* WIP * adding initial creategroup endpoint * fetching by group source * fixing startup error * updating create endpoint to take an array of user_ids, this will allow us to create the group with one request * adding delete group endpoint and appropriate test * adding source param for getGroups * adding add members and delete members endpoints * locking down crud endpoints to only be allowed for custom groups * user search stuff * allowing remoteid be null by changing field to pointer * code cleanup and store level tests * adding new tests and removing unused endpoint * resolving conflicts * Adds authz check for group. * Adds authz checks to groups APIs. * Updated create group authz tests. * Updates delete group tests. * Tests create group. * Adds some tests and validations. * adding new parameter so I can get users not in a group * Fixed all lint warnings. * Fix type. * fixing search users not in group * Fixes some lint errors. * Moves entry in JSON array. * Fixed SQL query. * Fixes permission migration test. * Fixes migration test. * Fixes some group store tests. * Fix test. * Fix test. * Revert lint change. * Migrated CreateWithUserIds to sqlx. * Adds tests for GetMember; migrates implementation to sqlx. * Tests GetNonMemberUsersPage and hanles wrong group id. * Fixes test. * Switches GetMaster to GetMasterX. * Switches GetReplica to GetReplicaX. * Fixes logic. * Fixes shadow declaration. * Adds include_member_count to get group API endpoint. * Adds filter_has_member param to getGroups. * Fixes. * Removes array of group sources. * fixing error * Testing reverting CreateWithUserIds back to gorp. * Added websocket event for CreateGroupWithUserIds. * Changed a few response status codes. Switched to correct permission. * Added member count to ws payload for group when updating or creating. * Adds feature flag checks for custom groups. * Added middleware function to require license. Added config to disable custom groups. * Change for function signature change of executePossiblyEmptyQuery. * Lint fixes. * Adds telemetry none comment. * Adds translations. * Migrated to sqlx. * Temp. removal of translation. * Fixed typo. * Added an intermediary model to query with a field that is now ignored by sqlx on read queries. * Re-used existing store struct. * Inludes member count. * Fix for merge error.' * Require license for group endpoints. * Updates translations. * Fix shadow declaration. * Renames permissions. Switches to new method to retrieve remoteid. * Added WS events for upsert and delete member(s). * Added new store error type ErrUniqueConstraint. * Added EnableCustonGroups to the client config. * Sanitized some user records. * Added parameter to include_total_count for listing groups. * Added translations. * adding deleteAt field to getByUsers query * Revert sanitize. * Added uniqueness constraint error to UpdateGroup. * Removed the FutureFeatures flag so that the feature is not enabled on old Enterprise licenses. * Renamed function. * Updates authz check for user search related to groups. * Removed debug statement. * Removed unused app method. * Added telemetry for enable_custom_groups. * Returns early from nil license. * Updates test. * Returned early to avoid nesting in (*SqlGroupStore).checkUserExist. Switched to reading from replica in (*SqlGroupStore).GetMember. Handled JSON marshal error in (*Client4).UpsertGroupMembers * Switched to SanitizeProfile. * Switched to model.NewInt. * Switched from status NotImplemented to Forbidden for missing license. * Removed deactivated users from 'exists' set. * Revert gotool update. * Ignored lint error that I think is invalid. * Added the approprate access tag for disabling custom groups. * Revert change to response status. * Fixed refactor mistake. * Limited the group member WS events to individual users. * Removed WS event of deleted groups. * Updated license check for searchUsers endpoint. * Switched from license feature to license sku. * Update app/group.go Co-authored-by: Claudio Costa <cstcld91@gmail.com> * Update app/group.go Co-authored-by: Claudio Costa <cstcld91@gmail.com> * Remove linter ignore comment. * Added function to create sku-specific license. * Fixed typo. Removed comment. * Fixed for wrong type. * Added missing param to client. Removed unnecessary props setting. Added test for retrieving groups by source. * Updated some tests now that we're validating group membership not created for deactivated user. * Fix for groups endpoint returning all group types by default. * Changes constant names. Adds migration for all users to manage custom group members. * Removes requirement for manage_system permission to filter user search by group. * Added migration mock. * Removes default permissions from custom_group_user role. * Fixes migration. * Fixes emoji migration test. * fixing issue with member counts * fixing search issue for deleted members Co-authored-by: Benjamin Cooke <benjamincooke@Benjamins-MacBook-Pro.local> Co-authored-by: Benjamin Cooke <benjamincooke@Benjamins-MBP.ht.home> Co-authored-by: Mattermod <mattermod@users.noreply.github.com> Co-authored-by: Benjamin Cooke <benjamincooke@Benjamins-MacBook-Pro.fritz.box> Co-authored-by: Claudio Costa <cstcld91@gmail.com>
392 строки
9.0 KiB
Go
392 строки
9.0 KiB
Go
// Copyright (c) 2015-present Mattermost, Inc. All Rights Reserved.
