kallithea: rhodecode/model/repos

annotate rhodecode/model/repos_group.py @ 3348:6f82f8bdd22c

recursive mode of setting permission should skip private repositories, they should remain private, it's proper thing to do !

author	Marcin Kuzminski <marcin@python-works.com>
date	Fri, 25 Jan 2013 00:30:25 +0100
parents	abd49f6f5805
children	b4daef4cc26d 702da441f5c4

rev	line source
1345 3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	1 # -- coding: utf-8 --
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	2 """
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	3 rhodecode.model.user_group
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	4 ~~~~~~~~~~~~~~~~~~~~~~~~~~
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	5
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	6 users groups model for RhodeCode
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	7
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	8 :created_on: Jan 25, 2011
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	9 :author: marcink
1824 89efedac4e6c 2012 copyrights Marcin Kuzminski <marcin@python-works.com> parents: 1818 diff changeset	10 :copyright: (C) 2011-2012 Marcin Kuzminski <marcin@python-works.com>
1345 3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	11 :license: GPLv3, see COPYING for more details.
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	12 """
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	13 # This program is free software: you can redistribute it and/or modify
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	14 # it under the terms of the GNU General Public License as published by
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	15 # the Free Software Foundation, either version 3 of the License, or
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	16 # (at your option) any later version.
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	17 #
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	18 # This program is distributed in the hope that it will be useful,
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	19 # but WITHOUT ANY WARRANTY; without even the implied warranty of
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	20 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	21 # GNU General Public License for more details.
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	22 #
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	23 # You should have received a copy of the GNU General Public License
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	24 # along with this program. If not, see <http://www.gnu.org/licenses/>.
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	25
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	26 import os
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	27 import logging
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	28 import traceback
1347 43b8e161be3f #47 implemented basic edition of groups Marcin Kuzminski <marcin@python-works.com> parents: 1346 diff changeset	29 import shutil
2961 08f89c688592 deleting a group now does same archive operation like deleting repositories. Improve prompt that show number of repos that will Marcin Kuzminski <marcin@python-works.com> parents: 2820 diff changeset	30 import datetime
1345 3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	31
2109 8ecfed1d8f8b utils/conf Marcin Kuzminski <marcin@python-works.com> parents: 2059 diff changeset	32 from rhodecode.lib.utils2 import LazyProperty
1345 3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	33
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	34 from rhodecode.model import BaseModel
1982 87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	35 from rhodecode.model.db import RepoGroup, RhodeCodeUi, UserRepoGroupToPerm, \
2820 c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	36 User, Permission, UsersGroupRepoGroupToPerm, UsersGroup, Repository
1345 3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	37
1593 92a4f7c496a5 Correct code style Nicolas VINOT <aeris@imirhil.fr> parents: 1591 diff changeset	38 log = logging.getLogger(__name__)
1345 3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	39
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	40
1593 92a4f7c496a5 Correct code style Nicolas VINOT <aeris@imirhil.fr> parents: 1591 diff changeset	41 class ReposGroupModel(BaseModel):
1345 3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	42
2522 17893d61792a Added associated classes into child models Marcin Kuzminski <marcin@python-works.com> parents: 2467 diff changeset	43 cls = RepoGroup
17893d61792a Added associated classes into child models Marcin Kuzminski <marcin@python-works.com> parents: 2467 diff changeset	44
1982 87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	45 def __get_users_group(self, users_group):
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	46 return self._get_instance(UsersGroup, users_group,
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	47 callback=UsersGroup.get_by_group_name)
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	48
2631 f597cfb492f9 Added quick links for editing permissions for users from permission overview Marcin Kuzminski <marcin@python-works.com> parents: 2529 diff changeset	49 def _get_repos_group(self, repos_group):
