mirror of
https://github.com/go-gitea/gitea.git
synced 2024-11-30 07:54:52 +01:00
1751d5fcf2
* Restricted users (#4334): initial implementation
* Add User.IsRestricted & UI to edit it
* Pass user object instead of user id to places where IsRestricted flag matters
* Restricted users: maintain access rows for all referenced repos (incl public)
* Take logged in user & IsRestricted flag into account in org/repo listings, searches and accesses
* Add basic repo access tests for restricted users
Signed-off-by: Manush Dodunekov <manush@stendahls.se>
* Mention restricted users in the faq
Signed-off-by: Manush Dodunekov <manush@stendahls.se>
* Revert unnecessary change `.isUserPartOfOrg` -> `.IsUserPartOfOrg`
Signed-off-by: Manush Dodunekov <manush@stendahls.se>
* Remove unnecessary `org.IsOrganization()` call
Signed-off-by: Manush Dodunekov <manush@stendahls.se>
* Revert to an `int64` keyed `accessMap`
* Add type `userAccess`
* Add convenience func updateUserAccess()
* Turn accessMap into a `map[int64]userAccess`
Signed-off-by: Manush Dodunekov <manush@stendahls.se>
* or even better: `map[int64]*userAccess`
* updateUserAccess(): use tighter syntax as suggested by lafriks
* even tighter
* Avoid extra loop
* Don't disclose limited orgs to unauthenticated users
* Don't assume block only applies to orgs
* Use an array of `VisibleType` for filtering
* fix yet another thinko
* Ok - no need for u
* Revert "Ok - no need for u"
This reverts commit 5c3e886aab
.
Co-authored-by: Antoine GIRARD <sapk@users.noreply.github.com>
Co-authored-by: Lauris BH <lauris@nix.lv>
273 lines
6.7 KiB
Go
273 lines
6.7 KiB
Go
// Copyright 2015 The Gogs Authors. All rights reserved.
|
|
// Copyright 2019 The Gitea Authors. All rights reserved.
|
|
// Use of this source code is governed by a MIT-style
|
|
// license that can be found in the LICENSE file.
|
|
|
|
package user
|
|
|
|
import (
|
|
"fmt"
|
|
"path"
|
|
"strings"
|
|
|
|
"code.gitea.io/gitea/models"
|
|
"code.gitea.io/gitea/modules/base"
|
|
"code.gitea.io/gitea/modules/context"
|
|
"code.gitea.io/gitea/modules/setting"
|
|
"code.gitea.io/gitea/modules/util"
|
|
"code.gitea.io/gitea/routers/org"
|
|
"code.gitea.io/gitea/routers/repo"
|
|
)
|
|
|
|
const (
|
|
tplFollowers base.TplName = "user/meta/followers"
|
|
)
|
|
|
|
// GetUserByName get user by name
|
|
func GetUserByName(ctx *context.Context, name string) *models.User {
|
|
user, err := models.GetUserByName(name)
|
|
if err != nil {
|
|
if models.IsErrUserNotExist(err) {
|
|
ctx.NotFound("GetUserByName", nil)
|
|
} else {
|
|
ctx.ServerError("GetUserByName", err)
|
|
}
|
|
return nil
|
|
}
|
|
return user
|
|
}
|
|
|
|
// GetUserByParams returns user whose name is presented in URL paramenter.
|
|
func GetUserByParams(ctx *context.Context) *models.User {
|
|
return GetUserByName(ctx, ctx.Params(":username"))
|
|
}
|
|
|
|
// Profile render user's profile page
|
|
func Profile(ctx *context.Context) {
|
|
uname := ctx.Params(":username")
|
|
// Special handle for FireFox requests favicon.ico.
|
|
if uname == "favicon.ico" {
|
|
ctx.ServeFile(path.Join(setting.StaticRootPath, "public/img/favicon.png"))
|
|
return
|
|
} else if strings.HasSuffix(uname, ".png") {
|
|
ctx.Error(404)
|
|
return
|
|
}
|
|
|
|
isShowKeys := false
|
|
if strings.HasSuffix(uname, ".keys") {
|
|
isShowKeys = true
|
|
uname = strings.TrimSuffix(uname, ".keys")
|
|
}
|
|
|
|
isShowGPG := false
|
|
if strings.HasSuffix(uname, ".gpg") {
|
|
isShowGPG = true
|
|
uname = strings.TrimSuffix(uname, ".gpg")
|
|
}
|
|
|
|
ctxUser := GetUserByName(ctx, uname)
|
|
if ctx.Written() {
|
|
return
|
|
}
|
|
|
|
// Show SSH keys.
