blob: 6dc5d423cad937b73cb2d5bbabf998615d7272ea (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
|
// Copyright 2020 The Gogs Authors. All rights reserved.
// Use of this source code is governed by a MIT-style
// license that can be found in the LICENSE file.
package db
import (
"github.com/jinzhu/gorm"
log "unknwon.dev/clog/v2"
)
// PermsStore is the persistent interface for permissions.
//
// NOTE: All methods are sorted in alphabetical order.
type PermsStore interface {
// AccessMode returns the access mode of given user has to the repository.
AccessMode(userID int64, repo *Repository) AccessMode
// Authorize returns true if the user has as good as desired access mode to
// the repository.
Authorize(userID int64, repo *Repository, desired AccessMode) bool
}
var Perms PermsStore
type perms struct {
*gorm.DB
}
func (db *perms) AccessMode(userID int64, repo *Repository) AccessMode {
var mode AccessMode
// Everyone has read access to public repository.
if !repo.IsPrivate {
mode = AccessModeRead
}
// Quick check to avoid a DB query.
if userID <= 0 {
return mode
}
if userID == repo.OwnerID {
return AccessModeOwner
}
access := new(Access)
err := db.Where("user_id = ? AND repo_id = ?", userID, repo.ID).First(access).Error
if err != nil {
log.Error("Failed to get access [user_id: %d, repo_id: %d]: %v", userID, repo.ID, err)
return mode
}
return access.Mode
}
func (db *perms) Authorize(userID int64, repo *Repository, desired AccessMode) bool {
return desired <= db.AccessMode(userID, repo)
}
|