| | |
| | |
|
| | | import java.io.Serializable;
|
| | | import java.security.Principal;
|
| | | import java.util.ArrayList;
|
| | | import java.util.Collections;
|
| | | import java.util.HashMap;
|
| | | import java.util.HashSet;
|
| | | import java.util.List;
|
| | | import java.util.Map;
|
| | | import java.util.Set;
|
| | |
|
| | | import com.gitblit.Constants.AccessPermission;
|
| | | import com.gitblit.Constants.AccessRestrictionType;
|
| | | import com.gitblit.Constants.AuthorizationControl;
|
| | | import com.gitblit.Constants.RegistrantType;
|
| | | import com.gitblit.Constants.Unused;
|
| | | import com.gitblit.utils.ArrayUtils;
|
| | | import com.gitblit.utils.StringUtils;
|
| | |
| | | }
|
| | |
|
| | | /**
|
| | | * Returns a list of repository permissions for this user exclusive of
|
| | | * permissions inherited from team memberships.
|
| | | * |
| | | * @return the user's list of permissions
|
| | | */
|
| | | public List<RegistrantAccessPermission> getRepositoryPermissions() {
|
| | | List<RegistrantAccessPermission> list = new ArrayList<RegistrantAccessPermission>();
|
| | | for (Map.Entry<String, AccessPermission> entry : permissions.entrySet()) {
|
| | | list.add(new RegistrantAccessPermission(entry.getKey(), entry.getValue(), RegistrantType.REPOSITORY));
|
| | | }
|
| | | Collections.sort(list);
|
| | | return list;
|
| | | }
|
| | | |
| | | /**
|
| | | * Returns true if the user has any type of specified access permission for
|
| | | * this repository.
|
| | | *
|
| | |
| | | // and the permissions of teams of which the user belongs
|
| | | AccessPermission permission = AccessPermission.NONE;
|
| | | if (permissions.containsKey(repository.name.toLowerCase())) {
|
| | | // exact repository permission specified
|
| | | // exact repository permission specified, use it
|
| | | AccessPermission p = permissions.get(repository.name.toLowerCase());
|
| | | if (p != null) {
|
| | | permission = p;
|
| | | return p;
|
| | | }
|
| | | } else {
|
| | | // search for regex permission match
|
| | |
| | | return permission;
|
| | | }
|
| | |
|
| | | private boolean canAccess(RepositoryModel repository, AccessRestrictionType ifRestriction, AccessPermission requirePermission) {
|
| | | protected boolean canAccess(RepositoryModel repository, AccessRestrictionType ifRestriction, AccessPermission requirePermission) {
|
| | | if (repository.accessRestriction.atLeast(ifRestriction)) {
|
| | | AccessPermission permission = getRepositoryPermission(repository);
|
| | | return permission.atLeast(requirePermission);
|
| | |
| | | }
|
| | | return false;
|
| | | }
|
| | | |
| | | /**
|
| | | * Returns true if the user is allowed to create the specified repository.
|
| | | * |
| | | * @param repository
|
| | | * @return true if the user can create the repository
|
| | | */
|
| | | public boolean canCreate(String repository) {
|
| | | if (canAdmin()) {
|
| | | // admins can create any repository
|
| | | return true;
|
| | | }
|
| | | if (canCreate) {
|
| | | String projectPath = StringUtils.getFirstPathElement(repository);
|
| | | if (!StringUtils.isEmpty(projectPath) && projectPath.equalsIgnoreCase("~" + username)) {
|
| | | // personal repository
|
| | | return true;
|
| | | }
|
| | | }
|
| | | return false;
|
| | | }
|
| | |
|
| | | public boolean isTeamMember(String teamname) {
|
| | | for (TeamModel team : teams) {
|
| | |
| | | }
|
| | | return nameVerified && emailVerified;
|
| | | }
|
| | | |
| | | public boolean hasBranchPermission(String repositoryName, String branch) {
|
| | | // Default UserModel doesn't implement branch-level security. Other Realms (i.e. Gerrit) may override this method.
|
| | | return hasRepositoryPermission(repositoryName);
|
| | | }
|
| | | }
|