2016-04-02 14:40:07 +02:00
package projects
import (
2016-04-09 21:09:57 +02:00
"database/sql"
2017-02-23 00:21:49 +01:00
"net/http"
2016-04-17 12:41:36 +02:00
"strconv"
2016-04-09 21:09:57 +02:00
2017-02-23 06:12:16 +01:00
"github.com/ansible-semaphore/semaphore/db"
2019-07-09 14:56:03 +02:00
"github.com/ansible-semaphore/semaphore/util"
2019-07-09 18:11:01 +02:00
"github.com/ansible-semaphore/semaphore/mulekick"
2017-02-23 00:21:49 +01:00
"github.com/gorilla/context"
2016-04-02 14:40:07 +02:00
"github.com/masterminds/squirrel"
)
2018-03-27 22:12:47 +02:00
// UserMiddleware ensures a user exists and loads it to the context
2019-07-09 18:11:01 +02:00
func UserMiddleware ( w http . ResponseWriter , r * http . Request ) {
project := context . Get ( r , "project" ) . ( db . Project )
userID , err := util . GetIntParam ( "user_id" , w , r )
if err != nil {
return
}
var user db . User
if err := db . Mysql . SelectOne ( & user , "select u.* from project__user as pu join user as u on pu.user_id=u.id where pu.user_id=? and pu.project_id=?" , userID , project . ID ) ; err != nil {
if err == sql . ErrNoRows {
w . WriteHeader ( http . StatusNotFound )
2016-04-09 21:09:57 +02:00
return
}
2019-07-09 18:11:01 +02:00
panic ( err )
}
2016-04-09 21:09:57 +02:00
2019-07-09 18:11:01 +02:00
context . Set ( r , "projectUser" , user )
2016-04-04 15:44:34 +02:00
}
2018-03-27 22:12:47 +02:00
// GetUsers returns all users in a project
2019-07-09 18:11:01 +02:00
func GetUsers ( w http . ResponseWriter , r * http . Request ) {
project := context . Get ( r , "project" ) . ( db . Project )
var users [ ] struct {
db . User
Admin bool ` db:"admin" json:"admin" `
}
sort := r . URL . Query ( ) . Get ( "sort" )
order := r . URL . Query ( ) . Get ( "order" )
if order != asc && order != desc {
order = asc
}
q := squirrel . Select ( "u.*" ) . Column ( "pu.admin" ) .
From ( "project__user as pu" ) .
LeftJoin ( "user as u on pu.user_id=u.id" ) .
Where ( "pu.project_id=?" , project . ID )
switch sort {
case "name" , "username" , "email" :
q = q . OrderBy ( "u." + sort + " " + order )
case "admin" :
q = q . OrderBy ( "pu." + sort + " " + order )
default :
q = q . OrderBy ( "u.name " + order )
}
query , args , _ := q . ToSql ( )
if _ , err := db . Mysql . Select ( & users , query , args ... ) ; err != nil {
panic ( err )
}
mulekick . WriteJSON ( w , http . StatusOK , users )
2016-04-02 14:40:07 +02:00
}
2018-03-27 22:12:47 +02:00
// AddUser adds a user to a projects team in the database
2019-07-09 18:11:01 +02:00
func AddUser ( w http . ResponseWriter , r * http . Request ) {
project := context . Get ( r , "project" ) . ( db . Project )
var user struct {
UserID int ` json:"user_id" binding:"required" `
Admin bool ` json:"admin" `
}
if err := mulekick . Bind ( w , r , & user ) ; err != nil {
return
}
//TODO - check if user already exists
if _ , err := db . Mysql . Exec ( "insert into project__user set user_id=?, project_id=?, `admin`=?" , user . UserID , project . ID , user . Admin ) ; err != nil {
panic ( err )
}
objType := "user"
desc := "User ID " + strconv . Itoa ( user . UserID ) + " added to team"
if err := ( db . Event {
ProjectID : & project . ID ,
ObjectType : & objType ,
ObjectID : & user . UserID ,
Description : & desc ,
} . Insert ( ) ) ; err != nil {
panic ( err )
}
w . WriteHeader ( http . StatusNoContent )
2016-04-02 14:40:07 +02:00
}
2018-03-27 22:12:47 +02:00
// RemoveUser removes a user from a project team
2019-07-09 18:11:01 +02:00
func RemoveUser ( w http . ResponseWriter , r * http . Request ) {
project := context . Get ( r , "project" ) . ( db . Project )
user := context . Get ( r , "projectUser" ) . ( db . User )
if _ , err := db . Mysql . Exec ( "delete from project__user where user_id=? and project_id=?" , user . ID , project . ID ) ; err != nil {
panic ( err )
}
objType := "user"
desc := "User ID " + strconv . Itoa ( user . ID ) + " removed from team"
if err := ( db . Event {
ProjectID : & project . ID ,
ObjectType : & objType ,
ObjectID : & user . ID ,
Description : & desc ,
} . Insert ( ) ) ; err != nil {
panic ( err )
}
w . WriteHeader ( http . StatusNoContent )
2016-04-02 14:40:07 +02:00
}
2016-04-04 15:44:34 +02:00
2018-03-27 22:12:47 +02:00
// MakeUserAdmin writes the admin flag to the users account
2019-07-09 18:11:01 +02:00
func MakeUserAdmin ( w http . ResponseWriter , r * http . Request ) {
project := context . Get ( r , "project" ) . ( db . Project )
user := context . Get ( r , "projectUser" ) . ( db . User )
admin := 1
2016-04-09 21:09:57 +02:00
2019-07-09 18:11:01 +02:00
if r . Method == "DELETE" {
// strip admin
admin = 0
}
2016-04-04 15:44:34 +02:00
2019-07-09 18:11:01 +02:00
if _ , err := db . Mysql . Exec ( "update project__user set `admin`=? where user_id=? and project_id=?" , admin , user . ID , project . ID ) ; err != nil {
panic ( err )
}
2016-04-09 21:09:57 +02:00
2019-07-09 18:11:01 +02:00
w . WriteHeader ( http . StatusNoContent )
2016-04-04 15:44:34 +02:00
}