openproject/app/controllers/groups_controller.rb

#-- encoding: UTF-8

#-- copyright
# OpenProject is an open source project management software.
# Copyright (C) 2012-2021 the OpenProject GmbH
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License version 3.
#
# OpenProject is a fork of ChiliProject, which is a fork of Redmine. The copyright follows:
# Copyright (C) 2006-2013 Jean-Philippe Lang
# Copyright (C) 2010-2013 the ChiliProject Team
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
#
# See docs/COPYRIGHT.rdoc for more details.
#++

class GroupsController < ApplicationController
  include GroupsHelper
  layout 'admin'

  helper_method :gon

  before_action :require_admin, except: %i[show]
  before_action :find_group, only: %i[destroy update show create_memberships destroy_membership
                                      edit_membership add_users]

  # GET /groups
  # GET /groups.xml
  def index
    @groups = Group.order(Arel.sql('lastname ASC'))

    respond_to do |format|
      format.html # index.html.erb
      format.xml { render xml: @groups }
    end
  end

  # GET /groups/1
  # GET /groups/1.xml
  def show
    respond_to do |format|
      format.html do
        @group_users = group_members
        render layout: 'no_menu'
      end
      format.xml { render xml: @group }
    end
  end

  # GET /groups/new
  # GET /groups/new.xml
  def new
    @group = Group.new

    respond_to do |format|
      format.html # new.html.erb
      format.xml  { render xml: @group }
    end
  end

  # GET /groups/1/edit
  def edit
    @group = Group.includes(:members, :users).find(params[:id])

    set_filters_for_user_autocompleter
  end

  # POST /groups
  # POST /groups.xml
  def create
    service_call = Groups::CreateService
                     .new(user: current_user)
                     .call(permitted_params.group)

    @group = service_call.result

    respond_to do |format|
      if service_call.success?
        flash[:notice] = I18n.t(:notice_successful_create)
        format.html { redirect_to(groups_path) }
        format.xml  { render xml: @group, status: :created, location: @group }
      else
        format.html { render action: :new }
        format.xml  { render xml: service_call.errors, status: :unprocessable_entity }
      end
    end
  end

  # PUT /groups/1
  # PUT /groups/1.xml
  def update
    service_call = Groups::UpdateService
                   .new(user: current_user, model: @group)
                   .call(permitted_params.group)

    respond_to do |format|
      if service_call.success?
        flash[:notice] = I18n.t(:notice_successful_update)
        format.html { redirect_to(groups_path) }
        format.xml  { head :ok }
      else
        format.html { render action: 'edit' }
        format.xml  { render xml: service_call.errors, status: :unprocessable_entity }
      end
    end
  end

  # DELETE /groups/1
  # DELETE /groups/1.xml
  def destroy
    Groups::DeleteService
      .new(user: current_user, model: @group)
      .call

    respond_to do |format|
      format.html do
        flash[:info] = I18n.t(:notice_deletion_scheduled)
        redirect_to(action: :index)
      end
      format.xml { head 202 }
    end
  end

  def add_users
    service_call = Groups::UpdateService
                   .new(user: current_user, model: @group)
                   .call(user_ids: @group.user_ids + Array(params[:user_ids]).map(&:to_i))

    respond_users_altered(service_call)
  end

  def remove_user
    @group = Group.includes(:group_users).find(params[:id])

    service_call = Groups::UpdateService
                   .new(user: current_user, model: @group)
                   .call(user_ids: @group.user_ids - Array(params[:user_id]).map(&:to_i))

    respond_users_altered(service_call)
  end

  def create_memberships
    membership_params = permitted_params.group_membership[:new_membership]

    service_call = Members::CreateService
                   .new(user: current_user)
                   .call(membership_params.merge(principal: @group))

    respond_membership_altered(service_call)
  end

  def edit_membership
    membership_params = permitted_params.group_membership

    @membership = Member.find(membership_params[:membership_id])

    service_call = Members::UpdateService
                   .new(model: @membership, user: current_user)
                   .call(membership_params[:membership])

    respond_membership_altered(service_call)
  end

  def destroy_membership
    Members::DeleteService
      .new(model: Member.find(params[:membership_id]), user: current_user)
      .call

    flash[:notice] = I18n.t :notice_successful_delete
    redirect_to controller: '/groups', action: 'edit', id: @group, tab: 'memberships'
  end

  protected

  def find_group
    @group = Group.find(params[:id])
  end

  def group_members
    if visible_group_members?
      @group.users
    else
      User.none
    end
  end

  def visible_group_members?
    current_user.allowed_to_globally?(:manage_members) ||
      Group.in_project(Project.allowed_to(current_user, :view_members)).exists?
  end

  def default_breadcrumb
    if action_name == 'index' || !current_user.admin?
      t('label_group_plural')
    else
      ActionController::Base.helpers.link_to(t('label_group_plural'), groups_path)
    end
  end

  def show_local_breadcrumb
    true
  end

  def respond_membership_altered(service_call)
    if service_call.success?
      flash[:notice] = I18n.t :notice_successful_update
    else
      flash[:error] = service_call.errors.full_messages.join("\n")
    end

    redirect_to controller: '/groups', action: 'edit', id: @group, tab: 'memberships'
  end

  def respond_users_altered(service_call)
    if service_call.success?
      flash[:notice] = I18n.t(:notice_successful_update)
    else
      service_call.apply_flash_message!(flash)
    end

    redirect_to controller: '/groups', action: 'edit', id: @group, tab: 'users'
  end
end