12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485 |
- package db
- import (
- "gorm.io/gorm"
- log "unknwon.dev/clog/v2"
- )
- type PermsStore interface {
-
- AccessMode(userID int64, repo *Repository) AccessMode
-
- Authorize(userID int64, repo *Repository, desired AccessMode) bool
-
-
- SetRepoPerms(repoID int64, accessMap map[int64]AccessMode) error
- }
- var Perms PermsStore
- var _ PermsStore = (*perms)(nil)
- type perms struct {
- *gorm.DB
- }
- func (db *perms) AccessMode(userID int64, repo *Repository) (mode AccessMode) {
- if repo == nil {
- return AccessModeNone
- }
-
- if !repo.IsPrivate {
- mode = AccessModeRead
- }
-
- if userID <= 0 {
- return mode
- }
- if userID == repo.OwnerID {
- return AccessModeOwner
- }
- access := new(Access)
- err := db.Where("user_id = ? AND repo_id = ?", userID, repo.ID).First(access).Error
- if err != nil {
- if err != gorm.ErrRecordNotFound {
- log.Error("Failed to get access [user_id: %d, repo_id: %d]: %v", userID, repo.ID, err)
- }
- return mode
- }
- return access.Mode
- }
- func (db *perms) Authorize(userID int64, repo *Repository, desired AccessMode) bool {
- return desired <= db.AccessMode(userID, repo)
- }
- func (db *perms) SetRepoPerms(repoID int64, accessMap map[int64]AccessMode) error {
- records := make([]*Access, 0, len(accessMap))
- for userID, mode := range accessMap {
- records = append(records, &Access{
- UserID: userID,
- RepoID: repoID,
- Mode: mode,
- })
- }
- return db.Transaction(func(tx *gorm.DB) error {
- err := tx.Where("repo_id = ?", repoID).Delete(new(Access)).Error
- if err != nil {
- return err
- }
- return tx.Create(&records).Error
- })
- }
|