1982 87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	50 return self._get_instance(RepoGroup, repos_group,
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	51 callback=RepoGroup.get_by_group_name)
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	52
1345 3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	53 @LazyProperty
1593 92a4f7c496a5 Correct code style Nicolas VINOT <aeris@imirhil.fr> parents: 1591 diff changeset	54 def repos_path(self):
1345 3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	55 """
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	56 Get's the repositories root path from database
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	57 """
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	58
2708 9bce679a3f49 Added form for controlling mercurial extensions Marcin Kuzminski <marcin@python-works.com> parents: 2631 diff changeset	59 q = RhodeCodeUi.get_by_key('/')
1345 3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	60 return q.ui_value
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	61
1982 87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	62 def _create_default_perms(self, new_group):
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	63 # create default permission
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	64 repo_group_to_perm = UserRepoGroupToPerm()
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	65 default_perm = 'group.read'
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	66 for p in User.get_by_username('default').user_perms:
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	67 if p.permission.permission_name.startswith('group.'):
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	68 default_perm = p.permission.permission_name
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	69 break
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	70
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	71 repo_group_to_perm.permission_id = self.sa.query(Permission)\
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	72 .filter(Permission.permission_name == default_perm)\
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	73 .one().permission_id
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	74
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	75 repo_group_to_perm.group = new_group
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	76 repo_group_to_perm.user_id = User.get_by_username('default').user_id
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	77
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	78 self.sa.add(repo_group_to_perm)
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	79
1594 9dae92a65e40 fixes #288 Marcin Kuzminski <marcin@python-works.com> parents: 1593 diff changeset	80 def __create_group(self, group_name):
1345 3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	81 """
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	82 makes repositories group on filesystem
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	83
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	84 :param repo_name:
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	85 :param parent_id:
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	86 """
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	87
1594 9dae92a65e40 fixes #288 Marcin Kuzminski <marcin@python-works.com> parents: 1593 diff changeset	88 create_path = os.path.join(self.repos_path, group_name)
1976 a76e9bacbedc garden Marcin Kuzminski <marcin@python-works.com> parents: 1824 diff changeset	89 log.debug('creating new group in %s' % create_path)
1345 3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	90
1593 92a4f7c496a5 Correct code style Nicolas VINOT <aeris@imirhil.fr> parents: 1591 diff changeset	91 if os.path.isdir(create_path):
92a4f7c496a5 Correct code style Nicolas VINOT <aeris@imirhil.fr> parents: 1591 diff changeset	92 raise Exception('That directory already exists !')
1345 3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	93
1593 92a4f7c496a5 Correct code style Nicolas VINOT <aeris@imirhil.fr> parents: 1591 diff changeset	94 os.makedirs(create_path)
1345 3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	95
1594 9dae92a65e40 fixes #288 Marcin Kuzminski <marcin@python-works.com> parents: 1593 diff changeset	96 def __rename_group(self, old, new):
1345 3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	97 """
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	98 Renames a group on filesystem
1818 cf51bbfb120e auto white-space removal Marcin Kuzminski <marcin@python-works.com> parents: 1734 diff changeset	99
1345 3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	100 :param group_name:
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	101 """
1594 9dae92a65e40 fixes #288 Marcin Kuzminski <marcin@python-works.com> parents: 1593 diff changeset	102
9dae92a65e40 fixes #288 Marcin Kuzminski <marcin@python-works.com> parents: 1593 diff changeset	103 if old == new:
9dae92a65e40 fixes #288 Marcin Kuzminski <marcin@python-works.com> parents: 1593 diff changeset	104 log.debug('skipping group rename')
9dae92a65e40 fixes #288 Marcin Kuzminski <marcin@python-works.com> parents: 1593 diff changeset	105 return
