mirror of
https://github.com/mattermost/mattermost.git
synced 2025-02-25 18:55:24 -06:00
fb6f2a123c
* PLT-5860 Updated copyright date in about modal * PLT-5860 Updated copyright notice in JSX files * PLT-5860 Updated copyright notice in go files * Fixed misc copyright dates * Fixed component snapshots
295 lines
8.4 KiB
Go
295 lines
8.4 KiB
Go
// Copyright (c) 2016-present Mattermost, Inc. All Rights Reserved.
|
|
// See License.txt for license information.
|
|
|
|
package utils
|
|
|
|
import (
|
|
"github.com/mattermost/platform/model"
|
|
)
|
|
|
|
func SetDefaultRolesBasedOnConfig() {
|
|
// Reset the roles to default to make this logic easier
|
|
model.InitalizeRoles()
|
|
|
|
if IsLicensed {
|
|
switch *Cfg.TeamSettings.RestrictPublicChannelCreation {
|
|
case model.PERMISSIONS_ALL:
|
|
model.ROLE_TEAM_USER.Permissions = append(
|
|
model.ROLE_TEAM_USER.Permissions,
|
|
model.PERMISSION_CREATE_PUBLIC_CHANNEL.Id,
|
|
)
|
|
break
|
|
case model.PERMISSIONS_TEAM_ADMIN:
|
|
model.ROLE_TEAM_ADMIN.Permissions = append(
|
|
model.ROLE_TEAM_ADMIN.Permissions,
|
|
model.PERMISSION_CREATE_PUBLIC_CHANNEL.Id,
|
|
)
|
|
break
|
|
}
|
|
} else {
|
|
model.ROLE_TEAM_USER.Permissions = append(
|
|
model.ROLE_TEAM_USER.Permissions,
|
|
model.PERMISSION_CREATE_PUBLIC_CHANNEL.Id,
|
|
)
|
|
}
|
|
|
|
if IsLicensed {
|
|
switch *Cfg.TeamSettings.RestrictPublicChannelManagement {
|
|
case model.PERMISSIONS_ALL:
|
|
model.ROLE_TEAM_USER.Permissions = append(
|
|
model.ROLE_TEAM_USER.Permissions,
|
|
model.PERMISSION_MANAGE_PUBLIC_CHANNEL_PROPERTIES.Id,
|
|
)
|
|
break
|
|
case model.PERMISSIONS_CHANNEL_ADMIN:
|
|
model.ROLE_TEAM_ADMIN.Permissions = append(
|
|
model.ROLE_TEAM_ADMIN.Permissions,
|
|
model.PERMISSION_MANAGE_PUBLIC_CHANNEL_PROPERTIES.Id,
|
|
)
|
|
model.ROLE_CHANNEL_ADMIN.Permissions = append(
|
|
model.ROLE_CHANNEL_ADMIN.Permissions,
|
|
model.PERMISSION_MANAGE_PUBLIC_CHANNEL_PROPERTIES.Id,
|
|
)
|
|
break
|
|
case model.PERMISSIONS_TEAM_ADMIN:
|
|
model.ROLE_TEAM_ADMIN.Permissions = append(
|
|
model.ROLE_TEAM_ADMIN.Permissions,
|
|
model.PERMISSION_MANAGE_PUBLIC_CHANNEL_PROPERTIES.Id,
|
|
)
|
|
break
|
|
}
|
|
} else {
|
|
model.ROLE_TEAM_USER.Permissions = append(
|
|
model.ROLE_TEAM_USER.Permissions,
|
|
model.PERMISSION_MANAGE_PUBLIC_CHANNEL_PROPERTIES.Id,
|
|
)
|
|
}
|
|
|
|
if IsLicensed {
|
|
switch *Cfg.TeamSettings.RestrictPublicChannelDeletion {
|
|
case model.PERMISSIONS_ALL:
|
|
model.ROLE_TEAM_USER.Permissions = append(
