Similar to putting the account-related Versioned* classes in the account package near the code that uses them most closely. The fact that only a very few classes from the git package actually need to import ProjectConfig suggests they didn't really belong there. Change-Id: I36029c97348f7ea440470a577d9beea62a8b8f67
87 lines
3.5 KiB
Java
87 lines
3.5 KiB
Java
// Copyright (C) 2016 The Android Open Source Project
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
package com.google.gerrit.server.schema;
|
|
|
|
import static com.google.gerrit.server.group.SystemGroupBackend.REGISTERED_USERS;
|
|
import static com.google.gerrit.server.schema.AclUtil.grant;
|
|
|
|
import com.google.gerrit.common.data.AccessSection;
|
|
import com.google.gerrit.common.data.GroupReference;
|
|
import com.google.gerrit.common.data.Permission;
|
|
import com.google.gerrit.reviewdb.client.RefNames;
|
|
import com.google.gerrit.reviewdb.server.ReviewDb;
|
|
import com.google.gerrit.server.GerritPersonIdent;
|
|
import com.google.gerrit.server.config.AllUsersName;
|
|
import com.google.gerrit.server.extensions.events.GitReferenceUpdated;
|
|
import com.google.gerrit.server.git.GitRepositoryManager;
|
|
import com.google.gerrit.server.git.meta.MetaDataUpdate;
|
|
import com.google.gerrit.server.group.SystemGroupBackend;
|
|
import com.google.gerrit.server.project.ProjectConfig;
|
|
import com.google.gerrit.server.project.RefPattern;
|
|
import com.google.gwtorm.server.OrmException;
|
|
import com.google.inject.Inject;
|
|
import com.google.inject.Provider;
|
|
import java.io.IOException;
|
|
import org.eclipse.jgit.errors.ConfigInvalidException;
|
|
import org.eclipse.jgit.lib.PersonIdent;
|
|
import org.eclipse.jgit.lib.Repository;
|
|
|
|
public class Schema_126 extends SchemaVersion {
|
|
private static final String COMMIT_MSG = "Fix default permissions on user branches";
|
|
|
|
private final GitRepositoryManager repoManager;
|
|
private final AllUsersName allUsersName;
|
|
private final SystemGroupBackend systemGroupBackend;
|
|
private final PersonIdent serverUser;
|
|
|
|
@Inject
|
|
Schema_126(
|
|
Provider<Schema_125> prior,
|
|
GitRepositoryManager repoManager,
|
|
AllUsersName allUsersName,
|
|
SystemGroupBackend systemGroupBackend,
|
|
@GerritPersonIdent PersonIdent serverUser) {
|
|
super(prior);
|
|
this.repoManager = repoManager;
|
|
this.allUsersName = allUsersName;
|
|
this.systemGroupBackend = systemGroupBackend;
|
|
this.serverUser = serverUser;
|
|
}
|
|
|
|
@Override
|
|
protected void migrateData(ReviewDb db, UpdateUI ui) throws OrmException {
|
|
try (Repository git = repoManager.openRepository(allUsersName);
|
|
MetaDataUpdate md = new MetaDataUpdate(GitReferenceUpdated.DISABLED, allUsersName, git)) {
|
|
ProjectConfig config = ProjectConfig.read(md);
|
|
|
|
String refsUsersShardedId = RefNames.REFS_USERS + "${" + RefPattern.USERID_SHARDED + "}";
|
|
config.remove(config.getAccessSection(refsUsersShardedId));
|
|
|
|
GroupReference registered = systemGroupBackend.getGroup(REGISTERED_USERS);
|
|
AccessSection users = config.getAccessSection(refsUsersShardedId, true);
|
|
grant(config, users, Permission.READ, false, true, registered);
|
|
grant(config, users, Permission.PUSH, false, true, registered);
|
|
grant(config, users, Permission.SUBMIT, false, true, registered);
|
|
|
|
md.getCommitBuilder().setAuthor(serverUser);
|
|
md.getCommitBuilder().setCommitter(serverUser);
|
|
md.setMessage(COMMIT_MSG);
|
|
config.commit(md);
|
|
} catch (ConfigInvalidException | IOException ex) {
|
|
throw new OrmException(ex);
|
|
}
|
|
}
|
|
}
|