9dae92a65e40 fixes #288 Marcin Kuzminski <marcin@python-works.com> parents: 1593 diff changeset	106
1976 a76e9bacbedc garden Marcin Kuzminski <marcin@python-works.com> parents: 1824 diff changeset	107 log.debug('renaming repos group from %s to %s' % (old, new))
1347 43b8e161be3f #47 implemented basic edition of groups Marcin Kuzminski <marcin@python-works.com> parents: 1346 diff changeset	108
1594 9dae92a65e40 fixes #288 Marcin Kuzminski <marcin@python-works.com> parents: 1593 diff changeset	109 old_path = os.path.join(self.repos_path, old)
9dae92a65e40 fixes #288 Marcin Kuzminski <marcin@python-works.com> parents: 1593 diff changeset	110 new_path = os.path.join(self.repos_path, new)
1349 526120c77a38 #47 added editing of groups, and moving them between. Added check constraint for groups Marcin Kuzminski <marcin@python-works.com> parents: 1347 diff changeset	111
1976 a76e9bacbedc garden Marcin Kuzminski <marcin@python-works.com> parents: 1824 diff changeset	112 log.debug('renaming repos paths from %s to %s' % (old_path, new_path))
1349 526120c77a38 #47 added editing of groups, and moving them between. Added check constraint for groups Marcin Kuzminski <marcin@python-works.com> parents: 1347 diff changeset	113
1593 92a4f7c496a5 Correct code style Nicolas VINOT <aeris@imirhil.fr> parents: 1591 diff changeset	114 if os.path.isdir(new_path):
92a4f7c496a5 Correct code style Nicolas VINOT <aeris@imirhil.fr> parents: 1591 diff changeset	115 raise Exception('Was trying to rename to already '
92a4f7c496a5 Correct code style Nicolas VINOT <aeris@imirhil.fr> parents: 1591 diff changeset	116 'existing dir %s' % new_path)
92a4f7c496a5 Correct code style Nicolas VINOT <aeris@imirhil.fr> parents: 1591 diff changeset	117 shutil.move(old_path, new_path)
1345 3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	118
2820 c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	119 def __delete_group(self, group, force_delete=False):
1345 3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	120 """
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	121 Deletes a group from a filesystem
1818 cf51bbfb120e auto white-space removal Marcin Kuzminski <marcin@python-works.com> parents: 1734 diff changeset	122
1346 cf78d302d441 #47 implemented deleting of empty groups. Fixed problem with full paths on nested groups Marcin Kuzminski <marcin@python-works.com> parents: 1345 diff changeset	123 :param group: instance of group from database
2820 c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	124 :param force_delete: use shutil rmtree to remove all objects
1345 3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	125 """
1633 2c0d35e336b5 refactoring of models names for repoGroup permissions Marcin Kuzminski <marcin@python-works.com> parents: 1594 diff changeset	126 paths = group.full_path.split(RepoGroup.url_sep())
1593 92a4f7c496a5 Correct code style Nicolas VINOT <aeris@imirhil.fr> parents: 1591 diff changeset	127 paths = os.sep.join(paths)
1346 cf78d302d441 #47 implemented deleting of empty groups. Fixed problem with full paths on nested groups Marcin Kuzminski <marcin@python-works.com> parents: 1345 diff changeset	128
1593 92a4f7c496a5 Correct code style Nicolas VINOT <aeris@imirhil.fr> parents: 1591 diff changeset	129 rm_path = os.path.join(self.repos_path, paths)
2961 08f89c688592 deleting a group now does same archive operation like deleting repositories. Improve prompt that show number of repos that will Marcin Kuzminski <marcin@python-works.com> parents: 2820 diff changeset	130 log.info("Removing group %s" % (rm_path))
08f89c688592 deleting a group now does same archive operation like deleting repositories. Improve prompt that show number of repos that will Marcin Kuzminski <marcin@python-works.com> parents: 2820 diff changeset	131 # delete only if that path really exists
1594 9dae92a65e40 fixes #288 Marcin Kuzminski <marcin@python-works.com> parents: 1593 diff changeset	132 if os.path.isdir(rm_path):
2820 c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	133 if force_delete:
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	134 shutil.rmtree(rm_path)
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	135 else:
2961 08f89c688592 deleting a group now does same archive operation like deleting repositories. Improve prompt that show number of repos that will Marcin Kuzminski <marcin@python-works.com> parents: 2820 diff changeset	136 #archive that group`
08f89c688592 deleting a group now does same archive operation like deleting repositories. Improve prompt that show number of repos that will Marcin Kuzminski <marcin@python-works.com> parents: 2820 diff changeset	137 _now = datetime.datetime.now()
08f89c688592 deleting a group now does same archive operation like deleting repositories. Improve prompt that show number of repos that will Marcin Kuzminski <marcin@python-works.com> parents: 2820 diff changeset	138 _ms = str(_now.microsecond).rjust(6, '0')
08f89c688592 deleting a group now does same archive operation like deleting repositories. Improve prompt that show number of repos that will Marcin Kuzminski <marcin@python-works.com> parents: 2820 diff changeset	139 _d = 'rm__%s_GROUP_%s' % (_now.strftime('%Y%m%d_%H%M%S_' + _ms),
