Merge pull request #1175 from travis-ci/ta-authorize-group-account-build

Authorize build if owner belongs to a group

Author: travis-architect

lib/travis/api/enqueue/services/restart_model.rb

@@ -45,8 +45,8 @@ def billing?
             @cause_of_denial = e.message
             false
           rescue Travis::API::V3::NotFound
-            # Owner is on a legacy plan
-            if subscription&.active?
+            if subscription&.active? || owner_group_subscription?
+              # Owner is on a legacy plan or belongs to a group
               true
             else
               @cause_of_denial = 'You do not seem to have active subscription.'
@@ -86,6 +86,18 @@ def subscription
           Subscription.where(owner: repository.owner)&.first
         end
 
+        def owner_group
+          repository&.owner&.owner_group
+        end
+
+        def owner_group_subscription?
+          return false if owner_group.blank?
+
+          group_owners = OwnerGroup.where(uuid: owner_group.uuid).map(&:owner)
+          active_subscriptions = Subscription.where(owner: group_owners).select(&:active?)
+          active_subscriptions.present?
+        end
+
         def permission?
           current_user && current_user.permission?(required_role, repository_id: target.repository_id) && !abusive? && build_permission?
         end

lib/travis/model.rb

@@ -18,6 +18,7 @@ class Model < ActiveRecord::Base
     require 'travis/model/job'
     require 'travis/model/membership'
     require 'travis/model/organization'
+    require 'travis/model/owner_group'
     require 'travis/model/permission'
     require 'travis/model/pull_request'
     require 'travis/model/repository'

lib/travis/model/organization.rb

@@ -5,6 +5,7 @@ class Organization < Travis::Model
   has_many :memberships
   has_many :users, :through => :memberships
   has_many :repositories, :as => :owner
+  has_one :owner_group, as: :owner
 
   def education?
     Travis::Features.owner_active?(:educational_org, self)

lib/travis/model/owner_group.rb

@@ -0,0 +1,6 @@
+require 'gh'
+require 'travis/model'
+
+class OwnerGroup < Travis::Model
+  belongs_to :owner, polymorphic: true
+end

lib/travis/model/user.rb

@@ -12,6 +12,7 @@ class User < Travis::Model
   has_many :permissions, dependent: :destroy
   has_many :repositories, through: :permissions
   has_many :emails, dependent: :destroy
+  has_one :owner_group, as: :owner
 
   before_create :set_as_recent
   after_create :create_a_token

spec/lib/travis/api/enqueue/services/restart_model_spec.rb

@@ -118,6 +118,22 @@
         include_examples 'does not restart the job'
       end
 
+      context 'when customer belongs to a group' do
+        let(:uuid) { SecureRandom.uuid }
+        let!(:travis) { FactoryBot.create(:org, login: 'travis') }
+        let!(:john)  { FactoryBot.create(:user, login: 'john') }
+        let!(:doe)   { FactoryBot.create(:user, login: 'doe')  }
+        before do
+          repository.permissions.create(user: user, build: true)
+          FactoryBot.create(:valid_stripe_subs, owner: john)
+          OwnerGroup.create(uuid: uuid, owner: owner)
+          OwnerGroup.create(uuid: uuid, owner: john)
+          OwnerGroup.create(uuid: uuid, owner: doe)
+        end
+
+        include_examples 'restarts the job'
+      end
+
     end
   end
 end