2011-10-08 21:36:38 +00:00
|
|
|
class Ability
|
2012-10-09 00:10:04 +00:00
|
|
|
class << self
|
2013-01-25 09:30:49 +00:00
|
|
|
def allowed(user, subject)
|
|
|
|
return [] unless user.kind_of?(User)
|
|
|
|
|
2012-10-09 00:10:04 +00:00
|
|
|
case subject.class.name
|
2013-01-25 09:30:49 +00:00
|
|
|
when "Project" then project_abilities(user, subject)
|
|
|
|
when "Issue" then issue_abilities(user, subject)
|
|
|
|
when "Note" then note_abilities(user, subject)
|
2013-03-24 18:31:14 +00:00
|
|
|
when "ProjectSnippet" then project_snippet_abilities(user, subject)
|
2013-03-24 22:17:03 +00:00
|
|
|
when "PersonalSnippet" then personal_snippet_abilities(user, subject)
|
2013-01-25 09:30:49 +00:00
|
|
|
when "MergeRequest" then merge_request_abilities(user, subject)
|
2013-06-21 19:44:40 +00:00
|
|
|
when "Group" then group_abilities(user, subject)
|
|
|
|
when "Namespace" then namespace_abilities(user, subject)
|
2012-10-09 00:10:04 +00:00
|
|
|
else []
|
2013-01-25 09:30:49 +00:00
|
|
|
end.concat(global_abilities(user))
|
|
|
|
end
|
|
|
|
|
|
|
|
def global_abilities(user)
|
|
|
|
rules = []
|
|
|
|
rules << :create_group if user.can_create_group
|
|
|
|
rules
|
2011-10-08 21:36:38 +00:00
|
|
|
end
|
|
|
|
|
2012-10-09 00:10:04 +00:00
|
|
|
def project_abilities(user, project)
|
|
|
|
rules = []
|
2011-10-08 21:36:38 +00:00
|
|
|
|
2013-01-03 19:09:18 +00:00
|
|
|
team = project.team
|
|
|
|
|
2012-11-29 04:29:11 +00:00
|
|
|
# Rules based on role in project
|
2013-01-03 19:09:18 +00:00
|
|
|
if team.masters.include?(user)
|
2012-12-04 20:06:55 +00:00
|
|
|
rules << project_master_rules
|
2012-11-29 04:29:11 +00:00
|
|
|
|
2013-01-03 19:09:18 +00:00
|
|
|
elsif team.developers.include?(user)
|
2012-11-29 04:29:11 +00:00
|
|
|
rules << project_dev_rules
|
|
|
|
|
2013-01-03 19:09:18 +00:00
|
|
|
elsif team.reporters.include?(user)
|
2012-11-29 04:29:11 +00:00
|
|
|
rules << project_report_rules
|
|
|
|
|
2013-06-06 11:16:08 +00:00
|
|
|
elsif team.guests.include?(user)
|
2012-11-29 04:29:11 +00:00
|
|
|
rules << project_guest_rules
|
|
|
|
end
|
|
|
|
|
2013-06-06 11:16:08 +00:00
|
|
|
if project.public?
|
|
|
|
rules << public_project_rules
|
|
|
|
end
|
|
|
|
|
2013-03-25 08:46:57 +00:00
|
|
|
if project.owner == user || user.admin?
|
2013-01-02 17:32:34 +00:00
|
|
|
rules << project_admin_rules
|
2012-11-29 04:29:11 +00:00
|
|
|
end
|
|
|
|
|
2013-06-17 11:17:32 +00:00
|
|
|
if project.group && project.group.owners.include?(user)
|
|
|
|
rules << project_admin_rules
|
|
|
|
end
|
|
|
|
|
2012-11-29 04:29:11 +00:00
|
|
|
rules.flatten
|
|
|
|
end
|
|
|
|
|
2013-06-06 11:16:08 +00:00
|
|
|
def public_project_rules
|
|
|
|
[
|
|
|
|
:download_code,
|
|
|
|
:fork_project,
|
|
|
|
:read_project,
|
|
|
|
:read_wiki,
|
|
|
|
:read_issue,
|
|
|
|
:read_milestone,
|
|
|
|
:read_project_snippet,
|
|
|
|
:read_team_member,
|
|
|
|
:read_merge_request,
|
|
|
|
:read_note,
|
|
|
|
:write_issue,
|
|
|
|
:write_note
|
|
|
|
]
|
|
|
|
end
|
|
|
|
|
2012-11-29 04:29:11 +00:00
|
|
|
def project_guest_rules
|
|
|
|
[
|
2012-10-09 00:10:04 +00:00
|
|
|
:read_project,
|
|
|
|
:read_wiki,
|
|
|
|
:read_issue,
|
|
|
|
:read_milestone,
|
2013-03-25 07:20:14 +00:00
|
|
|
:read_project_snippet,
|
2012-10-09 00:10:04 +00:00
|
|
|
:read_team_member,
|
|
|
|
:read_merge_request,
|
|
|
|
:read_note,
|
|
|
|
:write_project,
|
|
|
|
:write_issue,
|
2013-05-02 20:27:40 +00:00
|
|
|
:write_note
|
2012-11-29 04:29:11 +00:00
|
|
|
]
|