08f89c688592 deleting a group now does same archive operation like deleting repositories. Improve prompt that show number of repos that will Marcin Kuzminski <marcin@python-works.com> parents: 2820 diff changeset	140 group.name)
08f89c688592 deleting a group now does same archive operation like deleting repositories. Improve prompt that show number of repos that will Marcin Kuzminski <marcin@python-works.com> parents: 2820 diff changeset	141 shutil.move(rm_path, os.path.join(self.repos_path, _d))
1345 3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	142
2529 40b3a54391f9 Added functional test create repo with a group Marcin Kuzminski <marcin@python-works.com> parents: 2522 diff changeset	143 def create(self, group_name, group_description, parent=None, just_db=False):
1345 3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	144 try:
1633 2c0d35e336b5 refactoring of models names for repoGroup permissions Marcin Kuzminski <marcin@python-works.com> parents: 1594 diff changeset	145 new_repos_group = RepoGroup()
1982 87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	146 new_repos_group.group_description = group_description
2631 f597cfb492f9 Added quick links for editing permissions for users from permission overview Marcin Kuzminski <marcin@python-works.com> parents: 2529 diff changeset	147 new_repos_group.parent_group = self._get_repos_group(parent)
1982 87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	148 new_repos_group.group_name = new_repos_group.get_new_name(group_name)
1345 3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	149
1593 92a4f7c496a5 Correct code style Nicolas VINOT <aeris@imirhil.fr> parents: 1591 diff changeset	150 self.sa.add(new_repos_group)
1982 87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	151 self._create_default_perms(new_repos_group)
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	152
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	153 if not just_db:
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	154 # we need to flush here, in order to check if database won't
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	155 # throw any exceptions, create filesystem dirs at the very end
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	156 self.sa.flush()
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	157 self.__create_group(new_repos_group.group_name)
1345 3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	158
1589 307ec693bdf2 [API] Create groups needed when creating repo Nicolas VINOT <aeris@imirhil.fr> parents: 1349 diff changeset	159 return new_repos_group
1345 3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	160 except:
1593 92a4f7c496a5 Correct code style Nicolas VINOT <aeris@imirhil.fr> parents: 1591 diff changeset	161 log.error(traceback.format_exc())
1345 3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	162 raise
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	163
2820 c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	164 def _update_permissions(self, repos_group, perms_new=None,
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	165 perms_updates=None, recursive=False):
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	166 from rhodecode.model.repo import RepoModel
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	167 if not perms_new:
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	168 perms_new = []
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	169 if not perms_updates:
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	170 perms_updates = []
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	171
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	172 def _set_perm_user(obj, user, perm):
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	173 if isinstance(obj, RepoGroup):
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	174 ReposGroupModel().grant_user_permission(
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	175 repos_group=obj, user=user, perm=perm
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	176 )
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	177 elif isinstance(obj, Repository):
3348 6f82f8bdd22c recursive mode of setting permission should skip private repositories, they should remain private, it's proper thing to do ! Marcin Kuzminski <marcin@python-works.com> parents: 3166 diff changeset	178 #we do this ONLY IF repository is non-private
6f82f8bdd22c recursive mode of setting permission should skip private repositories, they should remain private, it's proper thing to do ! Marcin Kuzminski <marcin@python-works.com> parents: 3166 diff changeset	179 if obj.private:
6f82f8bdd22c recursive mode of setting permission should skip private repositories, they should remain private, it's proper thing to do ! Marcin Kuzminski <marcin@python-works.com> parents: 3166 diff changeset	180 return
6f82f8bdd22c recursive mode of setting permission should skip private repositories, they should remain private, it's proper thing to do ! Marcin Kuzminski <marcin@python-works.com> parents: 3166 diff changeset	181
2820 c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	182 # we set group permission but we have to switch to repo
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	183 # permission
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	184 perm = perm.replace('group.', 'repository.')
