fix(front): remove redundant checks from add people button visibility check (#431)

## 📝 Description

[_add_people_button](https://github.com/semaphoreio/semaphore/blob/d9a95d1890e5551a67c8071340b065c8bc61d213/front/lib/front_web/templates/people/members/_add_people_button.html.eex#L3)
partial already performs required checks. We only need to check if we're
on the `on_prem` environment.
Introduces `github_user_provider`, `gitlab_user_provider` and
`bitbucket_user_provider` feature flags so OS installations can enable
user authentication integration with git providers.
Introduces `user_repos_access` feature flag for specific setups that
need to restrict users from connecting their git provider account to
semaphore account.
## ✅ Checklist
- [x] I have tested this change
- [ ] This change requires documentation update

---------

Co-authored-by: Amir Hasanbasic <[email protected]>
Co-authored-by: Amir Hasanbasic <[email protected]>

Author: skipi

front/Makefile

@@ -52,7 +52,7 @@ CONTAINER_ENV_VARS = \
 
 
 CONTAINER_CE_ENV_VARS =\
-	 -e CE_ROLES=true \
+     -e EDITION=ce \
 	 -e SEED_CLOUD_MACHINES=false \
 	 -e SEED_SELF_HOSTED_AGENTS=true \
 	 -e SEED_CE_FEATURES=true \

front/config/runtime.exs

@@ -57,8 +57,6 @@ config :front,
   cookie_name: System.get_env("COOKIE_NAME"),
   use_rbac_api: if(System.get_env("USE_RBAC_API") == "true", do: true, else: false)
 
-on_prem? = if(System.get_env("ON_PREM") == "true", do: true, else: false)
-
 # Internal API endpoints - always read from environment variables for all environments
 # Test environment will need these env vars set, or use stubs in test setup
 config :front,
@@ -131,16 +129,10 @@ config :front,
   zendesk_snippet_id: System.get_env("ZENDESK_SNIPPET_ID"),
   google_gtag: System.get_env("GOOGLE_GTAG")
 
-config :front, :on_prem?, on_prem?
+edition = System.get_env("EDITION", "") |> String.trim() |> String.downcase()
+is_saas? = !(edition in ["ce", "ee"])
 
-if on_prem? do
-  config :front,
-    feature_provider:
-      {FeatureProvider.YamlProvider,
-       [yaml_path: System.get_env("FEATURE_YAML_PATH"), agent_name: :feature_provider_agent]}
-
-  config :front, JobPage.Api.Loghub, timeout: :timer.minutes(2)
-else
+if is_saas? do
   config :front,
     feature_provider:
       {Front.FeatureHubProvider,
@@ -149,6 +141,13 @@ else
            {FeatureProvider.CachexCache,
             name: :feature_provider_cache, ttl_ms: :timer.minutes(10)}
        ]}
+else
+  config :front,
+    feature_provider:
+      {FeatureProvider.YamlProvider,
+       [yaml_path: System.get_env("FEATURE_YAML_PATH"), agent_name: :feature_provider_agent]}
+
+  config :front, JobPage.Api.Loghub, timeout: :timer.minutes(2)
 end
 
 if System.get_env("AMQP_URL") != nil do
@@ -166,8 +165,6 @@ end
 
 config :front, :audit_logging, System.get_env("AUDIT_LOGGING") == "true"
 
-config :front, :ce_roles, System.get_env("CE_ROLES") == "true"
-
 config :front,
        :hide_promotions,
        System.get_env("HIDE_PROMOTIONS") == "true"
@@ -180,18 +177,8 @@ config :front,
        :new_project_onboarding_workflow_templates_path,
        System.fetch_env!("WORKFLOW_TEMPLATES_YAMLS_PATH") <> "_new"
 
-config :front,
-       :hide_bitbucket_me_page,
-       System.get_env("HIDE_BITBUCKET_ME_PAGE") == "true"
-
-config :front,
-       :hide_gitlab_me_page,
-       System.get_env("HIDE_GITLAB_ME_PAGE") == "true"
-
 config :front,
        :single_tenant,
        System.get_env("SINGLE_TENANT") == "true"
 
-config :front,
-       :edition,
-       System.get_env("EDITION", "") |> String.trim() |> String.downcase()
+config :front, :edition, edition

front/helm/templates/job-page.yaml

@@ -113,8 +113,6 @@ spec:
 {{- end }}
             - name: METRICS_SERVICE
               value: "front"
-            - name: ON_PREM
-              value: "true"
             - name: FEATURE_YAML_PATH
               value: {{ .Values.featureFlags.mountPath | quote }}
             - name: GETTING_STARTED_YAML_PATH
@@ -124,8 +122,6 @@ spec:
 {{- if eq .Values.global.edition "ce" }}
             - name: "SKIP_VELOCITY"
               value: "true"
-            - name: "CE_ROLES"
-              value: "true"
             - name: "HIDE_PROMOTIONS"
               value: "true"
 {{- end }}

front/helm/templates/project-page.yaml

@@ -139,8 +139,6 @@ spec:
 {{- end }}
             - name: METRICS_SERVICE
               value: "front"
-            - name: ON_PREM
-              value: "true"
             - name: START_TELEMETRY
               value: {{ .Values.global.telemetry.enabled | quote }}
             - name: TELEMETRY_CRON
@@ -154,8 +152,6 @@ spec:
 {{- if eq .Values.global.edition "ce" }}
             - name: "SKIP_VELOCITY"
               value: "true"
-            - name: "CE_ROLES"
-              value: "true"
             - name: "HIDE_PROMOTIONS"
               value: "true"
 {{- end }}

