Enalean / tuleap

plugins/git/include/GitPermissionsManager.class.php

<?php
/**
 * Copyright (c) Enalean, 2014. All Rights Reserved.
 *
 * This file is a part of Tuleap.
 *
 * Tuleap is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 2 of the License, or
 * (at your option) any later version.
 *
 * Tuleap is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with Tuleap; if not, write to the Free Software
 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
 */

require_once 'www/project/admin/permissions.php';

/**
 * This class manages permissions for the Git service
 */
class GitPermissionsManager {

    /**
     * @var Git_SystemEventManager
     */
    private $git_system_event_manager;

    /**
     * @var Git_PermissionsDao
     */
    private $git_permission_dao;

    /**
     * @var PermissionsManager
     */
    private $permissions_manager;

    public function __construct(Git_PermissionsDao $git_permission_dao, Git_SystemEventManager $git_system_event_manager) {
        $this->permissions_manager      = PermissionsManager::instance();
        $this->git_permission_dao       = $git_permission_dao;
        $this->git_system_event_manager = $git_system_event_manager;
    }

    public function userIsGitAdmin(PFUser $user, Project $project) {
        $database_result = $this->getCurrentGitAdminPermissionsForProject($project);

        if (db_numrows($database_result) < 1) {
            $database_result = $this->getDefaultGitAdminPermissions();
        }

        $has_permission = false;
        while (! $has_permission && ($row = db_fetch_array($database_result))) {
            $has_permission = ugroup_user_is_member($user->getId(), $row['ugroup_id'], $project->getID());
        }

        return $has_permission;
    }

    /**
     * @param Project $project
     * Return a DB list of ugroup_ids authorized to access the given object
     */
    private function getCurrentGitAdminPermissionsForProject(Project $project) {
        return permission_db_authorized_ugroups(Git::PERM_ADMIN, $project->getID());
    }

    private function getDefaultGitAdminPermissions() {
        return permission_db_get_defaults(Git::PERM_ADMIN);

The function permission_db_get_defaults() has been deprecated.

    }

    public function getCurrentGitAdminUgroups($project_id) {
        return $this->permissions_manager->getAuthorizedUgroupIds($project_id, Git::PERM_ADMIN);
    }

    public function updateAccessForRepositories(Project $project, $old_access, $new_access) {
        if ($new_access == Project::ACCESS_PRIVATE) {
            $this->git_permission_dao->disableAnonymousRegisteredAuthenticated($project->getID());
            $this->git_system_event_manager->queueProjectsConfigurationUpdate(array($project->getID()));
        }
        if ($new_access == Project::ACCESS_PUBLIC && $old_access == Project::ACCESS_PUBLIC_UNRESTRICTED) {
            $this->git_permission_dao->disableAuthenticated($project->getID());
            $this->git_system_event_manager->queueProjectsConfigurationUpdate(array($project->getID()));
        }
    }

    public function updateSiteAccess($old_value, $new_value) {
        if ($old_value == ForgeAccess::ANONYMOUS) {
            $project_ids = $this->queueProjectsConfigurationUpdate($this->git_permission_dao->getAllProjectsWithAnonymousRepositories());
            if (count($project_ids)) {
                $this->git_permission_dao->updateAllAnonymousRepositoriesToRegistered();
            }
        }
        if ($old_value == ForgeAccess::RESTRICTED) {
            $project_ids = $this->queueProjectsConfigurationUpdate($this->git_permission_dao->getAllProjectsWithUnrestrictedRepositories());
            if (count($project_ids)) {
                $this->git_permission_dao->updateAllAuthenticatedRepositoriesToRegistered();
            }
        }
    }

    private function queueProjectsConfigurationUpdate(DataAccessResult $dar) {
        $projects_ids = array();
        if (count($dar) > 0) {
            foreach ($dar as $row) {
                $projects_ids[] = $row['group_id'];
            }
            $this->git_system_event_manager->queueProjectsConfigurationUpdate($projects_ids);
        }
        return $projects_ids;
    }
}