File: project_authorization.rb

package info (click to toggle)
gitlab 17.6.5-19
  • links: PTS, VCS
  • area: main
  • in suites: sid
  • size: 629,368 kB
  • sloc: ruby: 1,915,304; javascript: 557,307; sql: 60,639; xml: 6,509; sh: 4,567; makefile: 1,239; python: 406
file content (43 lines) | stat: -rw-r--r-- 1,443 bytes parent folder | download
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
# frozen_string_literal: true

module Clusters
  module Agents
    module Authorizations
      module UserAccess
        class ProjectAuthorization < ApplicationRecord
          include Scopes

          self.table_name = 'agent_user_access_project_authorizations'

          belongs_to :agent, class_name: 'Clusters::Agent', optional: false
          belongs_to :project, class_name: '::Project', optional: false

          scope :for_user, ->(user) {
            joins('INNER JOIN project_authorizations ON ' \
                  'project_authorizations.project_id = agent_user_access_project_authorizations.project_id')
              .where(project_authorizations: { user_id: user.id, access_level: Gitlab::Access::DEVELOPER.. })
              .select('agent_user_access_project_authorizations.*, project_authorizations.access_level AS access_level')
          }

          scope :for_project, ->(project) { where(project: project) }

          validates :config, json_schema: { filename: 'clusters_agents_authorizations_user_access_config' }

          def config_project
            agent.project
          end

          class << self
            def upsert_configs(configs)
              upsert_all(configs, unique_by: [:agent_id, :project_id])
            end

            def delete_unlisted(project_ids)
              where.not(project_id: project_ids).delete_all
            end
          end
        end
      end
    end
  end
end