openproject/app/controllers/groups_controller.rb

#-- encoding: UTF-8
#-- copyright
# OpenProject is an open source project management software.
# Copyright (C) 2012-2021 the OpenProject GmbH
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License version 3.
#
# OpenProject is a fork of ChiliProject, which is a fork of Redmine. The copyright follows:
# Copyright (C) 2006-2013 Jean-Philippe Lang
# Copyright (C) 2010-2013 the ChiliProject Team
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
#
# See docs/COPYRIGHT.rdoc for more details.
#++

class GroupsController < ApplicationController
  include GroupsHelper
  layout 'admin'

  helper_method :gon

  before_action :require_admin, except: %i[show]
  before_action :find_group, only: %i[destroy show create_memberships destroy_membership
                                      edit_membership add_users]

  def index
    @groups = Group.order(Arel.sql('lastname ASC'))
  end

  def show
    @group_users = group_members
    render layout: 'no_menu'
  end

  def new
    @group = Group.new
  end

  def edit
    @group = Group.includes(:members, :users).find(params[:id])

    set_filters_for_user_autocompleter
  end

  def create
    @group = Group.new permitted_params.group

    if @group.save
      flash[:notice] = I18n.t(:notice_successful_create)
      redirect_to(groups_path)
    else
      render action: :new
    end
  end

  def update
    @group = Group.includes(:users).find(params[:id])

    if @group.update(permitted_params.group)
      flash[:notice] = I18n.t(:notice_successful_update)
      redirect_to action: :index
    else
      render action: :edit
    end
  end

  def destroy
    @group.destroy

    flash[:notice] = I18n.t(:notice_successful_delete)
    redirect_to action: :index
  end

  def add_users
    call = @group
      .add_members!(User.where(id: params[:user_ids]).pluck(:id))

    if call.success?
      flash[:notice] = I18n.t(:notice_successful_update)
    else
      call.apply_flash_message!(flash)
    end

    redirect_to controller: '/groups', action: 'edit', id: @group, tab: 'users'
  end

  def remove_user
    @group = Group.includes(:users).find(params[:id])
    @group.users.delete(User.includes(:memberships).find(params[:user_id]))

    I18n.t :notice_successful_update
    redirect_to controller: '/groups', action: 'edit', id: @group, tab: 'users'
  end

  def create_memberships
    membership_params = permitted_params.group_membership
    membership_id = membership_params[:membership_id]

    if membership_id.present?
      key = :membership
      @membership = Member.find(membership_id)
    else
      key = :new_membership
      @membership = Member.new(principal: @group)
    end

    service = ::Members::EditMembershipService.new(@membership, save: true, current_user: current_user)
    result = service.call(attributes: membership_params[key])

    if result.success?
      flash[:notice] = I18n.t :notice_successful_update
    else
      flash[:error] = result.errors.full_messages.join("\n")
    end
    redirect_to controller: '/groups', action: 'edit', id: @group, tab: 'memberships'
  end

  alias :edit_membership :create_memberships

  def destroy_membership
    membership_params = permitted_params.group_membership
    Member.find(membership_params[:membership_id]).destroy

    flash[:notice] = I18n.t :notice_successful_delete
    redirect_to controller: '/groups', action: 'edit', id: @group, tab: 'memberships'
  end

  protected

  def find_group
    @group = Group.find(params[:id])
  end

  def group_members
    if visible_group_members?
      @group.users
    else
      User.none
    end
  end

  def visible_group_members?
    current_user.allowed_to_globally?(:manage_members) ||
      Group.in_project(Project.allowed_to(current_user, :view_members)).exists?
  end

  def default_breadcrumb
    if action_name == 'index' || !current_user.admin?
      t('label_group_plural')
    else
      ActionController::Base.helpers.link_to(t('label_group_plural'), groups_path)
    end
  end

  def show_local_breadcrumb
    true
  end
end