| // Copyright (C) 2017 The Android Open Source Project |
| // |
| // Licensed under the Apache License, Version 2.0 (the "License"); |
| // you may not use this file except in compliance with the License. |
| // You may obtain a copy of the License at |
| // |
| // http://www.apache.org/licenses/LICENSE-2.0 |
| // |
| // Unless required by applicable law or agreed to in writing, software |
| // distributed under the License is distributed on an "AS IS" BASIS, |
| // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| // See the License for the specific language governing permissions and |
| // limitations under the License. |
| |
| package com.google.gerrit.server.project; |
| |
| import static java.util.stream.Collectors.toList; |
| |
| import com.google.common.collect.ArrayListMultimap; |
| import com.google.common.collect.Multimap; |
| import com.google.gerrit.entities.Project; |
| import com.google.gerrit.extensions.common.ProjectInfo; |
| import com.google.gerrit.server.config.AllProjectsName; |
| import com.google.gerrit.server.permissions.PermissionBackend; |
| import com.google.gerrit.server.permissions.PermissionBackendException; |
| import com.google.gerrit.server.permissions.ProjectPermission; |
| import com.google.inject.Inject; |
| import com.google.inject.Singleton; |
| import java.util.ArrayList; |
| import java.util.HashMap; |
| import java.util.List; |
| import java.util.Map; |
| |
| /** Retrieve child projects (ie. projects whose access inherits from a given parent.) */ |
| @Singleton |
| public class ChildProjects { |
| private final ProjectCache projectCache; |
| private final PermissionBackend permissionBackend; |
| private final AllProjectsName allProjects; |
| private final ProjectJson json; |
| |
| @Inject |
| ChildProjects( |
| ProjectCache projectCache, |
| PermissionBackend permissionBackend, |
| AllProjectsName allProjectsName, |
| ProjectJson json) { |
| this.projectCache = projectCache; |
| this.permissionBackend = permissionBackend; |
| this.allProjects = allProjectsName; |
| this.json = json; |
| } |
| |
| /** Gets all child projects recursively. */ |
| public List<ProjectInfo> list(Project.NameKey parent) throws PermissionBackendException { |
| Map<Project.NameKey, Project> projects = readAllReadableProjects(); |
| Multimap<Project.NameKey, Project.NameKey> children = parentToChildren(projects); |
| PermissionBackend.WithUser perm = permissionBackend.currentUser(); |
| |
| List<ProjectInfo> results = new ArrayList<>(); |
| depthFirstFormat(results, perm, projects, children, parent); |
| return results; |
| } |
| |
| private Map<Project.NameKey, Project> readAllReadableProjects() { |
| Map<Project.NameKey, Project> projects = new HashMap<>(); |
| for (Project.NameKey name : projectCache.all()) { |
| |
| ProjectState c = |
| projectCache |
| .get(name) |
| .orElseThrow( |
| () -> |
| new IllegalStateException( |
| "race while traversing projects. got " |
| + name |
| + " when loading all projects, but can't load it now")); |
| if (c != null && c.statePermitsRead()) { |
| projects.put(c.getNameKey(), c.getProject()); |
| } |
| } |
| return projects; |
| } |
| |
| /** Map of parent project to direct child. */ |
| private Multimap<Project.NameKey, Project.NameKey> parentToChildren( |
| Map<Project.NameKey, Project> projects) { |
| Multimap<Project.NameKey, Project.NameKey> m = ArrayListMultimap.create(); |
| for (Map.Entry<Project.NameKey, Project> e : projects.entrySet()) { |
| if (!allProjects.equals(e.getKey())) { |
| m.put(e.getValue().getParent(allProjects), e.getKey()); |
| } |
| } |
| return m; |
| } |
| |
| private void depthFirstFormat( |
| List<ProjectInfo> results, |
| PermissionBackend.WithUser perm, |
| Map<Project.NameKey, Project> projects, |
| Multimap<Project.NameKey, Project.NameKey> children, |
| Project.NameKey parent) |
| throws PermissionBackendException { |
| List<Project.NameKey> canSee = |
| perm.filter(ProjectPermission.ACCESS, children.get(parent)).stream() |
| .sorted() |
| .collect(toList()); |
| children.removeAll(parent); // removing all entries prevents cycles. |
| |
| for (Project.NameKey c : canSee) { |
| results.add(json.format(projects.get(c))); |
| depthFirstFormat(results, perm, projects, children, c); |
| } |
| } |
| } |