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	185 RepoModel().grant_user_permission(
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	186 repo=obj, user=user, perm=perm
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	187 )
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	188
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	189 def _set_perm_group(obj, users_group, perm):
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	190 if isinstance(obj, RepoGroup):
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	191 ReposGroupModel().grant_users_group_permission(
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	192 repos_group=obj, group_name=users_group, perm=perm
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	193 )
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	194 elif isinstance(obj, Repository):
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	195 # we set group permission but we have to switch to repo
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	196 # permission
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	197 perm = perm.replace('group.', 'repository.')
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	198 RepoModel().grant_users_group_permission(
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	199 repo=obj, group_name=users_group, perm=perm
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	200 )
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	201 updates = []
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	202 log.debug('Now updating permissions for %s in recursive mode:%s'
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	203 % (repos_group, recursive))
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	204
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	205 for obj in repos_group.recursive_groups_and_repos():
3348 6f82f8bdd22c recursive mode of setting permission should skip private repositories, they should remain private, it's proper thing to do ! Marcin Kuzminski <marcin@python-works.com> parents: 3166 diff changeset	206 #obj is an instance of a group or repositories in that group
2820 c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	207 if not recursive:
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	208 obj = repos_group
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	209
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	210 # update permissions
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	211 for member, perm, member_type in perms_updates:
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	212 ## set for user
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	213 if member_type == 'user':
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	214 # this updates also current one if found
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	215 _set_perm_user(obj, user=member, perm=perm)
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	216 ## set for users group
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	217 else:
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	218 _set_perm_group(obj, users_group=member, perm=perm)
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	219 # set new permissions
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	220 for member, perm, member_type in perms_new:
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	221 if member_type == 'user':
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	222 _set_perm_user(obj, user=member, perm=perm)
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	223 else:
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	224 _set_perm_group(obj, users_group=member, perm=perm)
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	225 updates.append(obj)
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	226 #if it's not recursive call
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	227 # break the loop and don't proceed with other changes
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	228 if not recursive:
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	229 break
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	230 return updates
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	231
1593 92a4f7c496a5 Correct code style Nicolas VINOT <aeris@imirhil.fr> parents: 1591 diff changeset	232 def update(self, repos_group_id, form_data):
1345 3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	233
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	234 try:
1633 2c0d35e336b5 refactoring of models names for repoGroup permissions Marcin Kuzminski <marcin@python-works.com> parents: 1594 diff changeset	235 repos_group = RepoGroup.get(repos_group_id)
2820 c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	236 recursive = form_data['recursive']
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	237 # iterate over all members(if in recursive mode) of this groups and
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	238 # set the permissions !
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	239 # this can be potentially heavy operation
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	240 self._update_permissions(repos_group, form_data['perms_new'],
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	241 form_data['perms_updates'], recursive)
1982 87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	242
1594 9dae92a65e40 fixes #288 Marcin Kuzminski <marcin@python-works.com> parents: 1593 diff changeset	243 old_path = repos_group.full_path
1734 48d4fcf04a29 another major refactoring with session management Marcin Kuzminski <marcin@python-works.com> parents: 1633 diff changeset	244
1594 9dae92a65e40 fixes #288 Marcin Kuzminski <marcin@python-works.com> parents: 1593 diff changeset	245 # change properties
9dae92a65e40 fixes #288 Marcin Kuzminski <marcin@python-works.com> parents: 1593 diff changeset	246 repos_group.group_description = form_data['group_description']
1633 2c0d35e336b5 refactoring of models names for repoGroup permissions Marcin Kuzminski <marcin@python-works.com> parents: 1594 diff changeset	247 repos_group.parent_group = RepoGroup.get(form_data['group_parent_id'])
2059 d7f1fe9cb146 fixes issue #366 setting null on parent_group didn't propagate to actually db field. Marcin Kuzminski <marcin@python-works.com> parents: 1982 diff changeset	248 repos_group.group_parent_id = form_data['group_parent_id']
2749 3ed4dae499d0 Recursive set locking on all children of a group. Marcin Kuzminski <marcin@python-works.com> parents: 2708 diff changeset	249 repos_group.enable_locking = form_data['enable_locking']
1594 9dae92a65e40 fixes #288 Marcin Kuzminski <marcin@python-works.com> parents: 1593 diff changeset	250 repos_group.group_name = repos_group.get_new_name(form_data['group_name'])
9dae92a65e40 fixes #288 Marcin Kuzminski <marcin@python-works.com> parents: 1593 diff changeset	251 new_path = repos_group.full_path
1345 3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	252
1593 92a4f7c496a5 Correct code style Nicolas VINOT <aeris@imirhil.fr> parents: 1591 diff changeset	253 self.sa.add(repos_group)
1347 43b8e161be3f #47 implemented basic edition of groups Marcin Kuzminski <marcin@python-works.com> parents: 1346 diff changeset	254
2749 3ed4dae499d0 Recursive set locking on all children of a group. Marcin Kuzminski <marcin@python-works.com> parents: 2708 diff changeset	255 # iterate over all members of this groups and set the locking !
