mirror of
https://github.com/overleaf/overleaf.git
synced 2024-09-16 02:52:31 -04:00
0bf807fa9f
It was used as a kind of access control check, but it's clearer if the check is in the only controller that actually needs it.
93 lines
3.7 KiB
CoffeeScript
93 lines
3.7 KiB
CoffeeScript
SubscriptionGroupHandler = require("./SubscriptionGroupHandler")
|
|
logger = require("logger-sharelatex")
|
|
SubscriptionLocator = require("./SubscriptionLocator")
|
|
ErrorsController = require("../Errors/ErrorController")
|
|
SubscriptionDomainHandler = require("./SubscriptionDomainHandler")
|
|
AuthenticationController = require('../Authentication/AuthenticationController')
|
|
_ = require("underscore")
|
|
async = require("async")
|
|
|
|
module.exports =
|
|
|
|
addUserToGroup: (req, res, next)->
|
|
adminUserId = AuthenticationController.getLoggedInUserId(req)
|
|
newEmail = req.body?.email?.toLowerCase()?.trim()
|
|
|
|
getManagedSubscription adminUserId, (error, subscription) ->
|
|
return next(error) if error?
|
|
|
|
logger.log adminUserId:adminUserId, newEmail:newEmail, "adding user to group subscription"
|
|
|
|
SubscriptionGroupHandler.addUserToGroup subscription._id, newEmail, (err, user)->
|
|
if err?
|
|
logger.err err:err, newEmail:newEmail, adminUserId:adminUserId, "error adding user from group"
|
|
return res.sendStatus 500
|
|
result =
|
|
user:user
|
|
if err and err.limitReached
|
|
result.limitReached = true
|
|
res.json(result)
|
|
|
|
removeUserFromGroup: (req, res, next)->
|
|
adminUserId = AuthenticationController.getLoggedInUserId(req)
|
|
userToRemove_id = req.params.user_id
|
|
getManagedSubscription adminUserId, (error, subscription) ->
|
|
return next(error) if error?
|
|
logger.log adminUserId:adminUserId, userToRemove_id:userToRemove_id, "removing user from group subscription"
|
|
SubscriptionGroupHandler.removeUserFromGroup subscription._id, userToRemove_id, (err)->
|
|
if err?
|
|
logger.err err:err, adminUserId:adminUserId, userToRemove_id:userToRemove_id, "error removing user from group"
|
|
return res.sendStatus 500
|
|
res.send()
|
|
|
|
removeSelfFromGroup: (req, res, next)->
|
|
adminUserId = req.query.admin_user_id
|
|
userToRemove_id = AuthenticationController.getLoggedInUserId(req)
|
|
getManagedSubscription adminUserId, (error, subscription) ->
|
|
return next(error) if error?
|
|
logger.log adminUserId:adminUserId, userToRemove_id:userToRemove_id, "removing user from group subscription after self request"
|
|
SubscriptionGroupHandler.removeUserFromGroup subscription._id, userToRemove_id, (err)->
|
|
if err?
|
|
logger.err err:err, userToRemove_id:userToRemove_id, adminUserId:adminUserId, "error removing self from group"
|
|
return res.sendStatus 500
|
|
res.send()
|
|
|
|
renderSubscriptionGroupAdminPage: (req, res, next)->
|
|
user_id = AuthenticationController.getLoggedInUserId(req)
|
|
getManagedSubscription user_id, (error, subscription)->
|
|
return next(error) if error?
|
|
if !subscription?.groupPlan
|
|
return res.redirect("/user/subscription")
|
|
SubscriptionGroupHandler.getPopulatedListOfMembers subscription._id, (err, users)->
|
|
res.render "subscriptions/group_admin",
|
|
title: 'group_admin'
|
|
users: users
|
|
subscription: subscription
|
|
|
|
exportGroupCsv: (req, res)->
|
|
user_id = AuthenticationController.getLoggedInUserId(req)
|
|
logger.log user_id: user_id, "exporting group csv"
|
|
getManagedSubscription user_id, (err, subscription)->
|
|
return next(error) if error?
|
|
if !subscription.groupPlan
|
|
return res.redirect("/")
|
|
SubscriptionGroupHandler.getPopulatedListOfMembers subscription._id, (err, users)->
|
|
groupCsv = ""
|
|
for user in users
|
|
groupCsv += user.email + "\n"
|
|
res.header(
|
|
"Content-Disposition",
|
|
"attachment; filename=Group.csv"
|
|
)
|
|
res.contentType('text/csv')
|
|
res.send(groupCsv)
|
|
|
|
|
|
getManagedSubscription = (managerId, callback) ->
|
|
SubscriptionLocator.findManagedSubscription managerId, (err, subscription)->
|
|
if subscription?
|
|
logger.log managerId: managerId, "got managed subscription"
|
|
else
|
|
err ||= new Error("No subscription found managed by user #{managerId}")
|
|
|
|
return callback(err, subscription)
|