func cmdAssignRole() { if flagCmdAssignRole { if len(flagEmail) == 0 { fmt.Fprintln(os.Stderr, "flag needs an argument: -email") flag.Usage() os.Exit(1) } if !model.IsValidUserRoles(flagRole) { fmt.Fprintln(os.Stderr, "flag invalid argument: -role") flag.Usage() os.Exit(1) } c := getMockContext() var user *model.User if result := <-api.Srv.Store.User().GetByEmail(flagEmail); result.Err != nil { l4g.Error("%v", result.Err) flushLogAndExit(1) } else { user = result.Data.(*model.User) } if !user.IsInRole(flagRole) { api.UpdateUserRoles(c, user, flagRole) } os.Exit(0) } }
func updateMemberRoles(c *Context, w http.ResponseWriter, r *http.Request) { props := model.MapFromJson(r.Body) userId := props["user_id"] if len(userId) != 26 { c.SetInvalidParam("updateMemberRoles", "user_id") return } mchan := Srv.Store.Team().GetTeamsForUser(userId) teamId := c.TeamId newRoles := props["new_roles"] if !(model.IsValidUserRoles(newRoles)) { c.SetInvalidParam("updateMemberRoles", "new_roles") return } if !HasPermissionToTeamContext(c, teamId, model.PERMISSION_MANAGE_ROLES) { return } var member *model.TeamMember if result := <-mchan; result.Err != nil { c.Err = result.Err return } else { members := result.Data.([]*model.TeamMember) for _, m := range members { if m.TeamId == teamId { member = m } } } if member == nil { c.Err = model.NewLocAppError("updateMemberRoles", "api.team.update_member_roles.not_a_member", nil, "userId="+userId+" teamId="+teamId) c.Err.StatusCode = http.StatusBadRequest return } member.Roles = newRoles if result := <-Srv.Store.Team().UpdateMember(member); result.Err != nil { c.Err = result.Err return } RemoveAllSessionsForUserId(userId) rdata := map[string]string{} rdata["status"] = "ok" w.Write([]byte(model.MapToJson(rdata))) }
func updateChannelMemberRoles(c *Context, w http.ResponseWriter, r *http.Request) { params := mux.Vars(r) channelId := params["channel_id"] props := model.MapFromJson(r.Body) userId := props["user_id"] if len(userId) != 26 { c.SetInvalidParam("updateChannelMemberRoles", "user_id") return } mchan := app.Srv.Store.Channel().GetMember(channelId, userId) newRoles := props["new_roles"] if !(model.IsValidUserRoles(newRoles)) { c.SetInvalidParam("updateChannelMemberRoles", "new_roles") return } if !HasPermissionToChannelContext(c, channelId, model.PERMISSION_MANAGE_CHANNEL_ROLES) { return } var member model.ChannelMember if result := <-mchan; result.Err != nil { c.Err = result.Err return } else { member = result.Data.(model.ChannelMember) } member.Roles = newRoles if result := <-app.Srv.Store.Channel().UpdateMember(&member); result.Err != nil { c.Err = result.Err return } app.InvalidateCacheForUser(userId) rdata := map[string]string{} rdata["status"] = "ok" w.Write([]byte(model.MapToJson(rdata))) }
func cmdAssignRole() { if flagCmdAssignRole { if len(flagEmail) == 0 { fmt.Fprintln(os.Stderr, "flag needs an argument: -email") os.Exit(1) } // Do some conversions if flagRole == "system_admin" { flagRole = "system_user system_admin" } if flagRole == "" { flagRole = "system_user" } if !model.IsValidUserRoles(flagRole) { fmt.Fprintln(os.Stderr, "flag invalid argument: -role") os.Exit(1) } var user *model.User if result := <-app.Srv.Store.User().GetByEmail(flagEmail); result.Err != nil { l4g.Error("%v", result.Err) flushLogAndExit(1) } else { user = result.Data.(*model.User) } if !user.IsInRole(flagRole) { api.UpdateUserRoles(user, flagRole) } os.Exit(0) } }