gitlab-org--gitlab-foss/lib/gitlab/checks/single_change_access.rb

56 lines
1.5 KiB
Ruby

# frozen_string_literal: true
module Gitlab
module Checks
class SingleChangeAccess
ATTRIBUTES = %i[user_access project skip_authorization
protocol oldrev newrev ref
branch_name tag_name logger commits].freeze
attr_reader(*ATTRIBUTES)
def initialize(
change, user_access:, project:,
protocol:, logger:, commits: nil
)
@oldrev, @newrev, @ref = change.values_at(:oldrev, :newrev, :ref)
@branch_name = Gitlab::Git.branch_name(@ref)
@tag_name = Gitlab::Git.tag_name(@ref)
@user_access = user_access
@project = project
@protocol = protocol
@commits = commits
@logger = logger
@logger.append_message("Running checks for ref: #{@branch_name || @tag_name}")
end
def validate!
ref_level_checks
# Check of commits should happen as the last step
# given they're expensive in terms of performance
commits_check
true
end
def commits
@commits ||= project.repository.new_commits(newrev)
end
protected
def ref_level_checks
Gitlab::Checks::PushCheck.new(self).validate!
Gitlab::Checks::BranchCheck.new(self).validate!
Gitlab::Checks::TagCheck.new(self).validate!
end
def commits_check
Gitlab::Checks::DiffCheck.new(self).validate!
end
end
end
end
Gitlab::Checks::SingleChangeAccess.prepend_mod_with('Gitlab::Checks::SingleChangeAccess')