access_requests.rb 3.23 KB
Newer Older
1 2
# frozen_string_literal: true

3 4
module API
  class AccessRequests < Grape::API
5 6
    include PaginationParams

7 8 9 10 11
    before { authenticate! }

    helpers ::API::Helpers::MembersHelpers

    %w[group project].each do |source_type|
12 13 14
      params do
        requires :id, type: String, desc: "The #{source_type} ID"
      end
15
      resource source_type.pluralize, requirements: API::NAMESPACE_OR_PROJECT_REQUIREMENTS do
16 17 18 19
        desc "Gets a list of access requests for a #{source_type}." do
          detail 'This feature was introduced in GitLab 8.11.'
          success Entities::AccessRequester
        end
20 21 22
        params do
          use :pagination
        end
23
        # rubocop: disable CodeReuse/ActiveRecord
24 25 26
        get ":id/access_requests" do
          source = find_source(source_type, params[:id])

Rémy Coutable's avatar
Rémy Coutable committed
27 28
          access_requesters = AccessRequestsFinder.new(source).execute!(current_user)
          access_requesters = paginate(access_requesters.includes(:user))
29

30
          present access_requesters, with: Entities::AccessRequester
31
        end
32
        # rubocop: enable CodeReuse/ActiveRecord
33

34 35 36 37
        desc "Requests access for the authenticated user to a #{source_type}." do
          detail 'This feature was introduced in GitLab 8.11.'
          success Entities::AccessRequester
        end
38 39 40 41 42
        post ":id/access_requests" do
          source = find_source(source_type, params[:id])
          access_requester = source.request_access(current_user)

          if access_requester.persisted?
43
            present access_requester, with: Entities::AccessRequester
44 45 46 47 48
          else
            render_validation_error!(access_requester)
          end
        end

49 50 51 52 53 54 55 56
        desc 'Approves an access request for the given user.' do
          detail 'This feature was introduced in GitLab 8.11.'
          success Entities::Member
        end
        params do
          requires :user_id, type: Integer, desc: 'The user ID of the access requester'
          optional :access_level, type: Integer, desc: 'A valid access level (defaults: `30`, developer access level)'
        end
57
        # rubocop: disable CodeReuse/ActiveRecord
58 59 60
        put ':id/access_requests/:user_id/approve' do
          source = find_source(source_type, params[:id])

61 62
          access_requester = source.requesters.find_by!(user_id: params[:user_id])
          member = ::Members::ApproveAccessRequestService
Rémy Coutable's avatar
Rémy Coutable committed
63
            .new(current_user, declared_params)
64
            .execute(access_requester)
65 66

          status :created
67
          present member, with: Entities::Member
68
        end
69
        # rubocop: enable CodeReuse/ActiveRecord
70

71 72 73 74 75 76
        desc 'Denies an access request for the given user.' do
          detail 'This feature was introduced in GitLab 8.11.'
        end
        params do
          requires :user_id, type: Integer, desc: 'The user ID of the access requester'
        end
77
        # rubocop: disable CodeReuse/ActiveRecord
78 79
        delete ":id/access_requests/:user_id" do
          source = find_source(source_type, params[:id])
80
          member = source.requesters.find_by!(user_id: params[:user_id])
81

82
          destroy_conditionally!(member) do
Rémy Coutable's avatar
Rémy Coutable committed
83
            ::Members::DestroyService.new(current_user).execute(member)
84
          end
85
        end
86
        # rubocop: enable CodeReuse/ActiveRecord
87 88 89 90
      end
    end
  end
end