Some checks failed
Server CI / Postgres (shard 0) (push) Has been skipped
Server CI / Postgres (shard 3) (push) Has been skipped
BuildEnv Docker Image / build-image (push) Failing after 4s
BuildEnv Docker Image / build-image-fips (push) Failing after 4s
Migration Review & Release Notes / Generate migration review & release notes (push) Failing after 3s
Server CI / Build Environment (push) Failing after 3s
Server CI / Postgres (shard 1) (push) Has been skipped
Tools CI / check-style (mattermost-govet) (push) Failing after 4s
Server CI / Postgres (shard 2) (push) Has been skipped
Tools CI / check-style (mmgotool) (push) Failing after 3s
Server CI / Elasticsearch v8 Compatibility (push) Has been skipped
Server CI / OpenSearch v2 Compatibility (push) Has been skipped
Server CI / Postgres FIPS (shard 0) (push) Has been skipped
Tools CI / Test (mattermost-govet) (push) Failing after 3s
Server CI / Postgres FIPS (shard 1) (push) Has been skipped
Server CI / Postgres FIPS (shard 2) (push) Has been skipped
Tools CI / Test (mmgotool) (push) Failing after 3s
Server CI / Postgres FIPS (shard 3) (push) Has been skipped
Server CI / Run mmctl tests (push) Has been skipped
Server CI / Run mmctl tests (FIPS) (push) Has been skipped
Server CI / Merge Postgres Test Results (push) Has been skipped
Server CI / Merge Postgres FIPS Test Results (push) Has been skipped
Server CI / Check backport migrations (push) Has been skipped
Server CI / Check generated files (push) Has been skipped
Server CI / check-style (push) Has been skipped
Server CI / Vet API (push) Has been skipped
Server CI / Build mattermost server app (push) Has been skipped
Server CI / Server CI Complete (push) Failing after 2s
Server CI / Server CI Artifacts (push) Has been skipped
Server CI / Sentry Upload (push) Has been skipped
Server CI / Server CI Report (push) Failing after 5m1s
Server CI Nightly Race / Race Detector (push) Has been skipped
CodeQL / Analyze (go) (push) Has been cancelled
CodeQL / Analyze (javascript) (push) Has been cancelled
Webapp CI Cache Warm / Warm Webapp node_modules Cache (push) Has been cancelled
E2E CI Cache Warm / Warm E2E npm Registry Cache (push) Has been cancelled
API / build (push) Has been cancelled
Web App CI / check-types (push) Has been cancelled
Web App CI / check-lint (push) Has been cancelled
Web App CI / check-i18n (push) Has been cancelled
Web App CI / check-external-links (push) Has been cancelled
Web App CI / test (platform) (push) Has been cancelled
Web App CI / test (mattermost-redux) (push) Has been cancelled
Web App CI / test (channels shard 1/4) (push) Has been cancelled
Web App CI / test (channels shard 2/4) (push) Has been cancelled
Web App CI / test (channels shard 3/4) (push) Has been cancelled
Web App CI / test (channels shard 4/4) (push) Has been cancelled
Web App CI / upload-coverage (push) Has been cancelled
Web App CI / build (push) Has been cancelled
YAML Lint / yamllint (push) Has been cancelled
Push mirrored docker images / cd/Push mirrored docker images (push) Has been cancelled
docs-cd / Build and deploy docs (push) Has been cancelled
Docs CI / build (push) Has been cancelled
E2E Cache Warm: Cypress deps / Warm Cypress deps cache (push) Has been cancelled
Scorecards supply-chain security / Scorecard analysis (push) Has been cancelled
Server CI Weekly / Postgres FIPS (push) Has been skipped
Server CI Weekly / Run mmctl tests (FIPS) (push) Has been skipped
Server CI Weekly / Postgres with binary parameters (push) Has been skipped
Server CI Weekly / Build Environment (push) Failing after 1s
Server CI Cache Warm / Warm Go Module and Build Cache (push) Failing after 2s
Server CI Nightly Race / Build Environment (push) Failing after 1s
149 lines
5.0 KiB
Go
149 lines
5.0 KiB
Go
// Copyright (c) 2015-present Mattermost, Inc. All Rights Reserved.
|
|
// See LICENSE.txt for license information.
|
|
|
|
package properties
|
|
|
|
import (
|
|
"errors"
|
|
|
|
"github.com/mattermost/mattermost/server/public/model"
|
|
"github.com/mattermost/mattermost/server/public/shared/request"
|
|
)
|
|
|
|
var ErrLicenseRequired = errors.New("license_error: an Enterprise license is required")
|
|
|
|
// LicenseProvider is a function that returns the current license.
|
|
type LicenseProvider func() *model.License
|
|
|
|
// LicenseCheckHook enforces license requirements for property operations on
|
|
// specific groups. Operations on groups without a license requirement pass
|
|
// through without checks.
|
|
type LicenseCheckHook struct {
|
|
BasePropertyHook
|
|
licenseProvider LicenseProvider
|
|
managedGroupIDs map[string]struct{}
|
|
}
|
|
|
|
var _ PropertyHook = (*LicenseCheckHook)(nil)
|
|
|
|
// NewLicenseCheckHook creates a hook that requires an Enterprise license for
|
|
// all field and value operations on the given property groups.
