1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
|
# frozen_string_literal: true
class Projects::WorkItemsController < Projects::ApplicationController
include WorkhorseAuthorization
extend Gitlab::Utils::Override
EXTENSION_ALLOWLIST = %w[csv].map(&:downcase).freeze
before_action :authorize_import_access!, only: [:import_csv, :authorize] # rubocop:disable Rails/LexicallyScopedActionFilter
before_action do
push_force_frontend_feature_flag(:work_items, project&.work_items_feature_flag_enabled?)
push_force_frontend_feature_flag(:work_items_mvc, project&.work_items_mvc_feature_flag_enabled?)
push_force_frontend_feature_flag(:work_items_mvc_2, project&.work_items_mvc_2_feature_flag_enabled?)
push_force_frontend_feature_flag(:saved_replies, current_user)
end
feature_category :team_planning
urgency :high, [:authorize]
urgency :low
def import_csv
file = import_params[:file]
return render json: { errors: invalid_file_message }, status: :bad_request unless file_is_valid?(file)
result = WorkItems::PrepareImportCsvService.new(project, current_user, file: file).execute
if result.status == :error
render json: { errors: result.message }, status: :bad_request
else
render json: { message: result.message }, status: :ok
end
end
private
def import_params
params.permit(:file)
end
def authorize_import_access!
can_import = can?(current_user, :import_work_items, project)
import_csv_feature_available = Feature.enabled?(:import_export_work_items_csv, project)
return if can_import && import_csv_feature_available
if current_user || action_name == 'authorize'
render_404
else
authenticate_user!
end
end
def invalid_file_message
supported_file_extensions = ".#{EXTENSION_ALLOWLIST.join(', .')}"
format(_("The uploaded file was invalid. Supported file extensions are %{extensions}."),
{ extensions: supported_file_extensions })
end
def uploader_class
FileUploader
end
def maximum_size
Gitlab::CurrentSettings.max_attachment_size.megabytes
end
def file_extension_allowlist
EXTENSION_ALLOWLIST
end
end
Projects::WorkItemsController.prepend_mod
|
