module API # groups API class Groups < Grape::API before { authenticate! } resource :groups do helpers do def find_group(id) group = Group.find(id) if can?(current_user, :read_group, group) group else render_api_error!("403 Forbidden - #{current_user.username} lacks sufficient access to #{group.name}", 403) end end def validate_access_level?(level) Gitlab::Access.options_with_owner.values.include? level.to_i end end # Get a groups list # # Example Request: # GET /groups get do @groups = if current_user.admin Group.all else current_user.groups end @groups = @groups.search(params[:search]) if params[:search].present? @groups = paginate @groups present @groups, with: Entities::Group end # Create group. Available only for admin # # Parameters: # name (required) - The name of the group # path (required) - The path of the group # Example Request: # POST /groups post do authenticated_as_admin! required_attributes! [:name, :path] attrs = attributes_for_keys [:name, :path, :description] @group = Group.new(attrs) @group.owner = current_user if @group.save present @group, with: Entities::Group else render_api_error!("Failed to save group #{@group.errors.messages}", 400) end end # Get a single group, with containing projects # # Parameters: # id (required) - The ID of a group # Example Request: # GET /groups/:id get ":id" do group = find_group(params[:id]) present group, with: Entities::GroupDetail end # Remove group # # Parameters: # id (required) - The ID of a group # Example Request: # DELETE /groups/:id delete ":id" do group = find_group(params[:id]) authorize! :manage_group, group group.destroy end # Transfer a project to the Group namespace # # Parameters: # id - group id # project_id - project id # Example Request: # POST /groups/:id/projects/:project_id post ":id/projects/:project_id" do authenticated_as_admin! group = Group.find(params[:id]) project = Project.find(params[:project_id]) result = ::Projects::TransferService.new(project, current_user, namespace_id: group.id).execute if result present group else render_api_error!("Failed to transfer project #{project.errors.messages}", 400) end end end end end