1 files changed, 56 insertions, 0 deletions

diff --git a/lib/api/users.rb b/lib/api/users.rb
index b0811bb4aad..b1657399cd8 100644
--- a/lib/api/users.rb
+++ b/lib/api/users.rb
@@ -14,11 +14,14 @@ module API
       end
 
       helpers do
+        # rubocop: disable CodeReuse/ActiveRecord
         def find_user_by_id(params)
           id = params[:user_id] || params[:id]
           User.find_by(id: id) || not_found!('User')
         end
+        # rubocop: enable CodeReuse/ActiveRecord
 
+        # rubocop: disable CodeReuse/ActiveRecord
         def reorder_users(users)
           if params[:order_by] && params[:sort]
             users.reorder(params[:order_by] => params[:sort])
@@ -26,6 +29,7 @@ module API
             users
           end
         end
+        # rubocop: enable CodeReuse/ActiveRecord
 
         params :optional_attributes do
           optional :skype, type: String, desc: 'The Skype username'
@@ -75,6 +79,7 @@ module API
         use :pagination
         use :with_custom_attributes
       end
+      # rubocop: disable CodeReuse/ActiveRecord
       get do
         authenticated_as_admin! if params[:external].present? || (params[:extern_uid].present? && params[:provider].present?)
 
@@ -102,6 +107,7 @@ module API
 
         present paginate(users), options
       end
+      # rubocop: enable CodeReuse/ActiveRecord
 
       desc 'Get a single user' do
         success Entities::User
@@ -111,6 +117,7 @@ module API
 
         use :with_custom_attributes
       end
+      # rubocop: disable CodeReuse/ActiveRecord
       get ":id" do
         user = User.find_by(id: params[:id])
         not_found!('User') unless user && can?(current_user, :read_user, user)
@@ -120,6 +127,7 @@ module API
 
         present user, opts
       end
+      # rubocop: enable CodeReuse/ActiveRecord
 
       desc "Get the status of a user"
       params do
@@ -145,6 +153,7 @@ module API
         requires :username, type: String, desc: 'The username of the user'
         use :optional_attributes
       end
+      # rubocop: disable CodeReuse/ActiveRecord
       post do
         authenticated_as_admin!
 
@@ -165,6 +174,7 @@ module API
           render_validation_error!(user)
         end
       end
+      # rubocop: enable CodeReuse/ActiveRecord
 
       desc 'Update a user. Available only for admins.' do
         success Entities::UserPublic
@@ -178,6 +188,7 @@ module API
         optional :username, type: String, desc: 'The username of the user'
         use :optional_attributes
       end
+      # rubocop: disable CodeReuse/ActiveRecord
       put ":id" do
         authenticated_as_admin!
 
@@ -216,6 +227,7 @@ module API
           render_validation_error!(user)
         end
       end
+      # rubocop: enable CodeReuse/ActiveRecord
 
       desc 'Add an SSH key to a specified user. Available only for admins.' do
         success Entities::SSHKey
@@ -225,6 +237,7 @@ module API
         requires :key, type: String, desc: 'The new SSH key'
         requires :title, type: String, desc: 'The title of the new SSH key'
       end
+      # rubocop: disable CodeReuse/ActiveRecord
       post ":id/keys" do
         authenticated_as_admin!
 
@@ -239,6 +252,7 @@ module API
           render_validation_error!(key)
         end
       end
+      # rubocop: enable CodeReuse/ActiveRecord
 
       desc 'Get the SSH keys of a specified user. Available only for admins.' do
         success Entities::SSHKey
@@ -247,6 +261,7 @@ module API
         requires :id, type: Integer, desc: 'The ID of the user'
         use :pagination
       end
+      # rubocop: disable CodeReuse/ActiveRecord
       get ':id/keys' do
         authenticated_as_admin!
 