|
|
model.ROLE_TEAM_USER.Permissions,
|
|
model.PERMISSION_DELETE_PUBLIC_CHANNEL.Id,
|
|
)
|
|
break
|
|
case model.PERMISSIONS_CHANNEL_ADMIN:
|
|
model.ROLE_TEAM_ADMIN.Permissions = append(
|
|
model.ROLE_TEAM_ADMIN.Permissions,
|
|
model.PERMISSION_DELETE_PUBLIC_CHANNEL.Id,
|
|
)
|
|
model.ROLE_CHANNEL_ADMIN.Permissions = append(
|
|
model.ROLE_CHANNEL_ADMIN.Permissions,
|
|
model.PERMISSION_DELETE_PUBLIC_CHANNEL.Id,
|
|
)
|
|
break
|
|
case model.PERMISSIONS_TEAM_ADMIN:
|
|
model.ROLE_TEAM_ADMIN.Permissions = append(
|
|
model.ROLE_TEAM_ADMIN.Permissions,
|
|
model.PERMISSION_DELETE_PUBLIC_CHANNEL.Id,
|
|
)
|
|
break
|
|
}
|
|
} else {
|
|
model.ROLE_TEAM_USER.Permissions = append(
|
|
model.ROLE_TEAM_USER.Permissions,
|
|
model.PERMISSION_DELETE_PUBLIC_CHANNEL.Id,
|
|
)
|
|
}
|
|
|
|
if IsLicensed {
|
|
switch *Cfg.TeamSettings.RestrictPrivateChannelCreation {
|
|
case model.PERMISSIONS_ALL:
|
|
model.ROLE_TEAM_USER.Permissions = append(
|
|
model.ROLE_TEAM_USER.Permissions,
|
|
model.PERMISSION_CREATE_PRIVATE_CHANNEL.Id,
|
|
)
|
|
break
|
|
case model.PERMISSIONS_TEAM_ADMIN:
|
|
model.ROLE_TEAM_ADMIN.Permissions = append(
|
|
model.ROLE_TEAM_ADMIN.Permissions,
|
|
model.PERMISSION_CREATE_PRIVATE_CHANNEL.Id,
|
|
)
|
|
break
|
|
}
|
|
} else {
|
|
model.ROLE_TEAM_USER.Permissions = append(
|
|
model.ROLE_TEAM_USER.Permissions,
|
|
model.PERMISSION_CREATE_PRIVATE_CHANNEL.Id,
|
|
)
|
|
}
|
|
|
|
if IsLicensed {
|
|
switch *Cfg.TeamSettings.RestrictPrivateChannelManagement {
|
|
case model.PERMISSIONS_ALL:
|
|
model.ROLE_TEAM_USER.Permissions = append(
|
|
model.ROLE_TEAM_USER.Permissions,
|
|
model.PERMISSION_MANAGE_PRIVATE_CHANNEL_PROPERTIES.Id,
|
|
)
|
|
break
|
|
case model.PERMISSIONS_CHANNEL_ADMIN:
|
|
model.ROLE_TEAM_ADMIN.Permissions = append(
|
|
model.ROLE_TEAM_ADMIN.Permissions,
|
|
model.PERMISSION_MANAGE_PRIVATE_CHANNEL_PROPERTIES.Id,
|
|
)
|
|
model.ROLE_CHANNEL_ADMIN.Permissions = append(
|
|
model.ROLE_CHANNEL_ADMIN.Permissions,
|
|
model.PERMISSION_MANAGE_PRIVATE_CHANNEL_PROPERTIES.Id,
|
|
)
|
|
break
|
|
case model.PERMISSIONS_TEAM_ADMIN:
|
|
model.ROLE_TEAM_ADMIN.Permissions = append(
|
|
model.ROLE_TEAM_ADMIN.Permissions,
|
|
model.PERMISSION_MANAGE_PRIVATE_CHANNEL_PROPERTIES.Id,
|
|
)
|
|
break
|
|
}
|
|
} else {
|
|
model.ROLE_TEAM_USER.Permissions = append(
|
|
model.ROLE_TEAM_USER.Permissions,
|
|
model.PERMISSION_MANAGE_PRIVATE_CHANNEL_PROPERTIES.Id,
|
|
)
|
|
}
|
|
|
|
if IsLicensed {
|
