69f584edb4
When an admin creates a project in the namespace of a user, that user automatically gains master access to that project.
156 lines
4.7 KiB
Ruby
156 lines
4.7 KiB
Ruby
module Projects
|
|
class CreateService < BaseService
|
|
def initialize(user, params)
|
|
@current_user, @params = user, params.dup
|
|
end
|
|
|
|
def execute
|
|
forked_from_project_id = params.delete(:forked_from_project_id)
|
|
import_data = params.delete(:import_data)
|
|
@skip_wiki = params.delete(:skip_wiki)
|
|
|
|
@project = Project.new(params)
|
|
|
|
# Make sure that the user is allowed to use the specified visibility level
|
|
unless Gitlab::VisibilityLevel.allowed_for?(current_user, @project.visibility_level)
|
|
deny_visibility_level(@project)
|
|
return @project
|
|
end
|
|
|
|
unless allowed_fork?(forked_from_project_id)
|
|
@project.errors.add(:forked_from_project_id, 'is forbidden')
|
|
return @project
|
|
end
|
|
|
|
set_project_name_from_path
|
|
|
|
# get namespace id
|
|
namespace_id = params[:namespace_id]
|
|
|
|
if namespace_id
|
|
# Find matching namespace and check if it allowed
|
|
# for current user if namespace_id passed.
|
|
unless allowed_namespace?(current_user, namespace_id)
|
|
@project.namespace_id = nil
|
|
deny_namespace
|
|
return @project
|
|
end
|
|
else
|
|
# Set current user namespace if namespace_id is nil
|
|
@project.namespace_id = current_user.namespace_id
|
|
end
|
|
|
|
@project.creator = current_user
|
|
|
|
if forked_from_project_id
|
|
@project.build_forked_project_link(forked_from_project_id: forked_from_project_id)
|
|
end
|
|
|
|
save_project_and_import_data(import_data)
|
|
|
|
@project.import_start if @project.import?
|
|
|
|
after_create_actions if @project.persisted?
|
|
|
|
if @project.errors.empty?
|
|
@project.add_import_job if @project.import?
|
|
else
|
|
fail(error: @project.errors.full_messages.join(', '))
|
|
end
|
|
@project
|
|
rescue ActiveRecord::RecordInvalid => e
|
|
message = "Unable to save #{e.record.type}: #{e.record.errors.full_messages.join(", ")} "
|
|
fail(error: message)
|
|
rescue => e
|
|
fail(error: e.message)
|
|
end
|
|
|
|
protected
|
|
|
|
def deny_namespace
|
|
@project.errors.add(:namespace, "is not valid")
|
|
end
|
|
|
|
def allowed_fork?(source_project_id)
|
|
return true if source_project_id.nil?
|
|
|
|
source_project = Project.find_by(id: source_project_id)
|
|
current_user.can?(:fork_project, source_project)
|
|
end
|
|
|
|
def allowed_namespace?(user, namespace_id)
|
|
namespace = Namespace.find_by(id: namespace_id)
|
|
current_user.can?(:create_projects, namespace)
|
|
end
|
|
|
|
def after_create_actions
|
|
log_info("#{@project.owner.name} created a new project \"#{@project.name_with_namespace}\"")
|
|
|
|
unless @project.gitlab_project_import?
|
|
@project.create_wiki unless skip_wiki?
|
|
create_services_from_active_templates(@project)
|
|
|
|
@project.create_labels
|
|
end
|
|
|
|
event_service.create_project(@project, current_user)
|
|
system_hook_service.execute_hooks_for(@project, :create)
|
|
|
|
unless @project.group || @project.gitlab_project_import?
|
|
owners = [current_user, @project.namespace.owner].compact.uniq
|
|
@project.add_master(owners, current_user: current_user)
|
|
end
|
|
|
|
@project.group&.refresh_members_authorized_projects
|
|
end
|
|
|
|
def skip_wiki?
|
|
!@project.feature_available?(:wiki, current_user) || @skip_wiki
|
|
end
|
|
|
|
def save_project_and_import_data(import_data)
|
|
Project.transaction do
|
|
@project.create_or_update_import_data(data: import_data[:data], credentials: import_data[:credentials]) if import_data
|
|
|
|
if @project.save && !@project.import?
|
|
raise 'Failed to create repository' unless @project.create_repository
|
|
end
|
|
end
|
|
end
|
|
|
|
def fail(error:)
|
|
message = "Unable to save project. Error: #{error}"
|
|
message << "Project ID: #{@project.id}" if @project && @project.id
|
|
|
|
Rails.logger.error(message)
|
|
|
|
if @project && @project.import?
|
|
@project.errors.add(:base, message)
|
|
@project.mark_import_as_failed(message)
|
|
end
|
|
|
|
@project
|
|
end
|
|
|
|
def create_services_from_active_templates(project)
|
|
Service.where(template: true, active: true).each do |template|
|
|
service = Service.build_from_template(project.id, template)
|
|
service.save!
|
|
end
|
|
end
|
|
|
|
def set_project_name_from_path
|
|
# Set project name from path
|
|
if @project.name.present? && @project.path.present?
|
|
# if both name and path set - everything is ok
|
|
elsif @project.path.present?
|
|
# Set project name from path
|
|
@project.name = @project.path.dup
|
|
elsif @project.name.present?
|
|
# For compatibility - set path from name
|
|
# TODO: remove this in 8.0
|
|
@project.path = @project.name.dup.parameterize
|
|
end
|
|
end
|
|
end
|
|
end
|