@@ -255,6 +270,7 @@ module API
 
         present paginate(user.keys), with: Entities::SSHKey
       end
+      # rubocop: enable CodeReuse/ActiveRecord
 
       desc 'Delete an existing SSH key from a specified user. Available only for admins.' do
         success Entities::SSHKey
@@ -263,6 +279,7 @@ module API
         requires :id, type: Integer, desc: 'The ID of the user'
         requires :key_id, type: Integer, desc: 'The ID of the SSH key'
       end
+      # rubocop: disable CodeReuse/ActiveRecord
       delete ':id/keys/:key_id' do
         authenticated_as_admin!
 
@@ -274,6 +291,7 @@ module API
 
         destroy_conditionally!(key)
       end
+      # rubocop: enable CodeReuse/ActiveRecord
 
       desc 'Add a GPG key to a specified user. Available only for admins.' do
         detail 'This feature was added in GitLab 10.0'
@@ -283,6 +301,7 @@ module API
         requires :id, type: Integer, desc: 'The ID of the user'
         requires :key, type: String, desc: 'The new GPG key'
       end
+      # rubocop: disable CodeReuse/ActiveRecord
       post ':id/gpg_keys' do
         authenticated_as_admin!
 
@@ -297,6 +316,7 @@ module API
           render_validation_error!(key)
         end
       end
+      # rubocop: enable CodeReuse/ActiveRecord
 
       desc 'Get the GPG keys of a specified user. Available only for admins.' do
         detail 'This feature was added in GitLab 10.0'
@@ -306,6 +326,7 @@ module API
         requires :id, type: Integer, desc: 'The ID of the user'
         use :pagination
       end
+      # rubocop: disable CodeReuse/ActiveRecord
       get ':id/gpg_keys' do
         authenticated_as_admin!
 
@@ -314,6 +335,7 @@ module API
 
         present paginate(user.gpg_keys), with: Entities::GPGKey
       end
+      # rubocop: enable CodeReuse/ActiveRecord
 
       desc 'Delete an existing GPG key from a specified user. Available only for admins.' do
         detail 'This feature was added in GitLab 10.0'
@@ -322,6 +344,7 @@ module API
         requires :id, type: Integer, desc: 'The ID of the user'
         requires :key_id, type: Integer, desc: 'The ID of the GPG key'
       end
+      # rubocop: disable CodeReuse/ActiveRecord
       delete ':id/gpg_keys/:key_id' do
         authenticated_as_admin!
 
@@ -334,6 +357,7 @@ module API
         status 204
         key.destroy
       end
+      # rubocop: enable CodeReuse/ActiveRecord
 
       desc 'Revokes an existing GPG key from a specified user. Available only for admins.' do
         detail 'This feature was added in GitLab 10.0'
@@ -342,6 +366,7 @@ module API
         requires :id, type: Integer, desc: 'The ID of the user'
         requires :key_id, type: Integer, desc: 'The ID of the GPG key'
       end
+      # rubocop: disable CodeReuse/ActiveRecord
       post ':id/gpg_keys/:key_id/revoke' do
         authenticated_as_admin!
 
@@ -354,6 +379,7 @@ module API
         key.revoke
         status :accepted
       end
+      # rubocop: enable CodeReuse/ActiveRecord
 
       desc 'Add an email address to a specified user. Available only for admins.' do
         success Entities::Email
@@ -362,6 +388,7 @@ module API
         requires :id, type: Integer, desc: 'The ID of the user'
         requires :email, type: String, desc: 'The email of the user'
       end
+      # rubocop: disable CodeReuse/ActiveRecord
       post ":id/emails" do
         authenticated_as_admin!
 
