| | |
|---|
| | | import java.text.MessageFormat;
|
|---|
| | | import java.util.ArrayList;
|
|---|
| | | import java.util.Collections;
|
|---|
| | | import java.util.HashMap;
|
|---|
| | | import java.util.HashSet;
|
|---|
| | | import java.util.List;
|
|---|
| | | import java.util.Map;
|
|---|
| | | import java.util.Set;
|
|---|
| | |
|
|---|
| | | import javax.swing.ImageIcon;
|
|---|
| | |
|---|
| | | import javax.swing.KeyStroke;
|
|---|
| | |
|
|---|
| | | import com.gitblit.Constants.AccessRestrictionType;
|
|---|
| | | import com.gitblit.Constants.AuthorizationControl;
|
|---|
| | | import com.gitblit.Constants.PermissionType;
|
|---|
| | | import com.gitblit.Constants.RegistrantType;
|
|---|
| | | import com.gitblit.Keys;
|
|---|
| | | import com.gitblit.models.RegistrantAccessPermission;
|
|---|
| | | import com.gitblit.models.RepositoryModel;
|
|---|
| | | import com.gitblit.models.ServerSettings;
|
|---|
| | | import com.gitblit.models.TeamModel;
|
|---|
| | |
|---|
| | | private JPasswordField passwordField;
|
|---|
| | |
|
|---|
| | | private JPasswordField confirmPasswordField;
|
|---|
| | | |
|---|
| | | private JTextField displayNameField;
|
|---|
| | | |
|---|
| | | private JTextField emailAddressField;
|
|---|
| | |
|
|---|
| | | private JCheckBox canAdminCheckbox;
|
|---|
| | | |
|---|
| | | private JCheckBox canForkCheckbox;
|
|---|
| | | |
|---|
| | | private JCheckBox canCreateCheckbox;
|
|---|
| | |
|
|---|
| | | private JCheckBox notFederatedCheckbox;
|
|---|
| | |
|
|---|
| | | private JPalette<String> repositoryPalette;
|
|---|
| | |
|
|---|
| | | private JTextField organizationalUnitField;
|
|---|
| | | |
|---|
| | | private JTextField organizationField;
|
|---|
| | |
|
|---|
| | | private JTextField localityField;
|
|---|
| | | |
|---|
| | | private JTextField stateProvinceField;
|
|---|
| | | |
|---|
| | | private JTextField countryCodeField;
|
|---|
| | | |
|---|
| | | private RegistrantPermissionsPanel repositoryPalette;
|
|---|
| | |
|
|---|
| | | private JPalette<TeamModel> teamsPalette;
|
|---|
| | |
|
|---|
| | | private Set<String> usernames;
|
|---|
| | |
|---|
| | | passwordField = new JPasswordField(anUser.password == null ? "" : anUser.password, 25);
|
|---|
| | | confirmPasswordField = new JPasswordField(anUser.password == null ? "" : anUser.password,
|
|---|
| | | 25);
|
|---|
| | | canAdminCheckbox = new JCheckBox(Translation.get("gb.canAdminDescription"), anUser.canAdmin);
|
|---|
| | | displayNameField = new JTextField(anUser.displayName == null ? "" : anUser.displayName, 25);
|
|---|
| | | emailAddressField = new JTextField(anUser.emailAddress == null ? "" : anUser.emailAddress, 25);
|
|---|
| | | canAdminCheckbox = new JCheckBox(Translation.get("gb.canAdminDescription"), anUser.canAdmin); |
|---|
| | | canForkCheckbox = new JCheckBox(Translation.get("gb.canForkDescription"), anUser.canFork);
|
|---|
| | | canCreateCheckbox = new JCheckBox(Translation.get("gb.canCreateDescription"), anUser.canCreate);
|
|---|
| | | notFederatedCheckbox = new JCheckBox(
|
|---|
| | | Translation.get("gb.excludeFromFederationDescription"),
|
|---|
| | | anUser.excludeFromFederation);
|
|---|
| | | |
|---|
| | | organizationalUnitField = new JTextField(anUser.organizationalUnit == null ? "" : anUser.organizationalUnit, 25);
|
|---|
| | | organizationField = new JTextField(anUser.organization == null ? "" : anUser.organization, 25);
|
|---|
| | | localityField = new JTextField(anUser.locality == null ? "" : anUser.locality, 25);
|
|---|
| | | stateProvinceField = new JTextField(anUser.stateProvince == null ? "" : anUser.stateProvince, 25);
|
|---|
| | | countryCodeField = new JTextField(anUser.countryCode == null ? "" : anUser.countryCode, 15);
|
|---|
| | | |
|---|
| | | // credentials are optionally controlled by 3rd-party authentication