|
switch *Cfg.TeamSettings.RestrictPrivateChannelDeletion {
|
|
case model.PERMISSIONS_ALL:
|
|
model.ROLE_TEAM_USER.Permissions = append(
|
|
model.ROLE_TEAM_USER.Permissions,
|
|
model.PERMISSION_DELETE_PRIVATE_CHANNEL.Id,
|
|
)
|
|
break
|
|
case model.PERMISSIONS_CHANNEL_ADMIN:
|
|
model.ROLE_TEAM_ADMIN.Permissions = append(
|
|
model.ROLE_TEAM_ADMIN.Permissions,
|
|
model.PERMISSION_DELETE_PRIVATE_CHANNEL.Id,
|
|
)
|
|
model.ROLE_CHANNEL_ADMIN.Permissions = append(
|
|
model.ROLE_CHANNEL_ADMIN.Permissions,
|
|
model.PERMISSION_DELETE_PRIVATE_CHANNEL.Id,
|
|
)
|
|
break
|
|
case model.PERMISSIONS_TEAM_ADMIN:
|
|
model.ROLE_TEAM_ADMIN.Permissions = append(
|
|
model.ROLE_TEAM_ADMIN.Permissions,
|
|
model.PERMISSION_DELETE_PRIVATE_CHANNEL.Id,
|
|
)
|
|
break
|
|
}
|
|
} else {
|
|
model.ROLE_TEAM_USER.Permissions = append(
|
|
model.ROLE_TEAM_USER.Permissions,
|
|
model.PERMISSION_DELETE_PRIVATE_CHANNEL.Id,
|
|
)
|
|
}
|
|
|
|
// Restrict permissions for Private Channel Manage Members
|
|
if IsLicensed {
|
|
switch *Cfg.TeamSettings.RestrictPrivateChannelManageMembers {
|
|
case model.PERMISSIONS_ALL:
|
|
model.ROLE_CHANNEL_USER.Permissions = append(
|
|
model.ROLE_CHANNEL_USER.Permissions,
|
|
model.PERMISSION_MANAGE_PRIVATE_CHANNEL_MEMBERS.Id,
|
|
)
|
|
break
|
|
case model.PERMISSIONS_CHANNEL_ADMIN:
|
|
model.ROLE_TEAM_ADMIN.Permissions = append(
|
|
model.ROLE_TEAM_ADMIN.Permissions,
|
|
model.PERMISSION_MANAGE_PRIVATE_CHANNEL_MEMBERS.Id,
|
|
)
|
|
model.ROLE_CHANNEL_ADMIN.Permissions = append(
|
|
model.ROLE_CHANNEL_ADMIN.Permissions,
|
|
model.PERMISSION_MANAGE_PRIVATE_CHANNEL_MEMBERS.Id,
|
|
)
|
|
break
|
|
case model.PERMISSIONS_TEAM_ADMIN:
|
|
model.ROLE_TEAM_ADMIN.Permissions = append(
|
|
model.ROLE_TEAM_ADMIN.Permissions,
|
|
model.PERMISSION_MANAGE_PRIVATE_CHANNEL_MEMBERS.Id,
|
|
)
|
|
break
|
|
}
|
|
} else {
|
|
model.ROLE_CHANNEL_USER.Permissions = append(
|
|
model.ROLE_CHANNEL_USER.Permissions,
|
|
model.PERMISSION_MANAGE_PRIVATE_CHANNEL_MEMBERS.Id,
|
|
)
|
|
}
|
|
|
|
if !*Cfg.ServiceSettings.EnableOnlyAdminIntegrations {
|
|
model.ROLE_TEAM_USER.Permissions = append(
|
|
model.ROLE_TEAM_USER.Permissions,
|
|
model.PERMISSION_MANAGE_WEBHOOKS.Id,
|
|
model.PERMISSION_MANAGE_SLASH_COMMANDS.Id,
|
|
)
|
|
model.ROLE_SYSTEM_USER.Permissions = append(
|
|
model.ROLE_SYSTEM_USER.Permissions,
|
|
model.PERMISSION_MANAGE_OAUTH.Id,
|
|
)
|
|
}
|
|
|
|
// Grant permissions for inviting and adding users to a team.