@@ -376,6 +403,7 @@ module API
           render_validation_error!(email)
         end
       end
+      # rubocop: enable CodeReuse/ActiveRecord
 
       desc 'Get the emails addresses of a specified user. Available only for admins.' do
         success Entities::Email
@@ -384,6 +412,7 @@ module API
         requires :id, type: Integer, desc: 'The ID of the user'
         use :pagination
       end
+      # rubocop: disable CodeReuse/ActiveRecord
       get ':id/emails' do
         authenticated_as_admin!
         user = User.find_by(id: params[:id])
@@ -391,6 +420,7 @@ module API
 
         present paginate(user.emails), with: Entities::Email
       end
+      # rubocop: enable CodeReuse/ActiveRecord
 
       desc 'Delete an email address of a specified user. Available only for admins.' do
         success Entities::Email
@@ -399,6 +429,7 @@ module API
         requires :id, type: Integer, desc: 'The ID of the user'
         requires :email_id, type: Integer, desc: 'The ID of the email'
       end
+      # rubocop: disable CodeReuse/ActiveRecord
       delete ':id/emails/:email_id' do
         authenticated_as_admin!
         user = User.find_by(id: params[:id])
@@ -411,6 +442,7 @@ module API
           Emails::DestroyService.new(current_user, user: user).execute(email)
         end
       end
+      # rubocop: enable CodeReuse/ActiveRecord
 
       desc 'Delete a user. Available only for admins.' do
         success Entities::Email
@@ -419,6 +451,7 @@ module API
         requires :id, type: Integer, desc: 'The ID of the user'
         optional :hard_delete, type: Boolean, desc: "Whether to remove a user's contributions"
       end
+      # rubocop: disable CodeReuse/ActiveRecord
       delete ":id" do
         Gitlab::QueryLimiting.whitelist('https://gitlab.com/gitlab-org/gitlab-ce/issues/42279')
 
@@ -431,11 +464,13 @@ module API
           user.delete_async(deleted_by: current_user, params: params)
         end
       end
+      # rubocop: enable CodeReuse/ActiveRecord
 
       desc 'Block a user. Available only for admins.'
       params do
         requires :id, type: Integer, desc: 'The ID of the user'
       end
+      # rubocop: disable CodeReuse/ActiveRecord
       post ':id/block' do
         authenticated_as_admin!
         user = User.find_by(id: params[:id])
@@ -447,11 +482,13 @@ module API
           forbidden!('LDAP blocked users cannot be modified by the API')
         end
       end
+      # rubocop: enable CodeReuse/ActiveRecord
 
       desc 'Unblock a user. Available only for admins.'
       params do
         requires :id, type: Integer, desc: 'The ID of the user'
       end
+      # rubocop: disable CodeReuse/ActiveRecord
       post ':id/unblock' do
         authenticated_as_admin!
         user = User.find_by(id: params[:id])
@@ -463,6 +500,7 @@ module API
           user.activate
         end
       end
+      # rubocop: enable CodeReuse/ActiveRecord
 
       params do
         requires :user_id, type: Integer, desc: 'The ID of the user'
@@ -475,9 +513,11 @@ module API
               PersonalAccessTokensFinder.new({ user: user, impersonation: true }.merge(options))
             end
 
+            # rubocop: disable CodeReuse/ActiveRecord
             def find_impersonation_token
               finder.find_by(id: declared_params[:impersonation_token_id]) || not_found!('Impersonation Token')
             end
+            # rubocop: enable CodeReuse/ActiveRecord
           end
 
           before { authenticated_as_admin! }
@@ -578,12 +618,14 @@ module API
       params do
         requires :key_id, type: Integer, desc: 'The ID of the SSH key'
       end
+      # rubocop: disable CodeReuse/ActiveRecord
       get "keys/:key_id" do
         key = current_user.keys.find_by(id: params[:key_id])
         not_found!('Key') unless key
 
         present key, with: Entities::SSHKey
       end
+      # rubocop: enable CodeReuse/ActiveRecord
 
