b996a82ff4
Extended ProjectFinder in order to handle the following options: - current_user - which user use - project_ids_relation: int[] - project ids to use - params: - trending: boolean - non_public: boolean - starred: boolean - sort: string - visibility_level: int - tags: string[] - personal: boolean - search: string - non_archived: boolean GroupProjectsFinder now inherits from ProjectsFinder. Changed the code in order to use the new available options.
46 lines
1.3 KiB
Ruby
46 lines
1.3 KiB
Ruby
class GroupPolicy < BasePolicy
|
|
def rules
|
|
can! :read_group if @subject.public?
|
|
return unless @user
|
|
|
|
globally_viewable = @subject.public? || (@subject.internal? && !@user.external?)
|
|
member = @subject.users_with_parents.include?(@user)
|
|
owner = @user.admin? || @subject.has_owner?(@user)
|
|
master = owner || @subject.has_master?(@user)
|
|
|
|
can_read = false
|
|
can_read ||= globally_viewable
|
|
can_read ||= member
|
|
can_read ||= @user.admin?
|
|
can_read ||= GroupProjectsFinder.new(group: @subject, current_user: @user).execute.any?
|
|
can! :read_group if can_read
|
|
|
|
# Only group masters and group owners can create new projects
|
|
if master
|
|
can! :create_projects
|
|
can! :admin_milestones
|
|
can! :admin_label
|
|
end
|
|
|
|
# Only group owner and administrators can admin group
|
|
if owner
|
|
can! :admin_group
|
|
can! :admin_namespace
|
|
can! :admin_group_member
|
|
can! :change_visibility_level
|
|
end
|
|
|
|
if globally_viewable && @subject.request_access_enabled && !member
|
|
can! :request_access
|
|
end
|
|
end
|
|
|
|
def can_read_group?
|
|
return true if @subject.public?
|
|
return true if @user.admin?
|
|
return true if @subject.internal? && !@user.external?
|
|
return true if @subject.users.include?(@user)
|
|
|
|
GroupProjectsFinder.new(group: @subject, current_user: @user).execute.any?
|
|
end
|
|
end
|