|
|
// See LICENSE.txt for license information.
|
|
|
|
package web
|
|
|
|
import (
|
|
"net/http"
|
|
"net/url"
|
|
"strconv"
|
|
"strings"
|
|
|
|
"github.com/gorilla/mux"
|
|
|
|
"github.com/mattermost/mattermost-server/v6/model"
|
|
)
|
|
|
|
const (
|
|
PageDefault = 0
|
|
PerPageDefault = 60
|
|
PerPageMaximum = 200
|
|
LogsPerPageDefault = 10000
|
|
LogsPerPageMaximum = 10000
|
|
LimitDefault = 60
|
|
LimitMaximum = 200
|
|
)
|
|
|
|
type Params struct {
|
|
UserId string
|
|
TeamId string
|
|
InviteId string
|
|
TokenId string
|
|
ThreadId string
|
|
Timestamp int64
|
|
ChannelId string
|
|
PostId string
|
|
PolicyId string
|
|
FileId string
|
|
Filename string
|
|
UploadId string
|
|
PluginId string
|
|
CommandId string
|
|
HookId string
|
|
ReportId string
|
|
EmojiId string
|
|
AppId string
|
|
Email string
|
|
Username string
|
|
TeamName string
|
|
ChannelName string
|
|
PreferenceName string
|
|
EmojiName string
|
|
Category string
|
|
Service string
|
|
JobId string
|
|
JobType string
|
|
ActionId string
|
|
RoleId string
|
|
RoleName string
|
|
SchemeId string
|
|
Scope string
|
|
GroupId string
|
|
Page int
|
|
PerPage int
|
|
LogsPerPage int
|
|
Permanent bool
|
|
RemoteId string
|
|
SyncableId string
|
|
SyncableType model.GroupSyncableType
|
|
BotUserId string
|
|
Q string
|
|
IsLinked *bool
|
|
IsConfigured *bool
|
|
NotAssociatedToTeam string
|
|
NotAssociatedToChannel string
|
|
Paginate *bool
|
|
IncludeMemberCount bool
|
|
NotAssociatedToGroup string
|
|
ExcludeDefaultChannels bool
|
|
LimitAfter int
|
|
LimitBefore int
|
|
GroupIDs string
|
|
IncludeTotalCount bool
|
|
IncludeDeleted bool
|
|
FilterAllowReference bool
|
|
FilterParentTeamPermitted bool
|
|
CategoryId string
|
|
WarnMetricId string
|
|
ExportName string
|
|
ExcludePolicyConstrained bool
|
|
GroupSource model.GroupSource
|
|
FilterHasMember string
|
|
|
|
// Cloud
|
|
InvoiceId string
|
|
}
|
|
|
|
func ParamsFromRequest(r *http.Request) *Params {
|
|
params := &Params{}
|
|
|
|
props := mux.Vars(r)
|
|
query := r.URL.Query()
|
|
|
|
if val, ok := props["user_id"]; ok {
|
|
params.UserId = val
|
|
}
|
|
|
|
if val, ok := props["team_id"]; ok {
|
|
params.TeamId = val
|
|
}
|
|
|
|
if val, ok := props["category_id"]; ok {
|
|
params.CategoryId = val
|
|
}
|
|
|
|
if val, ok := props["invite_id"]; ok {
|
|
params.InviteId = val
|
|
}
|
|
|
|
if val, ok := props["token_id"]; ok {
|
|
params.TokenId = val
|
|
}
|
|
|
|
if val, ok := props["thread_id"]; ok {
|
|
params.ThreadId = val
|
|
}
|
|
|
|
if val, ok := props["channel_id"]; ok {
|
|
params.ChannelId = val
|
|
} else {
|
|
params.ChannelId = query.Get("channel_id")
|
|
}
|
|
|
|
if val, ok := props["post_id"]; ok {
|
|
params.PostId = val
|
|
}
|
|
|
|
if val, ok := props["policy_id"]; ok {
|
|
params.PolicyId = val
|
|
}
|
|
|
|
if val, ok := props["file_id"]; ok {
|
|
params.FileId = val
|
|
}
|
|
|
|
params.Filename = query.Get("filename")
|
|
|
|
if val, ok := props["upload_id"]; ok {
|
|
params.UploadId = val
|
|
}
|
|
|
|
if val, ok := props["plugin_id"]; ok {
|
|
params.PluginId = val
|
