projects, :activity, :issues, :merge_requests]
before_action :event_filter, only: [:activity]
2013-06-08 09:26:57 -04:00
before_action :user_actions, only: [:show]
skip_cross_project_access_check :index, :new, :create, :edit, :update,
:destroy, :projects
# When loading show as an atom feed, we render events that could leak cross
# project information
skip_cross_project_access_check :show, if: -> { request.format.html? }
layout :determine_layout
def index
redirect_to(current_user ? dashboard_groups_path : explore_groups_path)
end
2013-01-24 10:47:09 -05:00
def new
@group = Group.new(params.permit(:parent_id))
2013-01-24 10:47:09 -05:00
end
def create
2016-03-17 18:42:46 -04:00
@group = Groups::CreateService.new(current_user, group_params).execute
2013-01-24 10:47:09 -05:00
2016-03-17 18:42:46 -04:00
if @group.persisted?
2017-03-01 14:34:29 -05:00
notice = if @group.chat_team.present?
"Group '#{@group.name}' and its Mattermost team were successfully created."
else
2017-03-03 03:01:54 -05:00
"Group '#{@group.name}' was successfully created."
2017-03-01 14:34:29 -05:00
end
redirect_to @group, notice: notice
2013-01-24 10:47:09 -05:00
else
render action: "new"
end
end
2012-10-02 13:42:15 -04:00
def show
respond_to do |format|
format.html
2015-02-18 03:16:42 -05:00
2015-02-18 12:38:46 -05:00
format.atom do
load_events
render layout: 'xml.atom'
2015-02-18 12:38:46 -05:00
end
2012-10-02 13:42:15 -04:00
end
end
def activity
respond_to do |format|
format.html
format.json do
load_events
pager_json("events/_events", @events.count)
end
end
end
def edit
@badge_api_endpoint = expose_url(api_v4_groups_badges_path(id: @group.id))
end
2016-06-22 09:50:19 -04:00
def projects
@projects = @group.projects.with_statistics.page(params[:page])
2016-06-22 09:50:19 -04:00
end
def update
if Groups::UpdateService.new(@group, current_user, group_params).execute
redirect_to edit_group_path(@group, anchor: params[:update_section]), notice: "Group '#{@group.name}' was successfully updated."
else
@group.restore_path!
2016-12-21 07:29:27 -05:00
render action: "edit"
end
end
def destroy
Groups::DestroyService.new(@group, current_user).async_execute
redirect_to root_path, status: 302, alert: "Group '#{@group.name}' was scheduled for deletion."
end
# rubocop: disable CodeReuse/ActiveRecord
def transfer
parent_group = Group.find_by(id: params[:new_parent_group_id])
service = ::Groups::TransferService.new(@group, current_user)
if service.execute(parent_group)
flash[:notice] = "Group '#{@group.name}' was successfully transferred."
redirect_to group_path(@group)
else
flash.now[:alert] = service.error
render :edit
end
end
# rubocop: enable CodeReuse/ActiveRecord
2012-10-02 13:42:15 -04:00
protected
# rubocop: disable CodeReuse/ActiveRecord
2013-01-25 04:30:49 -05:00
def authorize_create_group!
allowed = if params[:parent_id].present?
parent = Group.find_by(id: params[:parent_id])
can?(current_user, :create_subgroup, parent)
else
can?(current_user, :create_group)
end
render_404 unless allowed
end
# rubocop: enable CodeReuse/ActiveRecord
def determine_layout
2013-06-08 09:26:57 -04:00
if [:new, :create].include?(action_name.to_sym)
'application'
elsif [:edit, :update, :projects].include?(action_name.to_sym)
'group_settings'
else
'group'
2013-06-08 09:26:57 -04:00
end
end
def group_params
2018-01-31 10:23:15 -05:00
params.require(:group).permit(group_params_attributes)
end
2018-01-31 10:23:15 -05:00
def group_params_attributes
[
:avatar,
:description,
:lfs_enabled,
:name,
:path,
:public,
:request_access_enabled,
:share_with_group_lock,
:visibility_level,
2017-02-20 08:51:47 -05:00
:parent_id,
2017-02-07 02:24:57 -05:00
:create_chat_team,
2017-01-24 16:09:58 -05:00
:chat_team_name,
:require_two_factor_authentication,
:two_factor_grace_period
]
end
2015-02-18 12:38:46 -05:00
# rubocop: disable CodeReuse/ActiveRecord
2015-02-18 12:38:46 -05:00
def load_events
params[:sort] ||= 'latest_activity_desc'
options = {}
options[:only_owned] = true if params[:shared] == '0'
options[:only_shared] = true if params[:shared] == '1'
@projects = GroupProjectsFinder.new(params: params, group: group, options: options, current_user: current_user)
.execute
.includes(:namespace)
@events = EventCollection
.new(@projects, offset: params[:offset].to_i, filter: event_filter)
.to_a
Events::RenderService
.new(current_user)
.execute(@events, atom_request: request.format.atom?)
2015-02-18 12:38:46 -05:00
end
# rubocop: enable CodeReuse/ActiveRecord
def user_actions
if current_user
@notification_setting = current_user.notification_settings_for(group)
end
end
def build_canonical_path(group)
return group_path(group) if action_name == 'show' # root group path
params[:id] = group.to_param
url_for(safe_params)
end
2012-10-02 13:42:15 -04:00
end