3ed4dae499d0 Recursive set locking on all children of a group. Marcin Kuzminski <marcin@python-works.com> parents: 2708 diff changeset	256 # this can be potentially heavy operation
3ed4dae499d0 Recursive set locking on all children of a group. Marcin Kuzminski <marcin@python-works.com> parents: 2708 diff changeset	257 for obj in repos_group.recursive_groups_and_repos():
3ed4dae499d0 Recursive set locking on all children of a group. Marcin Kuzminski <marcin@python-works.com> parents: 2708 diff changeset	258 #set the value from it's parent
3ed4dae499d0 Recursive set locking on all children of a group. Marcin Kuzminski <marcin@python-works.com> parents: 2708 diff changeset	259 obj.enable_locking = repos_group.enable_locking
3ed4dae499d0 Recursive set locking on all children of a group. Marcin Kuzminski <marcin@python-works.com> parents: 2708 diff changeset	260 self.sa.add(obj)
3ed4dae499d0 Recursive set locking on all children of a group. Marcin Kuzminski <marcin@python-works.com> parents: 2708 diff changeset	261
1818 cf51bbfb120e auto white-space removal Marcin Kuzminski <marcin@python-works.com> parents: 1734 diff changeset	262 # we need to get all repositories from this new group and
1594 9dae92a65e40 fixes #288 Marcin Kuzminski <marcin@python-works.com> parents: 1593 diff changeset	263 # rename them accordingly to new group path
9dae92a65e40 fixes #288 Marcin Kuzminski <marcin@python-works.com> parents: 1593 diff changeset	264 for r in repos_group.repositories:
9dae92a65e40 fixes #288 Marcin Kuzminski <marcin@python-works.com> parents: 1593 diff changeset	265 r.repo_name = r.get_new_name(r.just_name)
9dae92a65e40 fixes #288 Marcin Kuzminski <marcin@python-works.com> parents: 1593 diff changeset	266 self.sa.add(r)
1347 43b8e161be3f #47 implemented basic edition of groups Marcin Kuzminski <marcin@python-works.com> parents: 1346 diff changeset	267
2059 d7f1fe9cb146 fixes issue #366 setting null on parent_group didn't propagate to actually db field. Marcin Kuzminski <marcin@python-works.com> parents: 1982 diff changeset	268 self.__rename_group(old_path, new_path)
d7f1fe9cb146 fixes issue #366 setting null on parent_group didn't propagate to actually db field. Marcin Kuzminski <marcin@python-works.com> parents: 1982 diff changeset	269
1594 9dae92a65e40 fixes #288 Marcin Kuzminski <marcin@python-works.com> parents: 1593 diff changeset	270 return repos_group
1345 3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	271 except:
1593 92a4f7c496a5 Correct code style Nicolas VINOT <aeris@imirhil.fr> parents: 1591 diff changeset	272 log.error(traceback.format_exc())
1345 3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	273 raise
3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	274
2820 c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	275 def delete(self, repos_group, force_delete=False):
2631 f597cfb492f9 Added quick links for editing permissions for users from permission overview Marcin Kuzminski <marcin@python-works.com> parents: 2529 diff changeset	276 repos_group = self._get_repos_group(repos_group)
1345 3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	277 try:
2467 4419551b2915 Switched forms to new validators Marcin Kuzminski <marcin@python-works.com> parents: 2432 diff changeset	278 self.sa.delete(repos_group)
2820 c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	279 self.__delete_group(repos_group, force_delete)
1345 3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	280 except:
3166 abd49f6f5805 remove log.exception call Marcin Kuzminski <marcin@python-works.com> parents: 2961 diff changeset	281 log.error('Error removing repos_group %s' % repos_group)
1345 3bce31f026b8 #47 implemented Adding of new repo_groups+forms+validators. Fixed sorting of repo groups by main names in multiple locations. Removed some unneeded calls to self.sa for exchange to .query() methods. Marcin Kuzminski <marcin@python-works.com> parents: diff changeset	282 raise
1982 87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	283
2820 c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	284 def delete_permission(self, repos_group, obj, obj_type, recursive):
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	285 """
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	286 Revokes permission for repos_group for given obj(user or users_group),
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	287 obj_type can be user or users group
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	288
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	289 :param repos_group:
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	290 :param obj: user or users group id
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	291 :param obj_type: user or users group type
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	292 :param recursive: recurse to all children of group
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	293 """
