mirror of
https://github.com/goharbor/harbor
synced 2025-04-17 19:18:22 +00:00

Conflicts: src/common/security/rbac/context_test.go src/ui/api/statistic.go src/ui/projectmanager/pm.go
346 lines
7.8 KiB
Go
346 lines
7.8 KiB
Go
// Copyright (c) 2017 VMware, Inc. All Rights Reserved.
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
package dao
|
|
|
|
import (
|
|
"github.com/vmware/harbor/src/common"
|
|
"github.com/vmware/harbor/src/common/models"
|
|
|
|
"fmt"
|
|
"time"
|
|
|
|
"github.com/vmware/harbor/src/common/utils/log"
|
|
)
|
|
|
|
//TODO:transaction, return err
|
|
|
|
// AddProject adds a project to the database along with project roles information and access log records.
|
|
func AddProject(project models.Project) (int64, error) {
|
|
|
|
o := GetOrmer()
|
|
p, err := o.Raw("insert into project (owner_id, name, creation_time, update_time, deleted, public) values (?, ?, ?, ?, ?, ?)").Prepare()
|
|
if err != nil {
|
|
return 0, err
|
|
}
|
|
|
|
now := time.Now()
|
|
r, err := p.Exec(project.OwnerID, project.Name, now, now, project.Deleted, project.Public)
|
|
if err != nil {
|
|
return 0, err
|
|
}
|
|
|
|
projectID, err := r.LastInsertId()
|
|
if err != nil {
|
|
return 0, err
|
|
}
|
|
|
|
err = AddProjectMember(projectID, project.OwnerID, models.PROJECTADMIN)
|
|
return projectID, err
|
|
}
|
|
|
|
// IsProjectPublic ...
|
|
func IsProjectPublic(projectName string) bool {
|
|
project, err := GetProjectByName(projectName)
|
|
if err != nil {
|
|
log.Errorf("Error occurred in GetProjectByName: %v", err)
|
|
return false
|
|
}
|
|
if project == nil {
|
|
return false
|
|
}
|
|
return project.Public == 1
|
|
}
|
|
|
|
//ProjectExists returns whether the project exists according to its name of ID.
|
|
func ProjectExists(nameOrID interface{}) (bool, error) {
|
|
o := GetOrmer()
|
|
type dummy struct{}
|
|
sql := `select project_id from project where deleted = 0 and `
|
|
switch nameOrID.(type) {
|
|
case int64:
|
|
sql += `project_id = ?`
|
|
case string:
|
|
sql += `name = ?`
|
|
default:
|
|
return false, fmt.Errorf("Invalid nameOrId: %v", nameOrID)
|
|
}
|
|
|
|
var d []dummy
|
|
num, err := o.Raw(sql, nameOrID).QueryRows(&d)
|
|
if err != nil {
|
|
return false, err
|
|
}
|
|
return num > 0, nil
|
|
|
|
}
|
|
|
|
// GetProjectByID ...
|
|
func GetProjectByID(id int64) (*models.Project, error) {
|
|
o := GetOrmer()
|
|
|
|
sql := `select p.project_id, p.name, u.username as owner_name, p.owner_id, p.creation_time, p.update_time, p.public
|
|
from project p left join user u on p.owner_id = u.user_id where p.deleted = 0 and p.project_id = ?`
|
|
queryParam := make([]interface{}, 1)
|
|
queryParam = append(queryParam, id)
|
|
|
|
p := []models.Project{}
|
|
count, err := o.Raw(sql, queryParam).QueryRows(&p)
|
|
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
if count == 0 {
|
|
return nil, nil
|
|
}
|
|
|
|
return &p[0], nil
|
|
}
|
|
|
|
// GetProjectByName ...
|
|
func GetProjectByName(name string) (*models.Project, error) {
|
|
o := GetOrmer()
|
|
var p []models.Project
|
|
n, err := o.Raw(`select * from project where name = ? and deleted = 0`, name).QueryRows(&p)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
if n == 0 {
|
|
return nil, nil
|
|
}
|
|
|
|
return &p[0], nil
|
|
}
|
|
|
|
// GetPermission gets roles that the user has according to the project.
|
|
func GetPermission(username, projectName string) (string, error) {
|
|
o := GetOrmer()
|
|
|
|
sql := `select r.role_code from role as r
|
|
inner join project_member as pm on r.role_id = pm.role
|
|
inner join user as u on u.user_id = pm.user_id
|
|
inner join project p on p.project_id = pm.project_id
|
|
where u.username = ? and p.name = ? and u.deleted = 0 and p.deleted = 0`
|
|
|
|
var r []models.Role
|
|
n, err := o.Raw(sql, username, projectName).QueryRows(&r)
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
|
|
if n == 0 {
|
|
return "", nil
|
|
}
|
|
|
|
return r[0].RoleCode, nil
|
|
}
|
|
|
|
// ToggleProjectPublicity toggles the publicity of the project.
|
|
func ToggleProjectPublicity(projectID int64, publicity int) error {
|
|
o := GetOrmer()
|
|
sql := "update project set public = ? where project_id = ?"