|
|---|
| | | usernameField.setEnabled(settings.supportsCredentialChanges);
|
|---|
| | | passwordField.setEnabled(settings.supportsCredentialChanges);
|
|---|
| | | confirmPasswordField.setEnabled(settings.supportsCredentialChanges);
|
|---|
| | |
|
|---|
| | | displayNameField.setEnabled(settings.supportsDisplayNameChanges);
|
|---|
| | | emailAddressField.setEnabled(settings.supportsEmailAddressChanges);
|
|---|
| | | |
|---|
| | | organizationalUnitField.setEnabled(settings.supportsDisplayNameChanges);
|
|---|
| | | organizationField.setEnabled(settings.supportsDisplayNameChanges);
|
|---|
| | | localityField.setEnabled(settings.supportsDisplayNameChanges);
|
|---|
| | | stateProvinceField.setEnabled(settings.supportsDisplayNameChanges);
|
|---|
| | | countryCodeField.setEnabled(settings.supportsDisplayNameChanges);
|
|---|
| | |
|
|---|
| | | JPanel fieldsPanel = new JPanel(new GridLayout(0, 1));
|
|---|
| | | fieldsPanel.add(newFieldPanel(Translation.get("gb.username"), usernameField));
|
|---|
| | | fieldsPanel.add(newFieldPanel(Translation.get("gb.password"), passwordField));
|
|---|
| | | fieldsPanel.add(newFieldPanel(Translation.get("gb.confirmPassword"), confirmPasswordField));
|
|---|
| | | fieldsPanel.add(newFieldPanel(Translation.get("gb.displayName"), displayNameField));
|
|---|
| | | fieldsPanel.add(newFieldPanel(Translation.get("gb.emailAddress"), emailAddressField));
|
|---|
| | | fieldsPanel.add(newFieldPanel(Translation.get("gb.canAdmin"), canAdminCheckbox));
|
|---|
| | | fieldsPanel.add(newFieldPanel(Translation.get("gb.canFork"), canForkCheckbox));
|
|---|
| | | fieldsPanel.add(newFieldPanel(Translation.get("gb.canCreate"), canCreateCheckbox));
|
|---|
| | | fieldsPanel.add(newFieldPanel(Translation.get("gb.excludeFromFederation"),
|
|---|
| | | notFederatedCheckbox));
|
|---|
| | |
|
|---|
| | | final Insets _insets = new Insets(5, 5, 5, 5);
|
|---|
| | | repositoryPalette = new JPalette<String>();
|
|---|
| | | teamsPalette = new JPalette<TeamModel>();
|
|---|
| | | JPanel attributesPanel = new JPanel(new GridLayout(0, 1, 5, 2));
|
|---|
| | | attributesPanel.add(newFieldPanel(Translation.get("gb.organizationalUnit") + " (OU)", organizationalUnitField));
|
|---|
| | | attributesPanel.add(newFieldPanel(Translation.get("gb.organization") + " (O)", organizationField));
|
|---|
| | | attributesPanel.add(newFieldPanel(Translation.get("gb.locality") + " (L)", localityField));
|
|---|
| | | attributesPanel.add(newFieldPanel(Translation.get("gb.stateProvince") + " (ST)", stateProvinceField));
|
|---|
| | | attributesPanel.add(newFieldPanel(Translation.get("gb.countryCode") + " (C)", countryCodeField));
|
|---|
| | |
|
|---|
| | | final Insets _insets = new Insets(5, 5, 5, 5);
|
|---|
| | | repositoryPalette = new RegistrantPermissionsPanel(RegistrantType.REPOSITORY);
|
|---|
| | | teamsPalette = new JPalette<TeamModel>();
|
|---|
| | | teamsPalette.setEnabled(settings.supportsTeamMembershipChanges);
|
|---|
| | |
|
|---|
| | | JPanel fieldsPanelTop = new JPanel(new BorderLayout());
|
|---|
| | | fieldsPanelTop.add(fieldsPanel, BorderLayout.NORTH);
|
|---|
| | | |
|---|
| | |
|
|---|
| | | JPanel attributesPanelTop = new JPanel(new BorderLayout());
|
|---|
| | | attributesPanelTop.add(attributesPanel, BorderLayout.NORTH);
|
|---|
| | |
|
|---|
| | | JPanel repositoriesPanel = new JPanel(new BorderLayout()) {
|
|---|
| | |
|
|---|
| | | private static final long serialVersionUID = 1L;
|
|---|
| | |
|---|
| | |
|
|---|
| | | JTabbedPane panel = new JTabbedPane(JTabbedPane.TOP);
|
|---|
| | | panel.addTab(Translation.get("gb.general"), fieldsPanelTop);
|
|---|
| | | panel.addTab(Translation.get("gb.attributes"), attributesPanelTop);
|
|---|
| | | if (protocolVersion > 1) {
|
|---|