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	294 from rhodecode.model.repo import RepoModel
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	295 repos_group = self._get_repos_group(repos_group)
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	296
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	297 for el in repos_group.recursive_groups_and_repos():
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	298 if not recursive:
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	299 # if we don't recurse set the permission on only the top level
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	300 # object
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	301 el = repos_group
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	302
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	303 if isinstance(el, RepoGroup):
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	304 if obj_type == 'user':
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	305 ReposGroupModel().revoke_user_permission(el, user=obj)
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	306 elif obj_type == 'users_group':
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	307 ReposGroupModel().revoke_users_group_permission(el, group_name=obj)
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	308 else:
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	309 raise Exception('undefined object type %s' % obj_type)
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	310 elif isinstance(el, Repository):
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	311 if obj_type == 'user':
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	312 RepoModel().revoke_user_permission(el, user=obj)
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	313 elif obj_type == 'users_group':
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	314 RepoModel().revoke_users_group_permission(el, group_name=obj)
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	315 else:
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	316 raise Exception('undefined object type %s' % obj_type)
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	317
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	318 #if it's not recursive call
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	319 # break the loop and don't proceed with other changes
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	320 if not recursive:
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	321 break
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	322
1982 87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	323 def grant_user_permission(self, repos_group, user, perm):
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	324 """
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	325 Grant permission for user on given repositories group, or update
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	326 existing one if found
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	327
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	328 :param repos_group: Instance of ReposGroup, repositories_group_id,
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	329 or repositories_group name
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	330 :param user: Instance of User, user_id or username
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	331 :param perm: Instance of Permission, or permission_name
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	332 """
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	333
2631 f597cfb492f9 Added quick links for editing permissions for users from permission overview Marcin Kuzminski <marcin@python-works.com> parents: 2529 diff changeset	334 repos_group = self._get_repos_group(repos_group)
2432 d3ac7491a5c8 Share common getter functions in base model, and remove duplicated functions from other models Marcin Kuzminski <marcin@python-works.com> parents: 2109 diff changeset	335 user = self._get_user(user)
d3ac7491a5c8 Share common getter functions in base model, and remove duplicated functions from other models Marcin Kuzminski <marcin@python-works.com> parents: 2109 diff changeset	336 permission = self._get_perm(perm)
1982 87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	337
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	338 # check if we have that permission already
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	339 obj = self.sa.query(UserRepoGroupToPerm)\
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	340 .filter(UserRepoGroupToPerm.user == user)\
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	341 .filter(UserRepoGroupToPerm.group == repos_group)\
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	342 .scalar()
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	343 if obj is None:
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	344 # create new !