|
}
|
|
|
|
if val, ok := props["command_id"]; ok {
|
|
params.CommandId = val
|
|
}
|
|
|
|
if val, ok := props["hook_id"]; ok {
|
|
params.HookId = val
|
|
}
|
|
|
|
if val, ok := props["report_id"]; ok {
|
|
params.ReportId = val
|
|
}
|
|
|
|
if val, ok := props["emoji_id"]; ok {
|
|
params.EmojiId = val
|
|
}
|
|
|
|
if val, ok := props["app_id"]; ok {
|
|
params.AppId = val
|
|
}
|
|
|
|
if val, ok := props["email"]; ok {
|
|
params.Email = val
|
|
}
|
|
|
|
if val, ok := props["username"]; ok {
|
|
params.Username = val
|
|
}
|
|
|
|
if val, ok := props["team_name"]; ok {
|
|
params.TeamName = strings.ToLower(val)
|
|
}
|
|
|
|
if val, ok := props["channel_name"]; ok {
|
|
params.ChannelName = strings.ToLower(val)
|
|
}
|
|
|
|
if val, ok := props["category"]; ok {
|
|
params.Category = val
|
|
}
|
|
|
|
if val, ok := props["service"]; ok {
|
|
params.Service = val
|
|
}
|
|
|
|
if val, ok := props["preference_name"]; ok {
|
|
params.PreferenceName = val
|
|
}
|
|
|
|
if val, ok := props["emoji_name"]; ok {
|
|
params.EmojiName = val
|
|
}
|
|
|
|
if val, ok := props["job_id"]; ok {
|
|
params.JobId = val
|
|
}
|
|
|
|
if val, ok := props["job_type"]; ok {
|
|
params.JobType = val
|
|
}
|
|
|
|
if val, ok := props["action_id"]; ok {
|
|
params.ActionId = val
|
|
}
|
|
|
|
if val, ok := props["role_id"]; ok {
|
|
params.RoleId = val
|
|
}
|
|
|
|
if val, ok := props["role_name"]; ok {
|
|
params.RoleName = val
|
|
}
|
|
|
|
if val, ok := props["scheme_id"]; ok {
|
|
params.SchemeId = val
|
|
}
|
|
|
|
if val, ok := props["group_id"]; ok {
|
|
params.GroupId = val
|
|
}
|
|
|
|
if val, ok := props["remote_id"]; ok {
|
|
params.RemoteId = val
|
|
}
|
|
|
|
if val, ok := props["invoice_id"]; ok {
|
|
params.InvoiceId = val
|
|
}
|
|
|
|
params.Scope = query.Get("scope")
|
|
|
|
if val, err := strconv.Atoi(query.Get("page")); err != nil || val < 0 {
|
|
params.Page = PageDefault
|
|
} else {
|
|
params.Page = val
|
|
}
|
|
|
|
if val, err := strconv.ParseInt(props["timestamp"], 10, 64); err != nil || val < 0 {
|
|
params.Timestamp = 0
|
|
} else {
|
|
params.Timestamp = val
|
|
}
|
|
|
|
if val, err := strconv.ParseBool(query.Get("permanent")); err == nil {
|
|
params.Permanent = val
|
|
}
|
|
|
|
params.PerPage = getPerPageFromQuery(query)
|
|
if val, err := strconv.Atoi(query.Get("logs_per_page")); err != nil || val < 0 {
|
|
params.LogsPerPage = LogsPerPageDefault
|
|
} else if val > LogsPerPageMaximum {
|
|
params.LogsPerPage = LogsPerPageMaximum
|
|
} else {
|
|
params.LogsPerPage = val
|
|
}
|
|
|
|
if val, err := strconv.Atoi(query.Get("limit_after")); err != nil || val < 0 {
|
|
params.LimitAfter = LimitDefault
|
|
} else if val > LimitMaximum {
|
|
params.LimitAfter = LimitMaximum
|
|
} else {
|
|
params.LimitAfter = val
|
|
}
|
|
|
|
if val, err := strconv.Atoi(query.Get("limit_before")); err != nil || val < 0 {
|
|
params.LimitBefore = LimitDefault
|
|
} else if val > LimitMaximum {
|
|
params.LimitBefore = LimitMaximum
|
|
} else {
|
|
params.LimitBefore = val
|
|
}
|
|
|
|
if val, ok := props["syncable_id"]; ok {
|
|
