#!/usr/bin/env bash

die() { echo -e "\nERROR:" "$@" ; kill $$ ; exit 1 ; } # error_message

q() { "$@" > /dev/null 2>&1 ; } # cmd [args...]  # quiet a command

gssh() { ssh -x -p "$SSH_PORT" "$GERRIT_HOST" gerrit "$@" ; } # run a gerrit ssh command

create_test_users_and_group() {
    echo "Creating test users and group ..."
    gssh create-account "$NON_SECRET_USER" --full-name "$NON_SECRET_USER" \
           --email "$NON_SECRET_USER"@example.com --ssh-key - < ~/.ssh/id_rsa.pub

    gssh create-account "$UNTRUSTED_USER" --full-name "$UNTRUSTED_USER" \
        --email "$UNTRUSTED_USER"@example.com --ssh-key - < ~/.ssh/id_rsa.pub

    gssh create-group "Visible-All-Projects-Config" --member "$NON_SECRET_USER"

    local secret_user=$USER
    gssh create-group "$NON_SECRET_GROUP_NAME_WITHOUT_SPACE" \
        --member "$NON_SECRET_USER" --member "$secret_user"
    gssh create-group "\"$NON_SECRET_GROUP_NAME_WITH_SPACE\"" \
        --member "$NON_SECRET_USER" --member "$secret_user"
    gssh create-group "$SECRET_GROUP_NAME" --member "$secret_user"
}

setup_all_projects_repo() {
    echo "Updating All-Projects repo ..."

    local uuid=$(gssh ls-groups -v | awk '-F\t' '$1 == "Visible-All-Projects-Config" {print $2}')
    ( cd "$WORKSPACE"
      q git clone ssh://"$GERRIT_HOST":"$SSH_PORT"/All-Projects allProjects
      cd allProjects
      q git fetch origin refs/meta/config ; q git checkout FETCH_HEAD
      echo -e "$uuid\tVisible-All-Projects-Config" >> groups
      git config -f "project.config" \
          --add access."refs/meta/config".read "group Visible-All-Projects-Config"
      git config -f "project.config" \
          --add capability.viewTaskPaths "group Administrators"
#     After migrating to version 3.5, it is no longer feasible to assign read permissions to
#     Administrators for another user's ref. To address this, add the 'accessDatabase' capability,
#     allowing admins to read the user ref of other users
      git config -f "project.config" \
                --add capability.accessDatabase "group Administrators"
      q git add . && q git commit -m "project config update"
      q git push origin HEAD:refs/meta/config
    )
}

SSH_PORT=29418
USER_RUN_TESTS_DIR="$USER_HOME"/"$RUN_TESTS_DIR"
while (( "$#" )) ; do
   case "$1" in
       --non-secret-user)                 shift ; NON_SECRET_USER="$1" ;;
       --untrusted-user)                  shift ; UNTRUSTED_USER="$1" ;;
       --non-secret-group-without-space)  shift ; NON_SECRET_GROUP_NAME_WITHOUT_SPACE="$1" ;;
       --non-secret-group-with-space)     shift ; NON_SECRET_GROUP_NAME_WITH_SPACE="$1" ;;
       --secret-group)                    shift ; SECRET_GROUP_NAME="$1" ;;
       *)                                 die "invalid argument '$1'" ;;
   esac
   shift
done

[ -z "$NON_SECRET_USER" ] && die "non-secret-user not set"
[ -z "$UNTRUSTED_USER" ] && die "untrusted-user not set"
[ -z "$NON_SECRET_GROUP_NAME_WITHOUT_SPACE" ] && die "non-secret-group-without-space not set"
[ -z "$NON_SECRET_GROUP_NAME_WITH_SPACE" ] && die "non-secret-group-with-space not set"
[ -z "$SECRET_GROUP_NAME" ] && die "secret-group not set"

"$USER_RUN_TESTS_DIR"/create-test-project-and-changes.sh
"$USER_RUN_TESTS_DIR"/update-all-users-project.sh
create_test_users_and_group
setup_all_projects_repo