|
|
|
end
|
2012-02-20 18:16:55 +00:00
|
|
|
|
2012-11-29 04:29:11 +00:00
|
|
|
def project_report_rules
|
|
|
|
project_guest_rules + [
|
2012-10-09 00:10:04 +00:00
|
|
|
:download_code,
|
2013-06-04 15:50:42 +00:00
|
|
|
:fork_project,
|
2013-03-25 07:20:14 +00:00
|
|
|
:write_project_snippet
|
2012-11-29 04:29:11 +00:00
|
|
|
]
|
|
|
|
end
|
2012-02-20 18:16:55 +00:00
|
|
|
|
2012-11-29 04:29:11 +00:00
|
|
|
def project_dev_rules
|
|
|
|
project_report_rules + [
|
2013-01-21 12:16:48 +00:00
|
|
|
:write_merge_request,
|
2012-10-21 09:12:14 +00:00
|
|
|
:write_wiki,
|
|
|
|
:push_code
|
2012-11-29 04:29:11 +00:00
|
|
|
]
|
|
|
|
end
|
2012-10-21 09:12:14 +00:00
|
|
|
|
2012-11-29 04:29:11 +00:00
|
|
|
def project_master_rules
|
|
|
|
project_dev_rules + [
|
|
|
|
:push_code_to_protected_branches,
|
2012-10-09 00:10:04 +00:00
|
|
|
:modify_issue,
|
2013-03-25 07:20:14 +00:00
|
|
|
:modify_project_snippet,
|
2012-10-09 00:10:04 +00:00
|
|
|
:modify_merge_request,
|
|
|
|
:admin_issue,
|
|
|
|
:admin_milestone,
|
2013-03-25 07:20:14 +00:00
|
|
|
:admin_project_snippet,
|
2012-10-09 00:10:04 +00:00
|
|
|
:admin_team_member,
|
|
|
|
:admin_merge_request,
|
|
|
|
:admin_note,
|
2012-12-04 20:06:55 +00:00
|
|
|
:admin_wiki,
|
|
|
|
:admin_project
|
2012-11-29 04:29:11 +00:00
|
|
|
]
|
|
|
|
end
|
2011-10-08 21:36:38 +00:00
|
|
|
|
2012-11-29 04:29:11 +00:00
|
|
|
def project_admin_rules
|
|
|
|
project_master_rules + [
|
2012-12-04 20:06:55 +00:00
|
|
|
:change_namespace,
|
2013-01-16 14:54:01 +00:00
|
|
|
:change_public_mode,
|
2012-12-04 20:48:24 +00:00
|
|
|
:rename_project,
|
|
|
|
:remove_project
|
2012-11-29 04:29:11 +00:00
|
|
|
]
|
2012-10-09 00:10:04 +00:00
|
|
|
end
|
2011-10-17 10:39:03 +00:00
|
|
|
|
2012-11-24 20:00:30 +00:00
|
|
|
def group_abilities user, group
|
|
|
|
rules = []
|
|
|
|
|
2013-01-02 16:57:02 +00:00
|
|
|
# Only group owner and administrators can manage group
|
2013-06-17 10:07:16 +00:00
|
|
|
if group.owners.include?(user) || user.admin?
|
2013-01-02 16:57:02 +00:00
|
|
|
rules << [
|
2013-01-17 15:35:57 +00:00
|
|
|
:manage_group,
|
|
|
|
:manage_namespace
|
2013-01-02 16:57:02 +00:00
|
|
|
]
|
|
|
|
end
|
2012-11-24 20:00:30 +00:00
|
|
|
|
|
|
|
rules.flatten
|
|
|
|
end
|
|
|
|
|
2013-06-21 19:44:40 +00:00
|
|
|
def namespace_abilities user, namespace
|
|
|
|
rules = []
|
|
|
|
|
|
|
|
# Only namespace owner and administrators can manage it
|
|
|
|
if namespace.owner == user || user.admin?
|
|
|
|
rules << [
|
|
|
|
:manage_namespace
|
|
|
|
]
|
|
|
|
end
|
|
|
|
|
|
|
|
rules.flatten
|
|
|
|
end
|
|
|
|
|
2013-03-24 22:17:03 +00:00
|
|
|
[:issue, :note, :project_snippet, :personal_snippet, :merge_request].each do |name|
|
2011-10-17 10:39:03 +00:00
|
|
|
define_method "#{name}_abilities" do |user, subject|
|
|
|
|
if subject.author == user
|
|
|
|
[
|
|
|
|
:"read_#{name}",
|
|
|
|
:"write_#{name}",
|
2011-12-15 21:57:46 +00:00
|
|
|
:"modify_#{name}",
|
2011-10-17 10:39:03 +00:00
|
|
|
:"admin_#{name}"
|
|
|
|
]
|
2012-02-21 22:31:18 +00:00
|
|
|
elsif subject.respond_to?(:assignee) && subject.assignee == user
|
|
|
|
[
|
|
|
|
:"read_#{name}",
|
|
|
|
:"write_#{name}",
|
|
|
|
:"modify_#{name}",
|
|
|
|
]
|
2011-10-17 10:39:03 +00:00
|
|
|
else
|
2012-10-09 00:10:04 +00:00
|
|
|
subject.respond_to?(:project) ? project_abilities(user, subject.project) : []
|
2011-10-17 10:39:03 +00:00
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
2011-10-08 21:36:38 +00:00
|
|
|
end
|