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	345 obj = UserRepoGroupToPerm()
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	346 obj.group = repos_group
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	347 obj.user = user
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	348 obj.permission = permission
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	349 self.sa.add(obj)
2820 c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	350 log.debug('Granted perm %s to %s on %s' % (perm, user, repos_group))
1982 87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	351
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	352 def revoke_user_permission(self, repos_group, user):
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	353 """
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	354 Revoke permission for user on given repositories group
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	355
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	356 :param repos_group: Instance of ReposGroup, repositories_group_id,
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	357 or repositories_group name
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	358 :param user: Instance of User, user_id or username
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	359 """
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	360
2631 f597cfb492f9 Added quick links for editing permissions for users from permission overview Marcin Kuzminski <marcin@python-works.com> parents: 2529 diff changeset	361 repos_group = self._get_repos_group(repos_group)
2432 d3ac7491a5c8 Share common getter functions in base model, and remove duplicated functions from other models Marcin Kuzminski <marcin@python-works.com> parents: 2109 diff changeset	362 user = self._get_user(user)
1982 87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	363
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	364 obj = self.sa.query(UserRepoGroupToPerm)\
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	365 .filter(UserRepoGroupToPerm.user == user)\
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	366 .filter(UserRepoGroupToPerm.group == repos_group)\
2820 c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	367 .scalar()
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	368 if obj:
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	369 self.sa.delete(obj)
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	370 log.debug('Revoked perm on %s on %s' % (repos_group, user))
1982 87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	371
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	372 def grant_users_group_permission(self, repos_group, group_name, perm):
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	373 """
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	374 Grant permission for users group on given repositories group, or update
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	375 existing one if found
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	376
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	377 :param repos_group: Instance of ReposGroup, repositories_group_id,
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	378 or repositories_group name
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	379 :param group_name: Instance of UserGroup, users_group_id,
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	380 or users group name
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	381 :param perm: Instance of Permission, or permission_name
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	382 """
2631 f597cfb492f9 Added quick links for editing permissions for users from permission overview Marcin Kuzminski <marcin@python-works.com> parents: 2529 diff changeset	383 repos_group = self._get_repos_group(repos_group)
1982 87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	384 group_name = self.__get_users_group(group_name)
2432 d3ac7491a5c8 Share common getter functions in base model, and remove duplicated functions from other models Marcin Kuzminski <marcin@python-works.com> parents: 2109 diff changeset	385 permission = self._get_perm(perm)
1982 87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	386
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	387 # check if we have that permission already
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	388 obj = self.sa.query(UsersGroupRepoGroupToPerm)\
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	389 .filter(UsersGroupRepoGroupToPerm.group == repos_group)\
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	390 .filter(UsersGroupRepoGroupToPerm.users_group == group_name)\
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	391 .scalar()
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	392
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	393 if obj is None:
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	394 # create new
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	395 obj = UsersGroupRepoGroupToPerm()
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	396
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	397 obj.group = repos_group
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	398 obj.users_group = group_name
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	399 obj.permission = permission
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	400 self.sa.add(obj)
2820 c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	401 log.debug('Granted perm %s to %s on %s' % (perm, group_name, repos_group))
1982 87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	402
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	403 def revoke_users_group_permission(self, repos_group, group_name):
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	404 """
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	405 Revoke permission for users group on given repositories group
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	406
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	407 :param repos_group: Instance of ReposGroup, repositories_group_id,
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	408 or repositories_group name
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	409 :param group_name: Instance of UserGroup, users_group_id,
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	410 or users group name
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	411 """
2631 f597cfb492f9 Added quick links for editing permissions for users from permission overview Marcin Kuzminski <marcin@python-works.com> parents: 2529 diff changeset	412 repos_group = self._get_repos_group(repos_group)
1982 87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	413 group_name = self.__get_users_group(group_name)
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	414
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	415 obj = self.sa.query(UsersGroupRepoGroupToPerm)\
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	416 .filter(UsersGroupRepoGroupToPerm.group == repos_group)\
87f0800abc7b #227 Initial version of repository groups permissions system Marcin Kuzminski <marcin@python-works.com> parents: 1976 diff changeset	417 .filter(UsersGroupRepoGroupToPerm.users_group == group_name)\
2820 c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	418 .scalar()
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	419 if obj:
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	420 self.sa.delete(obj)
c0cc8f8a71b0 Permissions on group can be set in recursive mode setting defined permission to all children Marcin Kuzminski <marcin@python-works.com> parents: 2749 diff changeset	421 log.debug('Revoked perm to %s on %s' % (repos_group, group_name))

Mercurial > kallithea

annotate rhodecode/model/repos_group.py @ 3348:6f82f8bdd22c