front/helm/templates/ui-cache-reactor.yaml

@@ -95,8 +95,6 @@ spec:
             - name: METRICS_NAMESPACE
               value: {{ .Values.global.statsd.metricsNamespace }}
 {{- end }}
-            - name: ON_PREM
-              value: "true"
             - name: FEATURE_YAML_PATH
               value: {{ .Values.featureFlags.mountPath | quote }}
             - name: GETTING_STARTED_YAML_PATH
@@ -106,8 +104,6 @@ spec:
 {{- if eq .Values.global.edition "ce" }}
             - name: "SKIP_VELOCITY"
               value: "true"
-            - name: "CE_ROLES"
-              value: "true"
             - name: "HIDE_PROMOTIONS"
               value: "true"
 {{- end }}

front/lib/front.ex

@@ -1,17 +1,4 @@
 defmodule Front do
-  @doc """
-  Checks if application is running on-prem environment
-  """
-  @spec on_prem?() :: boolean()
-  def on_prem? do
-    Application.get_env(:front, :on_prem?)
-  end
-
-  @spec ce_roles?() :: boolean()
-  def ce_roles? do
-    Application.get_env(:front, :ce_roles)
-  end
-
   @doc """
   Check if it's CE edition
   """
@@ -35,4 +22,12 @@ defmodule Front do
   def os? do
     ee?() || ce?()
   end
+
+  @doc """
+  Check if we're running on saas or not
+  """
+  @spec saas?() :: boolean()
+  def saas? do
+    !os?()
+  end
 end

front/lib/front/clients/billing.ex

@@ -314,26 +314,26 @@ defmodule Front.Clients.Billing do
 
   defp call_grpc(error = {:error, err}, _, _, _, _, _) do
     Logger.error("""
-    Unexpected error when connecting to Velocity: #{inspect(err)}
+    Unexpected error when connecting to Billing: #{inspect(err)}
     """)
 
     error
   end
 
   defp call_grpc({:ok, channel}, module, function_name, request, metadata, timeout) do
-    if Front.on_prem?() do
-      {:error, "Billing service is not running on on-prem instance"}
-    else
+    if Front.saas?() do
       apply(module, function_name, [channel, request, [metadata: metadata, timeout: timeout]])
+    else
+      {:error, "Billing service is running only on saas instance"}
     end
   end
 
   defp channel do
-    if Front.on_prem?() do
-      {:error, "Billing service is not running on on-prem instance"}
-    else
+    if Front.saas?() do
       Application.fetch_env!(:front, :billing_api_grpc_endpoint)
       |> GRPC.Stub.connect()
+    else
+      {:error, "Billing service is running only on saas instance"}
     end
   end
 

front/lib/front/feature_hub_provider.ex

@@ -6,13 +6,29 @@ defmodule Front.FeatureHubProvider do
     Availability,
     Machine,
     OrganizationFeature,
+    Feature,
     OrganizationMachine
   }
 
   import Front.Utils
 
   @impl FeatureProvider.Provider
-  def provide_features(org_id, _opts \\ []) do
+  def provide_features(org_id, opts \\ [])
+
+  def provide_features(nil, _opts) do
+    %InternalApi.Feature.ListFeaturesRequest{}
+    |> FeatureClient.list_features()
+    |> unwrap(fn response ->
+      features =
+        response.features
+        |> Enum.map(&feature_from_grpc/1)
+        |> Enum.filter(&FeatureProvider.Feature.visible?/1)
+
+      ok(features)
+    end)
+  end
+
+  def provide_features(org_id, _opts) do
     FeatureClient.list_organization_features(%{org_id: org_id})
     |> unwrap(fn response ->
       features =
@@ -38,6 +54,21 @@ defmodule Front.FeatureHubProvider do
     end)
   end
 
+  defp feature_from_grpc(%Feature{
+         availability: availability,
+         name: name,
+         type: type,
+         description: description
+       }) do
+    %FeatureProvider.Feature{
+      name: name,
+      type: type,
+      description: description,
+      quantity: quantity_from_availability(availability),
+      state: state_from_availability(availability)
+    }
+  end
+
   defp feature_from_grpc(%OrganizationFeature{feature: feature, availability: availability}) do
     %FeatureProvider.Feature{
       name: feature.name,

front/lib/front/layout/cache_invalidator.ex

@@ -314,7 +314,7 @@ defmodule Front.Layout.CacheInvalidator do
   end
 
   def invalidate_billing(org_id) do
-    if not Front.on_prem?() do
+    if Front.saas?() do
       Front.Clients.Billing.invalidate_cache(:list_spendings, %{org_id: org_id})
       Front.Clients.Billing.invalidate_cache(:current_spending, %{org_id: org_id})
       Front.Clients.Billing.invalidate_cache(:credits_usage, %{org_id: org_id})

front/lib/front/models/organization_onboarding.ex

@@ -125,9 +125,7 @@ defmodule Front.Models.OrganizationOnboarding do
 
   @spec validate_billing(model :: t()) :: :ok | {:error, String.t()}
   defp validate_billing(model) do
-    if Front.on_prem?() do
-      :ok
-    else
+    if Front.saas?() do
       BillingClient.can_setup_organization(%{
         owner_id: model.user_id
       })
@@ -136,6 +134,8 @@ defmodule Front.Models.OrganizationOnboarding do
         {:ok, %{allowed: false, errors: messages}} -> {:error, Enum.join(messages, ", ")}
         {:error, _} -> {:error, "Account check failed"}
       end
+    else
+      :ok
     end
   end