diff options
Diffstat (limited to 'java/com/google/gerrit/server/schema/AclUtil.java')
-rw-r--r-- | java/com/google/gerrit/server/schema/AclUtil.java | 108 |
1 files changed, 108 insertions, 0 deletions
diff --git a/java/com/google/gerrit/server/schema/AclUtil.java b/java/com/google/gerrit/server/schema/AclUtil.java new file mode 100644 index 0000000000..f0aafef42a --- /dev/null +++ b/java/com/google/gerrit/server/schema/AclUtil.java @@ -0,0 +1,108 @@ +// Copyright (C) 2015 The Android Open Source Project +// +// Licensed under the Apache License, Version 2.0 (the "License"); +// you may not use this file except in compliance with the License. +// You may obtain a copy of the License at +// +// http://www.apache.org/licenses/LICENSE-2.0 +// +// Unless required by applicable law or agreed to in writing, software +// distributed under the License is distributed on an "AS IS" BASIS, +// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +// See the License for the specific language governing permissions and +// limitations under the License. + +package com.google.gerrit.server.schema; + +import com.google.gerrit.common.data.AccessSection; +import com.google.gerrit.common.data.GroupReference; +import com.google.gerrit.common.data.LabelType; +import com.google.gerrit.common.data.Permission; +import com.google.gerrit.common.data.PermissionRule; +import com.google.gerrit.server.project.ProjectConfig; + +/** + * Contains functions to modify permissions. For all these functions, any of the groups may be null + * in which case it is ignored. + */ +public class AclUtil { + public static void grant( + ProjectConfig config, AccessSection section, String permission, GroupReference... groupList) { + grant(config, section, permission, false, groupList); + } + + public static void grant( + ProjectConfig config, + AccessSection section, + String permission, + boolean force, + GroupReference... groupList) { + grant(config, section, permission, force, null, groupList); + } + + public static void grant( + ProjectConfig config, + AccessSection section, + String permission, + boolean force, + Boolean exclusive, + GroupReference... groupList) { + Permission p = section.getPermission(permission, true); + if (exclusive != null) { + p.setExclusiveGroup(exclusive); + } + for (GroupReference group : groupList) { + if (group != null) { + PermissionRule r = rule(config, group); + r.setForce(force); + p.add(r); + } + } + } + + public static void block( + ProjectConfig config, AccessSection section, String permission, GroupReference... groupList) { + Permission p = section.getPermission(permission, true); + for (GroupReference group : groupList) { + if (group != null) { + PermissionRule r = rule(config, group); + r.setBlock(); + p.add(r); + } + } + } + + public static void grant( + ProjectConfig config, + AccessSection section, + LabelType type, + int min, + int max, + GroupReference... groupList) { + grant(config, section, type, min, max, false, groupList); + } + + public static void grant( + ProjectConfig config, + AccessSection section, + LabelType type, + int min, + int max, + boolean exclusive, + GroupReference... groupList) { + String name = Permission.LABEL + type.getName(); + Permission p = section.getPermission(name, true); + p.setExclusiveGroup(exclusive); + for (GroupReference group : groupList) { + if (group != null) { + PermissionRule r = rule(config, group); + r.setRange(min, max); + p.add(r); + } + } + } + + public static PermissionRule rule(ProjectConfig config, GroupReference group) { + return new PermissionRule(config.resolve(group)); + } +} |