|
|
if IsLicensed {
|
|
if *Cfg.TeamSettings.RestrictTeamInvite == model.PERMISSIONS_TEAM_ADMIN {
|
|
model.ROLE_TEAM_ADMIN.Permissions = append(
|
|
model.ROLE_TEAM_ADMIN.Permissions,
|
|
model.PERMISSION_INVITE_USER.Id,
|
|
model.PERMISSION_ADD_USER_TO_TEAM.Id,
|
|
)
|
|
} else if *Cfg.TeamSettings.RestrictTeamInvite == model.PERMISSIONS_ALL {
|
|
model.ROLE_SYSTEM_USER.Permissions = append(
|
|
model.ROLE_SYSTEM_USER.Permissions,
|
|
model.PERMISSION_INVITE_USER.Id,
|
|
model.PERMISSION_ADD_USER_TO_TEAM.Id,
|
|
)
|
|
}
|
|
} else {
|
|
model.ROLE_TEAM_USER.Permissions = append(
|
|
model.ROLE_TEAM_USER.Permissions,
|
|
model.PERMISSION_INVITE_USER.Id,
|
|
model.PERMISSION_ADD_USER_TO_TEAM.Id,
|
|
)
|
|
}
|
|
|
|
if IsLicensed {
|
|
switch *Cfg.ServiceSettings.RestrictPostDelete {
|
|
case model.PERMISSIONS_DELETE_POST_ALL:
|
|
model.ROLE_CHANNEL_USER.Permissions = append(
|
|
model.ROLE_CHANNEL_USER.Permissions,
|
|
model.PERMISSION_DELETE_POST.Id,
|
|
)
|
|
model.ROLE_TEAM_ADMIN.Permissions = append(
|
|
model.ROLE_TEAM_ADMIN.Permissions,
|
|
model.PERMISSION_DELETE_POST.Id,
|
|
model.PERMISSION_DELETE_OTHERS_POSTS.Id,
|
|
)
|
|
break
|
|
case model.PERMISSIONS_DELETE_POST_TEAM_ADMIN:
|
|
model.ROLE_TEAM_ADMIN.Permissions = append(
|
|
model.ROLE_TEAM_ADMIN.Permissions,
|
|
model.PERMISSION_DELETE_POST.Id,
|
|
model.PERMISSION_DELETE_OTHERS_POSTS.Id,
|
|
)
|
|
break
|
|
}
|
|
} else {
|
|
model.ROLE_CHANNEL_USER.Permissions = append(
|
|
model.ROLE_CHANNEL_USER.Permissions,
|
|
model.PERMISSION_DELETE_POST.Id,
|
|
)
|
|
model.ROLE_TEAM_ADMIN.Permissions = append(
|
|
model.ROLE_TEAM_ADMIN.Permissions,
|
|
model.PERMISSION_DELETE_POST.Id,
|
|
model.PERMISSION_DELETE_OTHERS_POSTS.Id,
|
|
)
|
|
}
|
|
|
|
if Cfg.TeamSettings.EnableTeamCreation {
|
|
model.ROLE_SYSTEM_USER.Permissions = append(
|
|
model.ROLE_SYSTEM_USER.Permissions,
|
|
model.PERMISSION_CREATE_TEAM.Id,
|
|
)
|
|
}
|
|
|
|
}
|