| | | panel.addTab(Translation.get("gb.teamMemberships"), teamsPanel);
|
|---|
| | | }
|
|---|
| | | panel.addTab(Translation.get("gb.restrictedRepositories"), repositoriesPanel);
|
|---|
| | |
|
|---|
| | |
|
|---|
| | | JButton createButton = new JButton(Translation.get("gb.save"));
|
|---|
| | | createButton.addActionListener(new ActionListener() {
|
|---|
| | |
|---|
| | | JPanel controls = new JPanel();
|
|---|
| | | controls.add(cancelButton);
|
|---|
| | | controls.add(createButton);
|
|---|
| | | |
|---|
| | |
|
|---|
| | | JPanel centerPanel = new JPanel(new BorderLayout(5, 5)) {
|
|---|
| | |
|
|---|
| | | private static final long serialVersionUID = 1L;
|
|---|
| | |
|---|
| | | }
|
|---|
| | |
|
|---|
| | | private boolean validateFields() {
|
|---|
| | | String uname = usernameField.getText();
|
|---|
| | | if (StringUtils.isEmpty(uname)) {
|
|---|
| | | if (StringUtils.isEmpty(usernameField.getText())) {
|
|---|
| | | error("Please enter a username!");
|
|---|
| | | return false;
|
|---|
| | | }
|
|---|
| | |
|
|---|
| | | String uname = usernameField.getText().toLowerCase();
|
|---|
| | | boolean rename = false;
|
|---|
| | | // verify username uniqueness on create
|
|---|
| | | if (isCreate) {
|
|---|
| | | if (usernames.contains(uname.toLowerCase())) {
|
|---|
| | | if (usernames.contains(uname)) {
|
|---|
| | | error(MessageFormat.format("Username ''{0}'' is unavailable.", uname));
|
|---|
| | | return false;
|
|---|
| | | }
|
|---|
| | |
|---|
| | | // check rename collision
|
|---|
| | | rename = !StringUtils.isEmpty(username) && !username.equalsIgnoreCase(uname);
|
|---|
| | | if (rename) {
|
|---|
| | | if (usernames.contains(uname.toLowerCase())) {
|
|---|
| | | if (usernames.contains(uname)) {
|
|---|
| | | error(MessageFormat.format(
|
|---|
| | | "Failed to rename ''{0}'' because ''{1}'' already exists.", username,
|
|---|
| | | uname));
|
|---|
| | |
|---|
| | | } else if (type.equalsIgnoreCase("combined-md5")) {
|
|---|
| | | // store MD5 digest of username+password
|
|---|
| | | user.password = StringUtils.COMBINED_MD5_TYPE
|
|---|
| | | + StringUtils.getMD5(username.toLowerCase() + password);
|
|---|
| | | + StringUtils.getMD5(user.username + password);
|
|---|
| | | } else {
|
|---|
| | | // plain-text password
|
|---|
| | | user.password = password;
|
|---|
| | |
|---|
| | | // no change in password
|
|---|
| | | user.password = password;
|
|---|
| | | }
|
|---|
| | | |
|---|
| | | user.displayName = displayNameField.getText().trim();
|
|---|
| | | user.emailAddress = emailAddressField.getText().trim();
|
|---|
| | |
|
|---|
| | | user.canAdmin = canAdminCheckbox.isSelected();
|
|---|
| | | user.canFork = canForkCheckbox.isSelected();
|
|---|
| | | user.canCreate = canCreateCheckbox.isSelected();
|
|---|
| | | user.excludeFromFederation = notFederatedCheckbox.isSelected();
|
|---|
| | |
|
|---|
| | | user.repositories.clear();
|
|---|
| | | user.repositories.addAll(repositoryPalette.getSelections());
|
|---|
| | | user.organizationalUnit = organizationalUnitField.getText().trim();
|
|---|
| | | user.organization = organizationField.getText().trim();
|
|---|
| | | user.locality = localityField.getText().trim();
|
|---|
| | | user.stateProvince = stateProvinceField.getText().trim();
|
|---|
| | | user.countryCode = countryCodeField.getText().trim();
|
|---|
| | |
|
|---|
| | | for (RegistrantAccessPermission rp : repositoryPalette.getPermissions()) {
|
|---|
| | | user.setRepositoryPermission(rp.registrant, rp.permission);
|
|---|
| | | }
|
|---|
| | |
|
|---|
| | | user.teams.clear();
|
|---|
| | | user.teams.addAll(teamsPalette.getSelections());
|
|---|
| | | return true;
|
|---|
| | |
|---|
| | | }
|
|---|
| | | }
|
|---|
| | |
|
|---|
| | | public void setRepositories(List<RepositoryModel> repositories, List<String> selected) {