params.SyncableId = val
|
|
}
|
|
|
|
if val, ok := props["syncable_type"]; ok {
|
|
switch val {
|
|
case "teams":
|
|
params.SyncableType = model.GroupSyncableTypeTeam
|
|
case "channels":
|
|
params.SyncableType = model.GroupSyncableTypeChannel
|
|
}
|
|
}
|
|
|
|
if val, ok := props["bot_user_id"]; ok {
|
|
params.BotUserId = val
|
|
}
|
|
|
|
params.Q = query.Get("q")
|
|
|
|
if val, err := strconv.ParseBool(query.Get("is_linked")); err == nil {
|
|
params.IsLinked = &val
|
|
}
|
|
|
|
if val, err := strconv.ParseBool(query.Get("is_configured")); err == nil {
|
|
params.IsConfigured = &val
|
|
}
|
|
|
|
params.NotAssociatedToTeam = query.Get("not_associated_to_team")
|
|
params.NotAssociatedToChannel = query.Get("not_associated_to_channel")
|
|
|
|
if val, err := strconv.ParseBool(query.Get("filter_allow_reference")); err == nil {
|
|
params.FilterAllowReference = val
|
|
}
|
|
|
|
if val, err := strconv.ParseBool(query.Get("filter_parent_team_permitted")); err == nil {
|
|
params.FilterParentTeamPermitted = val
|
|
}
|
|
|
|
if val, err := strconv.ParseBool(query.Get("paginate")); err == nil {
|
|
params.Paginate = &val
|
|
}
|
|
|
|
if val, err := strconv.ParseBool(query.Get("include_member_count")); err == nil {
|
|
params.IncludeMemberCount = val
|
|
}
|
|
|
|
params.NotAssociatedToGroup = query.Get("not_associated_to_group")
|
|
|
|
if val, err := strconv.ParseBool(query.Get("exclude_default_channels")); err == nil {
|
|
params.ExcludeDefaultChannels = val
|
|
}
|
|
|
|
params.GroupIDs = query.Get("group_ids")
|
|
|
|
if val, err := strconv.ParseBool(query.Get("include_total_count")); err == nil {
|
|
params.IncludeTotalCount = val
|
|
}
|
|
|
|
if val, err := strconv.ParseBool(query.Get("include_deleted")); err == nil {
|
|
params.IncludeDeleted = val
|
|
}
|
|
|
|
if val, ok := props["warn_metric_id"]; ok {
|
|
params.WarnMetricId = val
|
|
}
|
|
|
|
if val, ok := props["export_name"]; ok {
|
|
params.ExportName = val
|
|
}
|
|
|
|
if val, err := strconv.ParseBool(query.Get("exclude_policy_constrained")); err == nil {
|
|
params.ExcludePolicyConstrained = val
|
|
}
|
|
|
|
if val := query.Get("group_source"); val != "" {
|
|
switch val {
|
|
case "custom":
|
|
params.GroupSource = model.GroupSourceCustom
|
|
case "ldap":
|
|
params.GroupSource = model.GroupSourceLdap
|
|
default:
|
|
params.GroupSource = model.GroupSourceLdap
|
|
}
|
|
}
|
|
|
|
params.FilterHasMember = query.Get("filter_has_member")
|
|
|
|
return params
|
|
}
|
|
|
|
// getPerPageFromQuery returns the PerPage value from the given query.
|
|
// This function should be removed and the support for `pageSize`
|
|
// should be dropped after v1.46 of the mobile app is no longer supported
|
|
// https://mattermost.atlassian.net/browse/MM-38131
|
|
func getPerPageFromQuery(query url.Values) int {
|
|
val, err := strconv.Atoi(query.Get("per_page"))
|
|
if err != nil {
|
|
val, err = strconv.Atoi(query.Get("pageSize"))
|
|
}
|
|
if err != nil || val < 0 {
|
|
return PerPageDefault
|
|
} else if val > PerPageMaximum {
|
|
return PerPageMaximum
|
|
}
|
|
return val
|
|
}
|