configstore: add project run actions auth setting for org members

update project type add CanMembersPerformRunActions
agola-io · Oct 10, 2023 · eaf1329 · eaf1329
1 parent 1326c5d
commit eaf1329
Show file tree

Hide file tree

Showing 22 changed files with 1,290 additions and 161 deletions.
diff --git a/internal/services/configstore/action/project.go b/internal/services/configstore/action/project.go
@@ -81,18 +81,19 @@ func (h *ActionHandler) GetProject(ctx context.Context, projectRef string) (*typ
 }
 
 type CreateUpdateProjectRequest struct {
-	Name                       string
-	Parent                     types.Parent
-	Visibility                 types.Visibility
-	RemoteRepositoryConfigType types.RemoteRepositoryConfigType
-	RemoteSourceID             string
-	LinkedAccountID            string
-	RepositoryID               string
-	RepositoryPath             string
-	SSHPrivateKey              string
-	SkipSSHHostKeyCheck        bool
-	PassVarsToForkedPR         bool
-	DefaultBranch              string
+	Name                        string
+	Parent                      types.Parent
+	Visibility                  types.Visibility
+	RemoteRepositoryConfigType  types.RemoteRepositoryConfigType
+	RemoteSourceID              string
+	LinkedAccountID             string
+	RepositoryID                string
+	RepositoryPath              string
+	SSHPrivateKey               string
+	SkipSSHHostKeyCheck         bool
+	PassVarsToForkedPR          bool
+	DefaultBranch               string
+	CanMembersPerformRunActions bool
 }
 
 func (h *ActionHandler) CreateProject(ctx context.Context, req *CreateUpdateProjectRequest) (*types.Project, error) {
@@ -163,6 +164,7 @@ func (h *ActionHandler) CreateProject(ctx context.Context, req *CreateUpdateProj
 		project.SkipSSHHostKeyCheck = req.SkipSSHHostKeyCheck
 		project.PassVarsToForkedPR = req.PassVarsToForkedPR
 		project.DefaultBranch = req.DefaultBranch
+		project.CanMembersPerformRunActions = req.CanMembersPerformRunActions
 
 		// generate the Secret and the WebhookSecret
 		// TODO(sgotti) move this to the gateway?
@@ -273,6 +275,7 @@ func (h *ActionHandler) UpdateProject(ctx context.Context, curProjectRef string,
 		project.SkipSSHHostKeyCheck = req.SkipSSHHostKeyCheck
 		project.PassVarsToForkedPR = req.PassVarsToForkedPR
 		project.DefaultBranch = req.DefaultBranch
+		project.CanMembersPerformRunActions = req.CanMembersPerformRunActions
 
 		if err := h.d.UpdateProject(tx, project); err != nil {
 			return errors.WithStack(err)

diff --git a/internal/services/configstore/api/project.go b/internal/services/configstore/api/project.go
@@ -171,18 +171,19 @@ func (h *CreateProjectHandler) ServeHTTP(w http.ResponseWriter, r *http.Request)
 	}
 
 	areq := &action.CreateUpdateProjectRequest{
-		Name:                       req.Name,
-		Parent:                     req.Parent,
-		Visibility:                 req.Visibility,
-		RemoteRepositoryConfigType: req.RemoteRepositoryConfigType,
-		RemoteSourceID:             req.RemoteSourceID,
-		LinkedAccountID:            req.LinkedAccountID,
-		RepositoryID:               req.RepositoryID,
-		RepositoryPath:             req.RepositoryPath,
-		SSHPrivateKey:              req.SSHPrivateKey,
-		SkipSSHHostKeyCheck:        req.SkipSSHHostKeyCheck,
-		PassVarsToForkedPR:         req.PassVarsToForkedPR,
-		DefaultBranch:              req.DefaultBranch,
+		Name:                        req.Name,
+		Parent:                      req.Parent,
+		Visibility:                  req.Visibility,
+		RemoteRepositoryConfigType:  req.RemoteRepositoryConfigType,
+		RemoteSourceID:              req.RemoteSourceID,
+		LinkedAccountID:             req.LinkedAccountID,
+		RepositoryID:                req.RepositoryID,
+		RepositoryPath:              req.RepositoryPath,
+		SSHPrivateKey:               req.SSHPrivateKey,
+		SkipSSHHostKeyCheck:         req.SkipSSHHostKeyCheck,
+		PassVarsToForkedPR:          req.PassVarsToForkedPR,
+		DefaultBranch:               req.DefaultBranch,
+		CanMembersPerformRunActions: req.CanMembersPerformRunActions,
 	}
 
 	project, err := h.ah.CreateProject(ctx, areq)
@@ -230,18 +231,19 @@ func (h *UpdateProjectHandler) ServeHTTP(w http.ResponseWriter, r *http.Request)
 	}
 
 	areq := &action.CreateUpdateProjectRequest{
-		Name:                       req.Name,
-		Parent:                     req.Parent,
-		Visibility:                 req.Visibility,
-		RemoteRepositoryConfigType: req.RemoteRepositoryConfigType,
-		RemoteSourceID:             req.RemoteSourceID,
-		LinkedAccountID:            req.LinkedAccountID,
-		RepositoryID:               req.RepositoryID,
-		RepositoryPath:             req.RepositoryPath,
-		SSHPrivateKey:              req.SSHPrivateKey,
-		SkipSSHHostKeyCheck:        req.SkipSSHHostKeyCheck,
-		PassVarsToForkedPR:         req.PassVarsToForkedPR,
-		DefaultBranch:              req.DefaultBranch,
+		Name:                        req.Name,
+		Parent:                      req.Parent,
+		Visibility:                  req.Visibility,
+		RemoteRepositoryConfigType:  req.RemoteRepositoryConfigType,
+		RemoteSourceID:              req.RemoteSourceID,
+		LinkedAccountID:             req.LinkedAccountID,
+		RepositoryID:                req.RepositoryID,
+		RepositoryPath:              req.RepositoryPath,
+		SSHPrivateKey:               req.SSHPrivateKey,
+		SkipSSHHostKeyCheck:         req.SkipSSHHostKeyCheck,
+		PassVarsToForkedPR:          req.PassVarsToForkedPR,
+		DefaultBranch:               req.DefaultBranch,
+		CanMembersPerformRunActions: req.CanMembersPerformRunActions,
 	}
 
 	project, err := h.ah.UpdateProject(ctx, projectRef, areq)

diff --git a/internal/services/configstore/db/ddl.go b/internal/services/configstore/db/ddl.go
diff --git a/internal/services/configstore/db/dml.go b/internal/services/configstore/db/dml.go