|
|
func NewLicenseCheckHook(licenseProvider LicenseProvider, managedGroupIDs ...string) *LicenseCheckHook {
|
|
ids := make(map[string]struct{}, len(managedGroupIDs))
|
|
for _, id := range managedGroupIDs {
|
|
ids[id] = struct{}{}
|
|
}
|
|
return &LicenseCheckHook{
|
|
licenseProvider: licenseProvider,
|
|
managedGroupIDs: ids,
|
|
}
|
|
}
|
|
|
|
// requireLicense returns ErrLicenseRequired when groupID is in the managed set
|
|
// and no Enterprise license is active. Unmanaged groups and licensed calls
|
|
// return nil.
|
|
func (h *LicenseCheckHook) requireLicense(groupID string) error {
|
|
if _, managed := h.managedGroupIDs[groupID]; !managed {
|
|
return nil
|
|
}
|
|
if !model.MinimumEnterpriseLicense(h.licenseProvider()) {
|
|
return ErrLicenseRequired
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// Field pre-hooks
|
|
|
|
func (h *LicenseCheckHook) PreCreatePropertyField(_ request.CTX, field *model.PropertyField) (*model.PropertyField, error) {
|
|
return field, h.requireLicense(field.GroupID)
|
|
}
|
|
|
|
func (h *LicenseCheckHook) PreUpdatePropertyField(_ request.CTX, groupID string, field *model.PropertyField) (*model.PropertyField, error) {
|
|
return field, h.requireLicense(groupID)
|
|
}
|
|
|
|
func (h *LicenseCheckHook) PreUpdatePropertyFields(_ request.CTX, groupID string, fields []*model.PropertyField) ([]*model.PropertyField, error) {
|
|
return fields, h.requireLicense(groupID)
|
|
}
|
|
|
|
func (h *LicenseCheckHook) PreDeletePropertyField(_ request.CTX, groupID string, _ string) error {
|
|
return h.requireLicense(groupID)
|
|
}
|
|
|
|
func (h *LicenseCheckHook) PreCountPropertyFields(_ request.CTX, groupID string) error {
|
|
return h.requireLicense(groupID)
|
|
}
|
|
|
|
// Field post-hooks
|
|
|
|
func (h *LicenseCheckHook) PostGetPropertyField(_ request.CTX, field *model.PropertyField) (*model.PropertyField, error) {
|
|
return field, h.requireLicense(field.GroupID)
|
|
}
|
|
|
|
func (h *LicenseCheckHook) PostGetPropertyFields(_ request.CTX, fields []*model.PropertyField) ([]*model.PropertyField, error) {
|
|
if len(fields) == 0 {
|
|
return fields, nil
|
|
}
|
|
return fields, h.requireLicense(fields[0].GroupID)
|
|
}
|
|
|
|
// Value pre-hooks
|
|
|
|
func (h *LicenseCheckHook) PreCreatePropertyValue(_ request.CTX, value *model.PropertyValue) (*model.PropertyValue, error) {
|
|
return value, h.requireLicense(value.GroupID)
|
|
}
|
|
|
|
func (h *LicenseCheckHook) PreCreatePropertyValues(_ request.CTX, values []*model.PropertyValue) ([]*model.PropertyValue, error) {
|
|
if len(values) == 0 {
|
|
return values, nil
|
|
}
|
|
return values, h.requireLicense(values[0].GroupID)
|
|
}
|
|
|
|
func (h *LicenseCheckHook) PreUpdatePropertyValue(_ request.CTX, groupID string, value *model.PropertyValue) (*model.PropertyValue, error) {
|
|
return value, h.requireLicense(groupID)
|
|
}
|
|
|
|
func (h *LicenseCheckHook) PreUpdatePropertyValues(_ request.CTX, groupID string, values []*model.PropertyValue) ([]*model.PropertyValue, error) {
|
|
return values, h.requireLicense(groupID)
|
|
}
|
|
|
|
func (h *LicenseCheckHook) PreUpsertPropertyValue(_ request.CTX, value *model.PropertyValue) (*model.PropertyValue, error) {
|
|
return value, h.requireLicense(value.GroupID)
|
|
}
|
|
|
|
func (h *LicenseCheckHook) PreUpsertPropertyValues(_ request.CTX, values []*model.PropertyValue) ([]*model.PropertyValue, error) {
|
|
if len(values) == 0 {
|
|
return values, nil
|
|
}
|
|
return values, h.requireLicense(values[0].GroupID)
|
|
}
|
|
|
|
func (h *LicenseCheckHook) PreDeletePropertyValue(_ request.CTX, groupID string, _ string) error {
|
|
return h.requireLicense(groupID)
|
|
}
|
|
|
|
func (h *LicenseCheckHook) PreDeletePropertyValuesForTarget(_ request.CTX, groupID string, _ string, _ string) error {
|
|
return h.requireLicense(groupID)
|
|
}
|
|
|
|
func (h *LicenseCheckHook) PreDeletePropertyValuesForField(_ request.CTX, groupID string, _ string) error {
|
|
return h.requireLicense(groupID)
|
|
}
|
|
|
|
// Value post-hooks
|
|
|
|
func (h *LicenseCheckHook) PostGetPropertyValue(_ request.CTX, value *model.PropertyValue) (*model.PropertyValue, error) {
|
|
if value == nil {
|
|
return value, nil
|
|
}
|
|
return value, h.requireLicense(value.GroupID)
|
|
}
|
|
|
|
func (h *LicenseCheckHook) PostGetPropertyValues(_ request.CTX, values []*model.PropertyValue) ([]*model.PropertyValue, error) {
|
|
if len(values) == 0 {
|
|
return values, nil
|
|
}
|
|
return values, h.requireLicense(values[0].GroupID)
|
|
}
|