From 3f19a59c18996b083d3392d0d4dca3a60ccb1c81 Mon Sep 17 00:00:00 2001 From: Pierre-Yves Chibon Date: Aug 23 2017 17:06:12 +0000 Subject: Add a configuration key to allow deleting forks but not projects Fixes https://pagure.io/pagure/issue/2460 Fixes https://pagure.io/fedora-infrastructure/issue/6271 Signed-off-by: Pierre-Yves Chibon --- diff --git a/doc/configuration.rst b/doc/configuration.rst index 629f7f5..671b734 100644 --- a/doc/configuration.rst +++ b/doc/configuration.rst @@ -639,6 +639,15 @@ the user interface of this pagure instance. Defaults to: ``True`` +ENABLE_DEL_FORKS +~~~~~~~~~~~~~~~~ + +This configuration key permits or forbids deletion of forks via +the user interface of this pagure instance. + +Defaults to: ``ENABLE_DEL_PROJECTS`` + + EMAIL_SEND ~~~~~~~~~~ diff --git a/pagure/templates/settings.html b/pagure/templates/settings.html index 72843ca..5aa325b 100644 --- a/pagure/templates/settings.html +++ b/pagure/templates/settings.html @@ -1090,7 +1090,10 @@ {% endif %} - {% if config.get('ENABLE_DEL_PROJECTS', True) %} + {% if (not repo.is_fork and config.get('ENABLE_DEL_PROJECTS', True)) + or + (repo.is_fork and not config.get('ENABLE_DEL_FORKS', + config.get('ENABLE_DEL_PROJECTS', True))) %}
diff --git a/pagure/ui/repo.py b/pagure/ui/repo.py index 8e4a451..e9e8038 100644 --- a/pagure/ui/repo.py +++ b/pagure/ui/repo.py @@ -1394,7 +1394,12 @@ def change_ref_head(repo, username=None, namespace=None): def delete_repo(repo, username=None, namespace=None): """ Delete the present project. """ - if not pagure.APP.config.get('ENABLE_DEL_PROJECTS', True): + repo = flask.g.repo + + del_project = pagure.APP.config.get('ENABLE_DEL_PROJECTS', True) + del_fork = pagure.APP.config.get('ENABLE_DEL_FORKS', del_project) + if (not repo.is_fork and not del_project) \ + or (repo.is_fork and not del_fork): flask.abort(404) if admin_session_timedout(): @@ -1405,8 +1410,6 @@ def delete_repo(repo, username=None, namespace=None): return flask.redirect( flask.url_for('auth_login', next=url)) - repo = flask.g.repo - if not flask.g.repo_admin: flask.abort( 403, diff --git a/tests/test_pagure_flask_ui_repo_delete_project.py b/tests/test_pagure_flask_ui_repo_delete_project.py new file mode 100644 index 0000000..b26e508 --- /dev/null +++ b/tests/test_pagure_flask_ui_repo_delete_project.py @@ -0,0 +1,127 @@ +# -*- coding: utf-8 -*- + +""" + (c) 2017 - Copyright Red Hat Inc + + Authors: + Pierre-Yves Chibon + +""" + +__requires__ = ['SQLAlchemy >= 0.8'] +import pkg_resources + +import sys +import os + +from mock import patch, MagicMock + +sys.path.insert(0, os.path.join(os.path.dirname( + os.path.abspath(__file__)), '..')) + +import pagure +import pagure.lib +import tests + + +class PagureFlaskDeleteRepotests(tests.Modeltests): + """ Tests for deleting a project in pagure """ + + def setUp(self): + """ Set up the environnment, ran before every tests. """ + super(PagureFlaskDeleteRepotests, self).setUp() + + pagure.APP.config['TESTING'] = True + pagure.SESSION = self.session + pagure.ui.SESSION = self.session + pagure.ui.app.SESSION = self.session + pagure.ui.filters.SESSION = self.session + pagure.ui.repo.SESSION = self.session + + # Create some projects + tests.create_projects(self.session) + tests.create_projects_git(os.path.join(self.path, 'repos')) + self.session.commit() + + # Create all the git repos + tests.create_projects_git(os.path.join(self.path, 'repos')) + tests.create_projects_git(os.path.join(self.path, 'docs')) + tests.create_projects_git( + os.path.join(self.path, 'tickets'), bare=True) + tests.create_projects_git( + os.path.join(self.path, 'requests'), bare=True) + + project = pagure.get_authorized_project( + self.session, project_name='test') + self.assertIsNotNone(project) + + # Create a fork + task_id = pagure.lib.fork_project( + session=self.session, + user='pingou', + repo=project, + gitfolder=os.path.join(self.path, 'repos'), + docfolder=os.path.join(self.path, 'docs'), + ticketfolder=os.path.join(self.path, 'tickets'), + requestfolder=os.path.join(self.path, 'requests'), + ) + pagure.lib.tasks.get_result(task_id).get() + + # Ensure everything was correctly created + projects = pagure.lib.search_projects(self.session) + self.assertEqual(len(projects), 4) + + @patch.dict('pagure.APP.config', {'ENABLE_DEL_PROJECTS': False}) + @patch('pagure.lib.notify.send_email', MagicMock(return_value=True)) + @patch('pagure.ui.repo.admin_session_timedout', + MagicMock(return_value=False)) + def test_delete_repo_when_turned_off(self): + """ Test the delete_repo endpoint for a fork when only deleting main + project is forbidden. + """ + + user = tests.FakeUser(username='pingou') + with tests.user_set(pagure.APP, user): + output = self.app.post('/test/delete', follow_redirects=True) + self.assertEqual(output.status_code, 404) + + projects = pagure.lib.search_projects(self.session) + self.assertEqual(len(projects), 4) + + @patch.dict('pagure.APP.config', {'ENABLE_DEL_PROJECTS': False}) + @patch.dict('pagure.APP.config', {'ENABLE_DEL_FORKS': True}) + @patch('pagure.lib.notify.send_email', MagicMock(return_value=True)) + @patch('pagure.ui.repo.admin_session_timedout', + MagicMock(return_value=False)) + def test_delete_fork_when_project_off(self): + """ Test the delete_repo endpoint for a fork when only deleting main + project is forbidden. + """ + + user = tests.FakeUser(username='pingou') + with tests.user_set(pagure.APP, user): + output = self.app.post( + '/fork/pingou/test/delete', follow_redirects=True) + self.assertEqual(output.status_code, 200) + + projects = pagure.lib.search_projects(self.session) + self.assertEqual(len(projects), 3) + + @patch.dict('pagure.APP.config', {'ENABLE_DEL_PROJECTS': False}) + @patch.dict('pagure.APP.config', {'ENABLE_DEL_FORKS': False}) + @patch('pagure.lib.notify.send_email', MagicMock(return_value=True)) + @patch('pagure.ui.repo.admin_session_timedout', + MagicMock(return_value=False)) + def test_delete_fork_when_fork_and_project_off(self): + """ Test the delete_repo endpoint for a fork when deleting fork and + project is forbidden. + """ + + user = tests.FakeUser(username='pingou') + with tests.user_set(pagure.APP, user): + output = self.app.post( + '/fork/pingou/test/delete', follow_redirects=True) + self.assertEqual(output.status_code, 404) + + projects = pagure.lib.search_projects(self.session) + self.assertEqual(len(projects), 4)