       desc 'Add a new SSH key to the currently authenticated user' do
         success Entities::SSHKey
@@ -608,12 +650,14 @@ module API
       params do
         requires :key_id, type: Integer, desc: 'The ID of the SSH key'
       end
+      # rubocop: disable CodeReuse/ActiveRecord
       delete "keys/:key_id" do
         key = current_user.keys.find_by(id: params[:key_id])
         not_found!('Key') unless key
 
         destroy_conditionally!(key)
       end
+      # rubocop: enable CodeReuse/ActiveRecord
 
       desc "Get the currently authenticated user's GPG keys" do
         detail 'This feature was added in GitLab 10.0'
@@ -633,12 +677,14 @@ module API
       params do
         requires :key_id, type: Integer, desc: 'The ID of the GPG key'
       end
+      # rubocop: disable CodeReuse/ActiveRecord
       get 'gpg_keys/:key_id' do
         key = current_user.gpg_keys.find_by(id: params[:key_id])
         not_found!('GPG Key') unless key
 
         present key, with: Entities::GPGKey
       end
+      # rubocop: enable CodeReuse/ActiveRecord
 
       desc 'Add a new GPG key to the currently authenticated user' do
         detail 'This feature was added in GitLab 10.0'
@@ -663,6 +709,7 @@ module API
       params do
         requires :key_id, type: Integer, desc: 'The ID of the GPG key'
       end
+      # rubocop: disable CodeReuse/ActiveRecord
       post 'gpg_keys/:key_id/revoke' do
         key = current_user.gpg_keys.find_by(id: params[:key_id])
         not_found!('GPG Key') unless key
@@ -670,6 +717,7 @@ module API
         key.revoke
         status :accepted
       end
+      # rubocop: enable CodeReuse/ActiveRecord
 
       desc 'Delete a GPG key from the currently authenticated user' do
         detail 'This feature was added in GitLab 10.0'
@@ -677,6 +725,7 @@ module API
       params do
         requires :key_id, type: Integer, desc: 'The ID of the SSH key'
       end
+      # rubocop: disable CodeReuse/ActiveRecord
       delete 'gpg_keys/:key_id' do
         key = current_user.gpg_keys.find_by(id: params[:key_id])
         not_found!('GPG Key') unless key
@@ -684,6 +733,7 @@ module API
         status 204
         key.destroy
       end
+      # rubocop: enable CodeReuse/ActiveRecord
 
       desc "Get the currently authenticated user's email addresses" do
         success Entities::Email
@@ -701,12 +751,14 @@ module API
       params do
         requires :email_id, type: Integer, desc: 'The ID of the email'
       end
+      # rubocop: disable CodeReuse/ActiveRecord
       get "emails/:email_id" do
         email = current_user.emails.find_by(id: params[:email_id])
         not_found!('Email') unless email
 
         present email, with: Entities::Email
       end
+      # rubocop: enable CodeReuse/ActiveRecord
 
       desc 'Add new email address to the currently authenticated user' do
         success Entities::Email
@@ -728,6 +780,7 @@ module API
       params do
         requires :email_id, type: Integer, desc: 'The ID of the email'
       end
+      # rubocop: disable CodeReuse/ActiveRecord
       delete "emails/:email_id" do
         email = current_user.emails.find_by(id: params[:email_id])
         not_found!('Email') unless email
@@ -736,12 +789,14 @@ module API
           Emails::DestroyService.new(current_user, user: current_user).execute(email)
         end
       end
+      # rubocop: enable CodeReuse/ActiveRecord
 
       desc 'Get a list of user activities'
       params do
         optional :from, type: DateTime, default: 6.months.ago, desc: 'Date string in the format YEAR-MONTH-DAY'
         use :pagination
       end
+      # rubocop: disable CodeReuse/ActiveRecord
       get "activities" do
         authenticated_as_admin!
 
@@ -751,6 +806,7 @@ module API
 
         present paginate(activities), with: Entities::UserActivity
       end
+      # rubocop: enable CodeReuse/ActiveRecord
 
       desc 'Set the status of the current user' do
         success Entities::UserStatus