|
|
_, err := o.Raw(sql, publicity, projectID).Exec()
|
|
return err
|
|
}
|
|
|
|
// GetHasReadPermProjects returns a project list,
|
|
// which satisfies the following conditions:
|
|
// 1. the project is not deleted
|
|
// 2. the prject is public or the user is a member of the project
|
|
func GetHasReadPermProjects(username string) ([]*models.Project, error) {
|
|
user, err := GetUser(models.User{
|
|
Username: username,
|
|
})
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
o := GetOrmer()
|
|
|
|
sql :=
|
|
`select distinct p.project_id, p.name, p.public,
|
|
p.owner_id, p.creation_time, p.update_time
|
|
from project p
|
|
left join project_member pm
|
|
on p.project_id = pm.project_id
|
|
where (pm.user_id = ? or p.public = 1)
|
|
and p.deleted = 0 `
|
|
|
|
var projects []*models.Project
|
|
|
|
if _, err := o.Raw(sql, user.UserID).QueryRows(&projects); err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
return projects, nil
|
|
}
|
|
|
|
// GetTotalOfProjects returns the total count of projects
|
|
// according to the query conditions
|
|
func GetTotalOfProjects(query *models.ProjectQueryParam) (int64, error) {
|
|
|
|
var (
|
|
owner string
|
|
name string
|
|
public *bool
|
|
member string
|
|
role int
|
|
)
|
|
|
|
if query != nil {
|
|
owner = query.Owner
|
|
name = query.Name
|
|
public = query.Public
|
|
if query.Member != nil {
|
|
member = query.Member.Name
|
|
role = query.Member.Role
|
|
}
|
|
}
|
|
|
|
sql, params := projectQueryConditions(owner, name, public, member, role)
|
|
|
|
sql = `select count(*) ` + sql
|
|
|
|
var total int64
|
|
err := GetOrmer().Raw(sql, params).QueryRow(&total)
|
|
return total, err
|
|
}
|
|
|
|
// GetProjects returns a project list according to the query conditions
|
|
func GetProjects(query *models.ProjectQueryParam) ([]*models.Project, error) {
|
|
|
|
var (
|
|
owner string
|
|
name string
|
|
public *bool
|
|
member string
|
|
role int
|
|
page int64
|
|
size int64
|
|
)
|
|
|
|
if query != nil {
|
|
owner = query.Owner
|
|
name = query.Name
|
|
public = query.Public
|
|
if query.Member != nil {
|
|
member = query.Member.Name
|
|
role = query.Member.Role
|
|
}
|
|
if query.Pagination != nil {
|
|
page = query.Pagination.Page
|
|
size = query.Pagination.Size
|
|
}
|
|
}
|
|
|
|
sql, params := projectQueryConditions(owner, name, public, member, role)
|
|
|
|
sql = `select distinct p.project_id, p.name, p.public, p.owner_id,
|
|
p.creation_time, p.update_time ` + sql
|
|
if size > 0 {
|
|
sql += ` limit ?`
|
|
params = append(params, size)
|
|
|
|
if page > 0 {
|
|
sql += ` offset ?`
|
|
params = append(params, (page-1)*size)
|
|
}
|
|
}
|
|
|
|
var projects []*models.Project
|
|
_, err := GetOrmer().Raw(sql, params).QueryRows(&projects)
|
|
return projects, err
|
|
}
|
|
|
|
func projectQueryConditions(owner, name string, public *bool, member string,
|
|
role int) (string, []interface{}) {
|
|
params := []interface{}{}
|
|
|
|
sql := ` from project p`
|
|
|
|
if len(owner) != 0 {
|
|
sql += ` join user u1
|
|
on p.owner_id = u1.user_id`
|
|
}
|
|
|
|
if len(member) != 0 {
|
|
sql += ` join project_member pm
|
|
on p.project_id = pm.project_id
|
|
join user u2
|
|
on pm.user_id=u2.user_id`
|
|
}
|
|
sql += ` where p.deleted=0`
|
|
|
|
if len(owner) != 0 {
|
|
sql += ` and u1.username=?`
|
|
params = append(params, owner)
|
|
}
|
|
|
|
if len(name) != 0 {
|
|
sql += ` and p.name like ?`
|
|
params = append(params, "%"+escape(name)+"%")
|
|
}
|
|
|
|
if public != nil {
|
|
sql += ` and p.public = ?`
|
|
if *public {
|
|
params = append(params, 1)
|
|
} else {
|
|
params = append(params, 0)
|
|
}
|
|
}
|
|
|
|
if len(member) != 0 {
|
|
sql += ` and u2.username=?`
|
|
params = append(params, member)
|
|
|
|
if role > 0 {
|
|
sql += ` and pm.role = ?`
|
|
roleID := 0
|
|
switch role {
|
|
case common.RoleProjectAdmin:
|
|
roleID = 1
|
|
case common.RoleDeveloper:
|
|
roleID = 2
|
|
case common.RoleGuest:
|
|
roleID = 3
|
|
|
|
}
|
|
params = append(params, roleID)
|
|
}
|
|
}
|
|
|
|
sql += ` order by p.name`
|
|
|
|
return sql, params
|
|
}
|
|
|
|
// DeleteProject ...
|
|
func DeleteProject(id int64) error {
|
|
project, err := GetProjectByID(id)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
name := fmt.Sprintf("%s#%d", project.Name, project.ProjectID)
|
|
|
|
sql := `update project
|
|
set deleted = 1, name = ?
|
|
where project_id = ?`
|
|
_, err = GetOrmer().Raw(sql, name, id).Exec()
|
|
return err
|
|
}
|