|
|
if isShowKeys {
|
|
ShowSSHKeys(ctx, ctxUser.ID)
|
|
return
|
|
}
|
|
|
|
// Show GPG keys.
|
|
if isShowGPG {
|
|
ShowGPGKeys(ctx, ctxUser.ID)
|
|
return
|
|
}
|
|
|
|
if ctxUser.IsOrganization() {
|
|
org.Home(ctx)
|
|
return
|
|
}
|
|
|
|
// Show OpenID URIs
|
|
openIDs, err := models.GetUserOpenIDs(ctxUser.ID)
|
|
if err != nil {
|
|
ctx.ServerError("GetUserOpenIDs", err)
|
|
return
|
|
}
|
|
|
|
ctx.Data["Title"] = ctxUser.DisplayName()
|
|
ctx.Data["PageIsUserProfile"] = true
|
|
ctx.Data["Owner"] = ctxUser
|
|
ctx.Data["OpenIDs"] = openIDs
|
|
ctx.Data["EnableHeatmap"] = setting.Service.EnableUserHeatmap
|
|
ctx.Data["HeatmapUser"] = ctxUser.Name
|
|
showPrivate := ctx.IsSigned && (ctx.User.IsAdmin || ctx.User.ID == ctxUser.ID)
|
|
|
|
orgs, err := models.GetOrgsByUserID(ctxUser.ID, showPrivate)
|
|
if err != nil {
|
|
ctx.ServerError("GetOrgsByUserIDDesc", err)
|
|
return
|
|
}
|
|
|
|
ctx.Data["Orgs"] = orgs
|
|
ctx.Data["HasOrgsVisible"] = models.HasOrgsVisible(orgs, ctx.User)
|
|
|
|
tab := ctx.Query("tab")
|
|
ctx.Data["TabName"] = tab
|
|
|
|
page := ctx.QueryInt("page")
|
|
if page <= 0 {
|
|
page = 1
|
|
}
|
|
|
|
topicOnly := ctx.QueryBool("topic")
|
|
|
|
var (
|
|
repos []*models.Repository
|
|
count int64
|
|
total int
|
|
orderBy models.SearchOrderBy
|
|
)
|
|
|
|
ctx.Data["SortType"] = ctx.Query("sort")
|
|
switch ctx.Query("sort") {
|
|
case "newest":
|
|
orderBy = models.SearchOrderByNewest
|
|
case "oldest":
|
|
orderBy = models.SearchOrderByOldest
|
|
case "recentupdate":
|
|
orderBy = models.SearchOrderByRecentUpdated
|
|
case "leastupdate":
|
|
orderBy = models.SearchOrderByLeastUpdated
|
|
case "reversealphabetically":
|
|
orderBy = models.SearchOrderByAlphabeticallyReverse
|
|
case "alphabetically":
|
|
orderBy = models.SearchOrderByAlphabetically
|
|
case "moststars":
|
|
orderBy = models.SearchOrderByStarsReverse
|
|
case "feweststars":
|
|
orderBy = models.SearchOrderByStars
|
|
case "mostforks":
|
|
orderBy = models.SearchOrderByForksReverse
|
|
case "fewestforks":
|
|
orderBy = models.SearchOrderByForks
|
|
default:
|
|
ctx.Data["SortType"] = "recentupdate"
|
|
orderBy = models.SearchOrderByRecentUpdated
|
|
}
|
|
|
|
keyword := strings.Trim(ctx.Query("q"), " ")
|
|
ctx.Data["Keyword"] = keyword
|
|
switch tab {
|
|
case "activity":
|
|
retrieveFeeds(ctx, models.GetFeedsOptions{RequestedUser: ctxUser,
|
|
Actor: ctx.User,
|
|
IncludePrivate: showPrivate,
|
|
OnlyPerformedBy: true,
|
|
IncludeDeleted: false,
|
|
})
|
|
if ctx.Written() {
|
|
return
|
|
}
|
|
case "stars":
|
|
ctx.Data["PageIsProfileStarList"] = true
|
|
repos, count, err = models.SearchRepository(&models.SearchRepoOptions{
|
|
Actor: ctx.User,
