New AccessRequestsFinder

Signed-off-by: Rémy Coutable <remy@rymai.me>

1 files changed, 29 insertions, 0 deletions

diff --git a/app/finders/access_requests_finder.rb b/app/finders/access_requests_finder.rb
new file mode 100644
index 00000000000..78fb7627741
--- /dev/null
+++ b/app/finders/access_requests_finder.rb
@@ -0,0 +1,29 @@
+class AccessRequestsFinder
+  attr_accessor :source
+
+  # Arguments:
+  #   source - a Group or Project
+  def initialize(source)
+    @source = source
+  end
+
+  def execute(current_user, raise_error: false)
+    if cannot_see_access_requests?(current_user)
+      raise Gitlab::Access::AccessDeniedError if raise_error
+
+      return []
+    end
+
+    source.requesters
+  end
+
+  def execute!(current_user)
+    execute(current_user, raise_error: true)
+  end
+
+  private
+
+  def cannot_see_access_requests?(current_user)
+    !source || !current_user || !current_user.can?(:"admin_#{source.class.to_s.underscore}", source)
+  end
+end