gitea/routers/web/org/setting/actions.go

// Copyright 2025 The Gitea Authors. All rights reserved.
// SPDX-License-Identifier: MIT

package setting

import (
	"net/http"
	"slices"

	actions_model "code.gitea.io/gitea/models/actions"
	"code.gitea.io/gitea/models/perm"
	repo_model "code.gitea.io/gitea/models/repo"
	"code.gitea.io/gitea/modules/templates"
	"code.gitea.io/gitea/services/context"
)

const (
	tplSettingsActionsGeneral templates.TplName = "org/settings/actions_general"
)

// ActionsGeneral renders the actions general settings page
func ActionsGeneral(ctx *context.Context) {
	ctx.Data["Title"] = ctx.Tr("actions.actions")
	ctx.Data["PageIsOrgSettings"] = true
	ctx.Data["PageIsOrgSettingsActionsGeneral"] = true

	// Load Org Actions Config
	actionsCfg, err := actions_model.GetOrgActionsConfig(ctx, ctx.Org.Organization.AsUser().ID)
	if err != nil {
		ctx.ServerError("GetOrgActionsConfig", err)
		return
	}

	ctx.Data["TokenPermissionMode"] = actionsCfg.GetTokenPermissionMode()
	ctx.Data["TokenPermissionModePermissive"] = repo_model.ActionsTokenPermissionModePermissive
	ctx.Data["TokenPermissionModeRestricted"] = repo_model.ActionsTokenPermissionModeRestricted
	ctx.Data["TokenPermissionModeCustom"] = repo_model.ActionsTokenPermissionModeCustom
	ctx.Data["MaxTokenPermissions"] = actionsCfg.GetMaxTokenPermissions()

	ctx.Data["AllowCrossRepoAccess"] = actionsCfg.AllowCrossRepoAccess
	ctx.Data["HasSelectedRepos"] = len(actionsCfg.AllowedCrossRepoIDs) > 0

	// Load Allowed Repositories
	var allowedRepos []*repo_model.Repository
	if len(actionsCfg.AllowedCrossRepoIDs) > 0 {
		// Since the list shouldn't be too long, we can loop.
		// Ideally use GetRepositoriesByIDs but simple loop is fine for now.
		for _, id := range actionsCfg.AllowedCrossRepoIDs {
			repo, err := repo_model.GetRepositoryByID(ctx, id)
			if err != nil {
				if repo_model.IsErrRepoNotExist(err) {
					continue
				}
				ctx.ServerError("GetRepositoryByID", err)
				return
			}
			allowedRepos = append(allowedRepos, repo)
		}
	}
	ctx.Data["AllowedRepos"] = allowedRepos

	ctx.HTML(http.StatusOK, tplSettingsActionsGeneral)
}

// ActionsGeneralPost responses for actions general settings page
func ActionsGeneralPost(ctx *context.Context) {
	ctx.Data["Title"] = ctx.Tr("actions.actions")
	ctx.Data["PageIsOrgSettings"] = true
	ctx.Data["PageIsOrgSettingsActions"] = true

	actionsCfg, err := actions_model.GetOrgActionsConfig(ctx, ctx.Org.Organization.AsUser().ID)
	if err != nil {
		ctx.ServerError("GetOrgActionsConfig", err)
		return
	}

	// Update Token Permission Mode
	permissionMode := repo_model.ActionsTokenPermissionMode(ctx.FormString("token_permission_mode"))
	if permissionMode == repo_model.ActionsTokenPermissionModeRestricted ||
		permissionMode == repo_model.ActionsTokenPermissionModePermissive ||
		permissionMode == repo_model.ActionsTokenPermissionModeCustom {
		actionsCfg.TokenPermissionMode = permissionMode
	}

	// Update Maximum Permissions (radio buttons: none/read/write)
	parseMaxPerm := func(name string) perm.AccessMode {
		value := ctx.FormString("max_" + name)
		switch value {
		case "write":
			return perm.AccessModeWrite
		case "read":
			return perm.AccessModeRead
		default:
			return perm.AccessModeNone
		}
	}

	actionsCfg.MaxTokenPermissions = &repo_model.ActionsTokenPermissions{
		Code:         parseMaxPerm("contents"),
		Issues:       parseMaxPerm("issues"),
		Packages:     parseMaxPerm("packages"),
		PullRequests: parseMaxPerm("pull_requests"),
		Wiki:         parseMaxPerm("wiki"),
	}