|
|
Keyword: keyword,
|
|
OrderBy: orderBy,
|
|
Private: ctx.IsSigned,
|
|
Page: page,
|
|
PageSize: setting.UI.User.RepoPagingNum,
|
|
StarredByID: ctxUser.ID,
|
|
Collaborate: util.OptionalBoolFalse,
|
|
TopicOnly: topicOnly,
|
|
IncludeDescription: setting.UI.SearchRepoDescription,
|
|
})
|
|
if err != nil {
|
|
ctx.ServerError("SearchRepository", err)
|
|
return
|
|
}
|
|
|
|
total = int(count)
|
|
default:
|
|
repos, count, err = models.SearchRepository(&models.SearchRepoOptions{
|
|
Actor: ctx.User,
|
|
Keyword: keyword,
|
|
OwnerID: ctxUser.ID,
|
|
OrderBy: orderBy,
|
|
Private: ctx.IsSigned,
|
|
Page: page,
|
|
IsProfile: true,
|
|
PageSize: setting.UI.User.RepoPagingNum,
|
|
Collaborate: util.OptionalBoolFalse,
|
|
TopicOnly: topicOnly,
|
|
IncludeDescription: setting.UI.SearchRepoDescription,
|
|
})
|
|
if err != nil {
|
|
ctx.ServerError("SearchRepository", err)
|
|
return
|
|
}
|
|
|
|
total = int(count)
|
|
}
|
|
ctx.Data["Repos"] = repos
|
|
ctx.Data["Total"] = total
|
|
|
|
pager := context.NewPagination(total, setting.UI.User.RepoPagingNum, page, 5)
|
|
pager.SetDefaultParams(ctx)
|
|
ctx.Data["Page"] = pager
|
|
|
|
ctx.Data["ShowUserEmail"] = len(ctxUser.Email) > 0 && ctx.IsSigned && (!ctxUser.KeepEmailPrivate || ctxUser.ID == ctx.User.ID)
|
|
|
|
ctx.HTML(200, tplProfile)
|
|
}
|
|
|
|
// Followers render user's followers page
|
|
func Followers(ctx *context.Context) {
|
|
u := GetUserByParams(ctx)
|
|
if ctx.Written() {
|
|
return
|
|
}
|
|
ctx.Data["Title"] = u.DisplayName()
|
|
ctx.Data["CardsTitle"] = ctx.Tr("user.followers")
|
|
ctx.Data["PageIsFollowers"] = true
|
|
ctx.Data["Owner"] = u
|
|
repo.RenderUserCards(ctx, u.NumFollowers, u.GetFollowers, tplFollowers)
|
|
}
|
|
|
|
// Following render user's followering page
|
|
func Following(ctx *context.Context) {
|
|
u := GetUserByParams(ctx)
|
|
if ctx.Written() {
|
|
return
|
|
}
|
|
ctx.Data["Title"] = u.DisplayName()
|
|
ctx.Data["CardsTitle"] = ctx.Tr("user.following")
|
|
ctx.Data["PageIsFollowing"] = true
|
|
ctx.Data["Owner"] = u
|
|
repo.RenderUserCards(ctx, u.NumFollowing, u.GetFollowing, tplFollowers)
|
|
}
|
|
|
|
// Action response for follow/unfollow user request
|
|
func Action(ctx *context.Context) {
|
|
u := GetUserByParams(ctx)
|
|
if ctx.Written() {
|
|
return
|
|
}
|
|
|
|
var err error
|
|
switch ctx.Params(":action") {
|
|
case "follow":
|
|
err = models.FollowUser(ctx.User.ID, u.ID)
|
|
case "unfollow":
|
|
err = models.UnfollowUser(ctx.User.ID, u.ID)
|
|
}
|
|
|
|
if err != nil {
|
|
ctx.ServerError(fmt.Sprintf("Action (%s)", ctx.Params(":action")), err)
|
|
return
|
|
}
|
|
|
|
ctx.RedirectToFirst(ctx.Query("redirect_to"), u.HomeLink())
|
|
}
|