mirror of
https://github.com/semaphoreui/semaphore.git
synced 2024-11-27 02:52:14 +01:00
52 lines
1.4 KiB
Go
52 lines
1.4 KiB
Go
package db
|
|
|
|
type ProjectUserRole string
|
|
|
|
const (
|
|
ProjectOwner ProjectUserRole = "owner"
|
|
ProjectManager ProjectUserRole = "manager"
|
|
ProjectTaskRunner ProjectUserRole = "task_runner"
|
|
ProjectGuest ProjectUserRole = "guest"
|
|
)
|
|
|
|
type ProjectUserPermission int
|
|
|
|
const (
|
|
CanRunProjectTasks ProjectUserPermission = 1 << iota
|
|
CanUpdateProject
|
|
CanManageProjectResources
|
|
CanManageProjectUsers
|
|
)
|
|
|
|
var rolePermissions = map[ProjectUserRole]ProjectUserPermission{
|
|
ProjectOwner: CanRunProjectTasks | CanManageProjectResources | CanUpdateProject | CanManageProjectUsers,
|
|
ProjectManager: CanRunProjectTasks | CanManageProjectResources | CanManageProjectUsers,
|
|
ProjectTaskRunner: CanRunProjectTasks,
|
|
ProjectGuest: 0,
|
|
}
|
|
|
|
func (r ProjectUserRole) IsValid() bool {
|
|
_, ok := rolePermissions[r]
|
|
return ok
|
|
}
|
|
|
|
type ProjectUser struct {
|
|
ID int `db:"id" json:"-"`
|
|
ProjectID int `db:"project_id" json:"project_id"`
|
|
UserID int `db:"user_id" json:"user_id"`
|
|
Role ProjectUserRole `db:"role" json:"role"`
|
|
}
|
|
|
|
func (u *ProjectUser) Can(permissions ProjectUserPermission) bool {
|
|
userPermissions := rolePermissions[u.Role]
|
|
return (userPermissions & permissions) == permissions
|
|
}
|
|
|
|
func (r ProjectUserRole) Can(permissions ProjectUserPermission) bool {
|
|
return (rolePermissions[r] & permissions) == permissions
|
|
}
|
|
|
|
func (r ProjectUserRole) GetPermissions() ProjectUserPermission {
|
|
return rolePermissions[r]
|
|
}
|