|
|---|
| | | public void setRepositories(List<RepositoryModel> repositories, List<RegistrantAccessPermission> permissions) {
|
|---|
| | | Map<String, RepositoryModel> repoMap = new HashMap<String, RepositoryModel>();
|
|---|
| | | List<String> restricted = new ArrayList<String>();
|
|---|
| | | for (RepositoryModel repo : repositories) {
|
|---|
| | | if (repo.accessRestriction.exceeds(AccessRestrictionType.NONE)) {
|
|---|
| | | restricted.add(repo.name);
|
|---|
| | | // exclude Owner or personal repositories
|
|---|
| | | if (!repo.isOwner(username) && !repo.isUsersPersonalRepository(username)) {
|
|---|
| | | if (repo.accessRestriction.exceeds(AccessRestrictionType.NONE)
|
|---|
| | | && repo.authorizationControl.equals(AuthorizationControl.NAMED)) {
|
|---|
| | | restricted.add(repo.name);
|
|---|
| | | } |
|---|
| | | }
|
|---|
| | | repoMap.put(repo.name.toLowerCase(), repo);
|
|---|
| | | }
|
|---|
| | | StringUtils.sortRepositorynames(restricted);
|
|---|
| | | if (selected != null) {
|
|---|
| | | StringUtils.sortRepositorynames(selected);
|
|---|
| | | |
|---|
| | | List<String> list = new ArrayList<String>();
|
|---|
| | | // repositories
|
|---|
| | | list.add(".*");
|
|---|
| | | // all repositories excluding personal repositories
|
|---|
| | | list.add("[^~].*");
|
|---|
| | | String lastProject = null;
|
|---|
| | | for (String repo : restricted) {
|
|---|
| | | String projectPath = StringUtils.getFirstPathElement(repo).toLowerCase();
|
|---|
| | | if (lastProject == null || !lastProject.equalsIgnoreCase(projectPath)) {
|
|---|
| | | lastProject = projectPath;
|
|---|
| | | if (!StringUtils.isEmpty(projectPath)) {
|
|---|
| | | // regex for all repositories within a project
|
|---|
| | | list.add(projectPath + "/.*");
|
|---|
| | | }
|
|---|
| | | }
|
|---|
| | | list.add(repo);
|
|---|
| | | }
|
|---|
| | | repositoryPalette.setObjects(restricted, selected);
|
|---|
| | |
|
|---|
| | | // remove repositories for which user already has a permission
|
|---|
| | | if (permissions == null) {
|
|---|
| | | permissions = new ArrayList<RegistrantAccessPermission>();
|
|---|
| | | } else {
|
|---|
| | | for (RegistrantAccessPermission rp : permissions) {
|
|---|
| | | list.remove(rp.registrant.toLowerCase());
|
|---|
| | | }
|
|---|
| | | }
|
|---|
| | | |
|---|
| | | // update owner and missing permissions for editing
|
|---|
| | | for (RegistrantAccessPermission permission : permissions) {
|
|---|
| | | if (permission.mutable && PermissionType.EXPLICIT.equals(permission.permissionType)) {
|
|---|
| | | // Ensure this is NOT an owner permission - which is non-editable
|
|---|
| | | // We don't know this from within the usermodel, ownership is a
|
|---|
| | | // property of a repository.
|
|---|
| | | RepositoryModel rm = repoMap.get(permission.registrant.toLowerCase());
|
|---|
| | | if (rm == null) {
|
|---|
| | | permission.permissionType = PermissionType.MISSING;
|
|---|
| | | permission.mutable = false;
|
|---|
| | | continue;
|
|---|
| | | }
|
|---|
| | | boolean isOwner = rm.isOwner(username);
|
|---|
| | | if (isOwner) {
|
|---|
| | | permission.permissionType = PermissionType.OWNER;
|
|---|
| | | permission.mutable = false;
|
|---|
| | | }
|
|---|
| | | }
|
|---|
| | | }
|
|---|
| | |
|
|---|
| | | repositoryPalette.setObjects(list, permissions);
|
|---|
| | | }
|
|---|
| | | |
|---|
| | |
|
|---|
| | | public void setTeams(List<TeamModel> teams, List<TeamModel> selected) {
|
|---|
| | | Collections.sort(teams);
|
|---|
| | | if (selected != null) {
|
|---|
| | |
|---|
| | | }
|
|---|
| | | teamsPalette.setObjects(teams, selected);
|
|---|
| | | }
|
|---|
| | |
|
|---|
| | | |
|---|
| | | public UserModel getUser() {
|
|---|
| | | if (canceled) {
|
|---|
| | | return null;
|
|---|
