|
| 1 | +// Copyright 2024 The Gitea Authors. All rights reserved. |
| 2 | +// SPDX-License-Identifier: MIT |
| 3 | + |
| 4 | +package pull |
| 5 | + |
| 6 | +import ( |
| 7 | + "context" |
| 8 | + "fmt" |
| 9 | + |
| 10 | + "code.gitea.io/gitea/models/db" |
| 11 | + "code.gitea.io/gitea/models/perm" |
| 12 | + repo_model "code.gitea.io/gitea/models/repo" |
| 13 | + "code.gitea.io/gitea/models/unit" |
| 14 | + user_model "code.gitea.io/gitea/models/user" |
| 15 | + "code.gitea.io/gitea/modules/container" |
| 16 | + |
| 17 | + "xorm.io/builder" |
| 18 | +) |
| 19 | + |
| 20 | +// GetReviewers get all users can be requested to review: |
| 21 | +// - Poster should not be listed |
| 22 | +// - For collaborator, all users that have read access or higher to the repository. |
| 23 | +// - For repository under organization, users under the teams which have read permission or higher of pull request unit |
| 24 | +// - Owner will be listed if it's not an organization, not the poster and not in the list of reviewers |
| 25 | +func GetReviewers(ctx context.Context, repo *repo_model.Repository, doerID, posterID int64) ([]*user_model.User, error) { |
| 26 | + if err := repo.LoadOwner(ctx); err != nil { |
| 27 | + return nil, err |
| 28 | + } |
| 29 | + |
| 30 | + e := db.GetEngine(ctx) |
| 31 | + uniqueUserIDs := make(container.Set[int64]) |
| 32 | + |
| 33 | + collaboratorIDs := make([]int64, 0, 10) |
| 34 | + if err := e.Table("collaboration").Where("repo_id=?", repo.ID). |
| 35 | + And("mode >= ?", perm.AccessModeRead). |
| 36 | + Select("user_id"). |
| 37 | + Find(&collaboratorIDs); err != nil { |
| 38 | + return nil, err |
| 39 | + } |
| 40 | + uniqueUserIDs.AddMultiple(collaboratorIDs...) |
| 41 | + |
| 42 | + if repo.Owner.IsOrganization() { |
| 43 | + additionalUserIDs := make([]int64, 0, 10) |
| 44 | + if err := e.Table("team_user"). |
| 45 | + Join("INNER", "team_repo", "`team_repo`.team_id = `team_user`.team_id"). |
| 46 | + Join("INNER", "team_unit", "`team_unit`.team_id = `team_user`.team_id"). |
| 47 | + Where("`team_repo`.repo_id = ? AND (`team_unit`.access_mode >= ? AND `team_unit`.`type` = ?)", |
| 48 | + repo.ID, perm.AccessModeRead, unit.TypePullRequests). |
| 49 | + Distinct("`team_user`.uid"). |
| 50 | + Select("`team_user`.uid"). |
| 51 | + Find(&additionalUserIDs); err != nil { |
| 52 | + return nil, err |
| 53 | + } |
| 54 | + uniqueUserIDs.AddMultiple(additionalUserIDs...) |
| 55 | + |
| 56 | + if repo.Owner.Visibility.IsLimited() && doerID == 0 { |
| 57 | + return nil, fmt.Errorf("permission denied") |
| 58 | + } |
| 59 | + |
| 60 | + if (repo.IsPrivate || repo.Owner.Visibility.IsPrivate()) && !uniqueUserIDs.Contains(doerID) { |
| 61 | + return nil, fmt.Errorf("permission denied") |
| 62 | + } |
| 63 | + } else { |
| 64 | + userIDs := make([]int64, 0, 10) |
| 65 | + if err := e.Table("access"). |
| 66 | + Where("repo_id = ? AND mode >= ?", repo.ID, perm.AccessModeRead). |
| 67 | + Select("user_id"). |
| 68 | + Find(&userIDs); err != nil { |
| 69 | + return nil, err |
| 70 | + } |
| 71 | + uniqueUserIDs.AddMultiple(userIDs...) |
| 72 | + if repo.IsPrivate && !uniqueUserIDs.Contains(doerID) && doerID != repo.OwnerID { |
| 73 | + return nil, fmt.Errorf("permission denied") |
| 74 | + } |
| 75 | + } |
| 76 | + |
| 77 | + uniqueUserIDs.Remove(posterID) // posterID should not be in the list of reviewers |
| 78 | + |
| 79 | + // Leave a seat for owner itself to append later, but if owner is an organization |
| 80 | + // and just waste 1 unit is cheaper than re-allocate memory once. |
| 81 | + users := make([]*user_model.User, 0, len(uniqueUserIDs)+1) |
| 82 | + if len(uniqueUserIDs) > 0 { |
| 83 | + if err := e.In("id", uniqueUserIDs.Values()). |
| 84 | + Where(builder.Eq{"`user`.is_active": true}). |
| 85 | + OrderBy(user_model.GetOrderByName()). |
| 86 | + Find(&users); err != nil { |
| 87 | + return nil, err |
| 88 | + } |
| 89 | + } |
| 90 | + if repo.OwnerID != posterID && !repo.Owner.IsOrganization() && !uniqueUserIDs.Contains(repo.OwnerID) { |
| 91 | + users = append(users, repo.Owner) |
| 92 | + } |
| 93 | + |
| 94 | + return users, nil |
| 95 | +} |
0 commit comments