forked from vikunja/vikunja
konrad
7e9446ea07
fix copyright date Add more user tests More user tests More user tests Start refactoring user tests Docs Fix lint Fix db fixtures init in tests Fix models test Fix loading fixtures Fix ineffasign Fix lint Fix integration tests Fix init of test engine creation Fix user related tests Better handling of creating test enging Moved all fixtures to db package Moved all fixtures to db package Moved user related stuff to seperate package Co-authored-by: kolaente <k@knt.li> Reviewed-on: vikunja/api#123
116 lines
3.6 KiB
Go
116 lines
3.6 KiB
Go
// Copyright 2018-2020 Vikunja and contriubtors. All rights reserved.
|
|
//
|
|
// This file is part of Vikunja.
|
|
//
|
|
// Vikunja is free software: you can redistribute it and/or modify
|
|
// it under the terms of the GNU General Public License as published by
|
|
// the Free Software Foundation, either version 3 of the License, or
|
|
// (at your option) any later version.
|
|
//
|
|
// Vikunja is distributed in the hope that it will be useful,
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
// GNU General Public License for more details.
|
|
//
|
|
// You should have received a copy of the GNU General Public License
|
|
// along with Vikunja. If not, see <https://www.gnu.org/licenses/>.
|
|
|
|
package models
|
|
|
|
import (
|
|
"code.vikunja.io/api/pkg/user"
|
|
"github.com/go-xorm/builder"
|
|
)
|
|
|
|
// ListUIDs hold all kinds of user IDs from accounts who have somehow access to a list
|
|
type ListUIDs struct {
|
|
ListOwnerID int64 `xorm:"listOwner"`
|
|
NamespaceUserID int64 `xorm:"unID"`
|
|
ListUserID int64 `xorm:"ulID"`
|
|
NamespaceOwnerUserID int64 `xorm:"nOwner"`
|
|
TeamNamespaceUserID int64 `xorm:"tnUID"`
|
|
TeamListUserID int64 `xorm:"tlUID"`
|
|
}
|
|
|
|
// ListUsersFromList returns a list with all users who have access to a list, regardless of the method which gave them access
|
|
func ListUsersFromList(l *List, search string) (users []*user.User, err error) {
|
|
|
|
userids := []*ListUIDs{}
|
|
|
|
err = x.
|
|
Select(`l.owner_id as listOwner,
|
|
un.user_id as unID,
|
|
ul.user_id as ulID,
|
|
n.owner_id as nOwner,
|
|
tm.user_id as tnUID,
|
|
tm2.user_id as tlUID`).
|
|
Table("list").
|
|
Alias("l").
|
|
// User stuff
|
|
Join("LEFT", []string{"users_namespace", "un"}, "un.namespace_id = l.namespace_id").
|
|
Join("LEFT", []string{"users_list", "ul"}, "ul.list_id = l.id").
|
|
Join("LEFT", []string{"namespaces", "n"}, "n.id = l.namespace_id").
|
|
// Team stuff
|
|
Join("LEFT", []string{"team_namespaces", "tn"}, " l.namespace_id = tn.namespace_id").
|
|
Join("LEFT", []string{"team_members", "tm"}, "tm.team_id = tn.team_id").
|
|
Join("LEFT", []string{"team_list", "tl"}, "l.id = tl.list_id").
|
|
Join("LEFT", []string{"team_members", "tm2"}, "tm2.team_id = tl.team_id").
|
|
// The actual condition
|
|
Where(
|
|
builder.Or(
|
|
builder.Or(builder.Eq{"ul.right": RightRead}),
|
|
builder.Or(builder.Eq{"un.right": RightRead}),
|
|
builder.Or(builder.Eq{"tl.right": RightRead}),
|
|
builder.Or(builder.Eq{"tn.right": RightRead}),
|
|
|
|
builder.Or(builder.Eq{"ul.right": RightWrite}),
|
|
builder.Or(builder.Eq{"un.right": RightWrite}),
|
|
builder.Or(builder.Eq{"tl.right": RightWrite}),
|
|
builder.Or(builder.Eq{"tn.right": RightWrite}),
|
|
|
|
builder.Or(builder.Eq{"ul.right": RightAdmin}),
|
|
builder.Or(builder.Eq{"un.right": RightAdmin}),
|
|
builder.Or(builder.Eq{"tl.right": RightAdmin}),
|
|
builder.Or(builder.Eq{"tn.right": RightAdmin}),
|
|
),
|
|
builder.Eq{"l.id": l.ID},
|
|
).
|
|
Find(&userids)
|
|
if err != nil {
|
|
return
|
|
}
|
|
|
|
// Remove duplicates from the list of ids and make it a slice
|
|
uidmap := make(map[int64]bool)
|
|
uidmap[l.OwnerID] = true
|
|
for _, u := range userids {
|
|
uidmap[u.ListUserID] = true
|
|
uidmap[u.NamespaceOwnerUserID] = true
|
|
uidmap[u.NamespaceUserID] = true
|
|
uidmap[u.TeamListUserID] = true
|
|
uidmap[u.TeamNamespaceUserID] = true
|
|
}
|
|
|
|
uids := make([]int64, len(uidmap))
|
|
for id := range uidmap {
|
|
uids = append(uids, id)
|
|
}
|
|
|
|
// Get all users
|
|
err = x.
|
|
Table("users").
|
|
Select("*").
|
|
In("id", uids).
|
|
And("username LIKE ?", "%"+search+"%").
|
|
GroupBy("id").
|
|
OrderBy("id").
|
|
Find(&users)
|
|
|
|
// Obfuscate all user emails
|
|
for _, u := range users {
|
|
u.Email = ""
|
|
}
|
|
|
|
return
|
|
}
|