mirror of
https://github.com/go-gitea/gitea.git
synced 2026-08-18 09:18:04 +09:00
ed4a23e893
Admin and write team authorize now grant that mode on every unit, including units added later, instead of only rows present in `team_unit`. Granular teams keep `authorize=none` and explicit unit rows. Closes the `TEAM-UNIT-PERMISSION` design gap from https://github.com/go-gitea/gitea/pull/34128. Maybe also fix #15962 (actually maybe it had been fixed before, the root cause is out-of-sync "access" table) ## Screenshots only writing selected: <img width="1399" height="1007" alt="image" src="https://github.com/user-attachments/assets/1d1b4c49-a59a-47b6-998f-0464a067395b" /> _Created with the help of AI_ --------- Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
90 lines
4.7 KiB
Go
90 lines
4.7 KiB
Go
// Copyright 2016 The Gogs Authors. All rights reserved.
|
|
// Copyright 2018 The Gitea Authors. All rights reserved.
|
|
// SPDX-License-Identifier: MIT
|
|
|
|
package structs
|
|
|
|
// TeamVisibility controls who can list a team within its organization.
|
|
// - "public": visible to any signed-in user (still bounded by org visibility)
|
|
// - "limited": visible to any member of the parent organization
|
|
// - "private": visible only to team members and org owners
|
|
//
|
|
// swagger:enum TeamVisibility
|
|
type TeamVisibility string
|
|
|
|
const (
|
|
TeamVisibilityPublic TeamVisibility = "public"
|
|
TeamVisibilityLimited TeamVisibility = "limited"
|
|
TeamVisibilityPrivate TeamVisibility = "private"
|
|
)
|
|
|
|
// Team represents a team in an organization
|
|
type Team struct {
|
|
// The unique identifier of the team
|
|
ID int64 `json:"id"`
|
|
// The name of the team
|
|
Name string `json:"name"`
|
|
// The description of the team
|
|
Description string `json:"description"`
|
|
// The organization that the team belongs to
|
|
Organization *Organization `json:"organization"`
|
|
// Whether the team has access to all repositories in the organization
|
|
IncludesAllRepositories bool `json:"includes_all_repositories"`
|
|
Permission AccessLevelName `json:"permission"`
|
|
// example: ["repo.code","repo.issues","repo.ext_issues","repo.wiki","repo.pulls","repo.releases","repo.projects","repo.ext_wiki"]
|
|
// Deprecated: This variable should be replaced by UnitsMap and will be dropped in later versions.
|
|
Units []string `json:"units"`
|
|
// example: {"repo.code":"read","repo.issues":"write","repo.ext_issues":"none","repo.wiki":"admin","repo.pulls":"owner","repo.releases":"none","repo.projects":"none","repo.ext_wiki":"none"}
|
|
UnitsMap map[string]string `json:"units_map"`
|
|
// Whether the team can create repositories in the organization
|
|
CanCreateOrgRepo bool `json:"can_create_org_repo"`
|
|
// Team visibility within the organization. "private" teams are only
|
|
// listable by members and org owners; "limited" teams are listable by
|
|
// any organization member; "public" teams are listable by any signed-in
|
|
// user.
|
|
Visibility TeamVisibility `json:"visibility"`
|
|
}
|
|
|
|
// CreateTeamOption options for creating a team
|
|
type CreateTeamOption struct {
|
|
// required: true
|
|
Name string `json:"name" binding:"Required;AlphaDashDot;MaxSize(255)"`
|
|
// The description of the team
|
|
Description string `json:"description" binding:"MaxSize(255)"`
|
|
// Whether the team has access to all repositories in the organization
|
|
IncludesAllRepositories bool `json:"includes_all_repositories"`
|
|
// All units have this permission (read/write/admin)
|
|
Permission RepoWritePermission `json:"permission"`
|
|
// example: ["repo.actions","repo.packages","repo.code","repo.issues","repo.ext_issues","repo.wiki","repo.pulls","repo.releases","repo.projects","repo.ext_wiki"]
|
|
// Deprecated: This variable should be replaced by UnitsMap and will be dropped in later versions.
|
|
Units []string `json:"units"`
|
|
// example: {"repo.actions":"read","repo.packages":"read","repo.code":"read","repo.issues":"write","repo.ext_issues":"none","repo.wiki":"admin","repo.pulls":"owner","repo.releases":"none","repo.projects":"none","repo.ext_wiki":"none"}
|
|
UnitsMap map[string]string `json:"units_map"`
|
|
// Whether the team can create repositories in the organization
|
|
CanCreateOrgRepo bool `json:"can_create_org_repo"`
|
|
// Team visibility within the organization. Defaults to "private".
|
|
Visibility TeamVisibility `json:"visibility" binding:"OmitEmpty;In(public,limited,private)"`
|
|
}
|
|
|
|
// EditTeamOption options for editing a team
|
|
type EditTeamOption struct {
|
|
// required: true
|
|
Name string `json:"name" binding:"AlphaDashDot;MaxSize(255)"`
|
|
// The description of the team
|
|
Description *string `json:"description" binding:"MaxSize(255)"`
|
|
// Whether the team has access to all repositories in the organization
|
|
IncludesAllRepositories *bool `json:"includes_all_repositories"`
|
|
// All units have this permission (read/write/admin)
|
|
Permission RepoWritePermission `json:"permission"`
|
|
// example: ["repo.code","repo.issues","repo.ext_issues","repo.wiki","repo.pulls","repo.releases","repo.projects","repo.ext_wiki"]
|
|
// Deprecated: This variable should be replaced by UnitsMap and will be dropped in later versions.
|
|
Units []string `json:"units"`
|
|
// example: {"repo.code":"read","repo.issues":"write","repo.ext_issues":"none","repo.wiki":"admin","repo.pulls":"owner","repo.releases":"none","repo.projects":"none","repo.ext_wiki":"none"}
|
|
UnitsMap map[string]string `json:"units_map"`
|
|
// Whether the team can create repositories in the organization
|
|
CanCreateOrgRepo *bool `json:"can_create_org_repo"`
|
|
// Team visibility within the organization. When omitted, visibility is
|
|
// left unchanged.
|
|
Visibility *TeamVisibility `json:"visibility" binding:"OmitEmpty;In(public,limited,private)"`
|
|
}
|