	// Update Cross-Repo Access Mode
	crossRepoMode := ctx.FormString("cross_repo_mode")
	switch crossRepoMode {
	case "none":
		actionsCfg.AllowCrossRepoAccess = false
		actionsCfg.AllowedCrossRepoIDs = nil
	case "all":
		actionsCfg.AllowCrossRepoAccess = true
		actionsCfg.AllowedCrossRepoIDs = nil
	case "selected":
		actionsCfg.AllowCrossRepoAccess = true
		// Keep existing AllowedCrossRepoIDs, will be updated by separate API
	}

	if err := actions_model.SetOrgActionsConfig(ctx, ctx.Org.Organization.AsUser().ID, actionsCfg); err != nil {
		ctx.ServerError("SetOrgActionsConfig", err)
		return
	}

	ctx.Flash.Success(ctx.Tr("org.settings.update_setting_success"))
	ctx.Redirect(ctx.Org.OrgLink + "/settings/actions")
}

// ActionsAllowedReposAdd adds a repository to the allowed list for cross-repo access
func ActionsAllowedReposAdd(ctx *context.Context) {
	repoName := ctx.FormString("repo_name")
	if repoName == "" {
		ctx.Redirect(ctx.Org.OrgLink + "/settings/actions")
		return
	}

	repo, err := repo_model.GetRepositoryByName(ctx, ctx.Org.Organization.ID, repoName)
	if err != nil {
		if repo_model.IsErrRepoNotExist(err) {
			ctx.Flash.Error(ctx.Tr("repo.not_exist"))
			ctx.Redirect(ctx.Org.OrgLink + "/settings/actions")
			return
		}
		ctx.ServerError("GetRepositoryByName", err)
		return
	}

	actionsCfg, err := actions_model.GetOrgActionsConfig(ctx, ctx.Org.Organization.AsUser().ID)
	if err != nil {
		ctx.ServerError("GetOrgActionsConfig", err)
		return
	}

	// Check if already exists
	// Check if already exists
	if slices.Contains(actionsCfg.AllowedCrossRepoIDs, repo.ID) {
		ctx.Redirect(ctx.Org.OrgLink + "/settings/actions")
		return
	}

	actionsCfg.AllowedCrossRepoIDs = append(actionsCfg.AllowedCrossRepoIDs, repo.ID)
	// Ensure mode is set to selected if we are adding specific repos?
	// Logic: If user adds a repo, they probably want it enabled.
	// But let's respect the current mode toggle. If "all" or "none" is set, adding a repo updates the list but might not activate "selected" mode unless user explicitly chose "selected".
	// However, if "selected" is active, this adds to it.

	if err := actions_model.SetOrgActionsConfig(ctx, ctx.Org.Organization.AsUser().ID, actionsCfg); err != nil {
		ctx.ServerError("SetOrgActionsConfig", err)
		return
	}

	ctx.Flash.Success(ctx.Tr("repo.settings.update_settings_success"))
	ctx.Redirect(ctx.Org.OrgLink + "/settings/actions")
}

// ActionsAllowedReposRemove removes a repository from the allowed list
func ActionsAllowedReposRemove(ctx *context.Context) {
	repoID := ctx.FormInt64("repo_id")
	if repoID == 0 {
		ctx.Redirect(ctx.Org.OrgLink + "/settings/actions")
		return
	}

	actionsCfg, err := actions_model.GetOrgActionsConfig(ctx, ctx.Org.Organization.AsUser().ID)
	if err != nil {
		ctx.ServerError("GetOrgActionsConfig", err)
		return
	}

	// Filter out the ID
	newIDs := make([]int64, 0, len(actionsCfg.AllowedCrossRepoIDs))
	for _, id := range actionsCfg.AllowedCrossRepoIDs {
		if id != repoID {
			newIDs = append(newIDs, id)
		}
	}
	actionsCfg.AllowedCrossRepoIDs = newIDs

	if err := actions_model.SetOrgActionsConfig(ctx, ctx.Org.Organization.AsUser().ID, actionsCfg); err != nil {
		ctx.ServerError("SetOrgActionsConfig", err)
		return
	}

	ctx.Flash.Success(ctx.Tr("repo.settings.update_settings_success"))
	ctx.Redirect(ctx.Org.OrgLink + "/settings/actions")
}