app/finders/concerns/packages/finder_helper.rb


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29

# frozen_string_literal: true

module Packages
  module FinderHelper
    extend ActiveSupport::Concern

    private

    def packages_visible_to_user(user, within_group:)
      return ::Packages::Package.none unless within_group
      return ::Packages::Package.none unless Ability.allowed?(user, :read_package, within_group)

      projects = projects_visible_to_reporters(user, within_group.self_and_descendants.select(:id))
      ::Packages::Package.for_projects(projects.select(:id))
    end

    def projects_visible_to_user(user, within_group:)
      return ::Project.none unless within_group
      return ::Project.none unless Ability.allowed?(user, :read_package, within_group)

      projects_visible_to_reporters(user, within_group.self_and_descendants.select(:id))
    end

    def projects_visible_to_reporters(user, namespace_ids)
      ::Project.in_namespace(namespace_ids)
               .public_or_visible_to_user(user, ::Gitlab::Access::REPORTER)
    end
  end
end