gitlab-ce/app/controllers/admin/identities_controller.rb

75 lines
2.0 KiB
Ruby

# frozen_string_literal: true
class Admin::IdentitiesController < Admin::ApplicationController
before_action :user
before_action :identity, except: [:index, :new, :create]
feature_category :system_access
def new
@identity = Identity.new
end
def create
@identity = Identity.new(identity_params)
@identity.user_id = user.id
if @identity.save
redirect_to admin_user_identities_path(@user), notice: _('User identity was successfully created.')
else
render :new
end
end
def index
@identities = @user.identities
@can_impersonate = helpers.can_impersonate_user(user, impersonation_in_progress?)
@impersonation_error_text = if @can_impersonate
nil
else
helpers.impersonation_error_text(user,
impersonation_in_progress?)
end
end
def edit
end
def update
if @identity.update(identity_params)
::Users::RepairLdapBlockedService.new(@user).execute
redirect_to admin_user_identities_path(@user), notice: _('User identity was successfully updated.')
else
render :edit
end
end
def destroy
if @identity.destroy
::Users::RepairLdapBlockedService.new(@user).execute
redirect_to admin_user_identities_path(@user), status: :found,
notice: _('User identity was successfully removed.')
else
redirect_to admin_user_identities_path(@user), status: :found, alert: _('Failed to remove user identity.')
end
end
protected
# rubocop: disable CodeReuse/ActiveRecord
def user
@user ||= User.find_by!(username: params.permit(:user_id)[:user_id])
end
# rubocop: enable CodeReuse/ActiveRecord
def identity
@identity ||= user.identities.find(params.permit(:id)[:id])
end
def identity_params
params.require(:identity).permit(:provider, :extern_uid, :saml_provider_id)
end
end