gogs/internal/context/org.go

package context

import (
	"strings"

	"github.com/flamego/flamego"

	"gogs.io/gogs/internal/conf"
	"gogs.io/gogs/internal/database"
)

type Organization struct {
	IsOwner      bool
	IsMember     bool
	IsTeamMember bool // Is member of team.
	IsTeamAdmin  bool // In owner team or team that has admin permission level.
	Organization *database.User
	OrgLink      string

	Team *database.Team
}

func HandleOrgAssignment(c *Context, args ...bool) {
	var (
		requireMember     bool
		requireOwner      bool
		requireTeamMember bool
		requireTeamAdmin  bool
	)
	if len(args) >= 1 {
		requireMember = args[0]
	}
	if len(args) >= 2 {
		requireOwner = args[1]
	}
	if len(args) >= 3 {
		requireTeamMember = args[2]
	}
	if len(args) >= 4 {
		requireTeamAdmin = args[3]
	}

	orgName := c.Param("org")

	var err error
	c.Org.Organization, err = database.Handle.Users().GetByUsername(c.Request.Context(), orgName)
	if err != nil {
		c.NotFoundOrError(err, "get organization by name")
		return
	}
	org := c.Org.Organization
	c.Data["Org"] = org

	// Force redirection when username is actually a user.
	if !org.IsOrganization() {
		c.Redirect("/" + org.Name)
		return
	}

	// Admin has super access.
	if c.IsLogged && c.User.IsAdmin {
		c.Org.IsOwner = true
		c.Org.IsMember = true
		c.Org.IsTeamMember = true
		c.Org.IsTeamAdmin = true
	} else if c.IsLogged {
		c.Org.IsOwner = org.IsOwnedBy(c.User.ID)
		if c.Org.IsOwner {
			c.Org.IsMember = true
			c.Org.IsTeamMember = true
			c.Org.IsTeamAdmin = true
		} else if org.IsOrgMember(c.User.ID) {
			c.Org.IsMember = true
		}
	} else {
		// Fake data.
		c.Data["SignedUser"] = &database.User{}
	}
	if (requireMember && !c.Org.IsMember) ||
		(requireOwner && !c.Org.IsOwner) {
		c.NotFound()
		return
	}
	c.Data["IsOrganizationOwner"] = c.Org.IsOwner
	c.Data["IsOrganizationMember"] = c.Org.IsMember

	c.Org.OrgLink = conf.Server.Subpath + "/org/" + org.Name
	c.Data["OrgLink"] = c.Org.OrgLink

	// Team.
	if c.Org.IsMember {
		if c.Org.IsOwner {
			if err := org.GetTeams(); err != nil {
				c.Error(err, "get teams")
				return
			}
		} else {
			org.Teams, err = org.GetUserTeams(c.User.ID)
			if err != nil {
				c.Error(err, "get user teams")
				return
			}
		}
	}

	teamName := c.Param("team")
	if len(teamName) > 0 {
		teamExists := false
		for _, team := range org.Teams {
			if team.LowerName == strings.ToLower(teamName) {
				teamExists = true
				c.Org.Team = team
				c.Org.IsTeamMember = true
				c.Data["Team"] = c.Org.Team
				break
			}
		}

		if !teamExists {
			c.NotFound()
			return
		}

		c.Data["IsTeamMember"] = c.Org.IsTeamMember
		if requireTeamMember && !c.Org.IsTeamMember {
			c.NotFound()
			return
		}

		c.Org.IsTeamAdmin = c.Org.Team.IsOwnerTeam() || c.Org.Team.Authorize >= database.AccessModeAdmin
		c.Data["IsTeamAdmin"] = c.Org.IsTeamAdmin
		if requireTeamAdmin && !c.Org.IsTeamAdmin {
			c.NotFound()
			return
		}
	}
}

func OrgAssignment(args ...bool) flamego.Handler {
	return func(c *Context) {
		HandleOrgAssignment(c, args...)
	}
}