ff233c19c4
- When someone gets blocked, remove all pending repository transfers from the blocked user to the doer. - Do not allow to start transferring repositories to the doer as blocked user. - Added unit testing. - Added integration testing. (cherry picked from commit8a3caac330) (cherry picked from commita92b4cfeb6) (cherry picked from commitacaaaf07d9) (cherry picked from commit735818863c) (cherry picked from commitf50fa43b32) (cherry picked from commite166836433) (cherry picked from commit82a0e4a381)
95 lines
2.5 KiB
Go
95 lines
2.5 KiB
Go
// Copyright 2023 The Forgejo Authors. All rights reserved.
|
|
// SPDX-License-Identifier: MIT
|
|
package user
|
|
|
|
import (
|
|
"context"
|
|
|
|
model "code.gitea.io/gitea/models"
|
|
"code.gitea.io/gitea/models/db"
|
|
repo_model "code.gitea.io/gitea/models/repo"
|
|
user_model "code.gitea.io/gitea/models/user"
|
|
|
|
"xorm.io/builder"
|
|
)
|
|
|
|
// BlockUser adds a blocked user entry for userID to block blockID.
|
|
// TODO: Figure out if instance admins should be immune to blocking.
|
|
// TODO: Add more mechanism like removing blocked user as collaborator on
|
|
// repositories where the user is an owner.
|
|
func BlockUser(ctx context.Context, userID, blockID int64) error {
|
|
if userID == blockID || user_model.IsBlocked(ctx, userID, blockID) {
|
|
return nil
|
|
}
|
|
|
|
ctx, committer, err := db.TxContext(ctx)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
defer committer.Close()
|
|
|
|
// Add the blocked user entry.
|
|
_, err = db.GetEngine(ctx).Insert(&user_model.BlockedUser{UserID: userID, BlockID: blockID})
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
// Unfollow the user from the block's perspective.
|
|
err = user_model.UnfollowUser(ctx, blockID, userID)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
// Unfollow the user from the doer's perspective.
|
|
err = user_model.UnfollowUser(ctx, userID, blockID)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
// Blocked user unwatch all repository owned by the doer.
|
|
repoIDs, err := repo_model.GetWatchedRepoIDsOwnedBy(ctx, blockID, userID)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
err = repo_model.UnwatchRepos(ctx, blockID, repoIDs)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
// Remove blocked user as collaborator from repositories the user owns as an
|
|
// individual.
|
|
collabsID, err := repo_model.GetCollaboratorWithUser(ctx, userID, blockID)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
_, err = db.GetEngine(ctx).In("id", collabsID).Delete(&repo_model.Collaboration{})
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
// Remove pending repository transfers, and set the status on those repository
|
|
// back to ready.
|
|
pendingTransfersIDs, err := model.GetPendingTransferIDs(ctx, userID, blockID)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
// Use a subquery instead of a JOIN, because not every database supports JOIN
|
|
// on a UPDATE query.
|
|
_, err = db.GetEngine(ctx).Table("repository").
|
|
In("id", builder.Select("repo_id").From("repo_transfer").Where(builder.In("id", pendingTransfersIDs))).
|
|
Cols("status").
|
|
Update(&repo_model.Repository{Status: repo_model.RepositoryReady})
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
_, err = db.GetEngine(ctx).In("id", pendingTransfersIDs).Delete(&model.RepoTransfer{})
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
return committer.Commit()
|
|
}
|