1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
|
# frozen_string_literal: true
module API
module Admin
class Dictionary < ::API::Base
feature_category :database
urgency :low
before do
authenticated_as_admin!
end
namespace 'admin' do
resources 'databases/:database_name/dictionary/tables/:table_name' do
desc 'Retrieve dictionary details' do
success ::API::Entities::Dictionary::Table
failure [
{ code: 401, message: '401 Unauthorized' },
{ code: 403, message: '403 Forbidden' },
{ code: 404, message: '404 Not found' }
]
end
params do
requires :database_name,
type: String,
values: %w[main ci],
desc: 'The database name'
requires :table_name,
type: String,
desc: 'The table name'
end
get do
not_found!('Table not found') unless File.exist?(safe_file_path!)
present table_dictionary, with: Entities::Dictionary::Table
end
end
helpers do
def table_name
params[:table_name]
end
def table_dictionary
YAML.load_file(safe_file_path!).with_indifferent_access
end
def safe_file_path!
dir = Gitlab::Database::GitlabSchema.dictionary_paths.first.to_s
path = Rails.root.join(dir, "#{table_name}.yml").to_s
Gitlab::PathTraversal.check_allowed_absolute_path_and_path_traversal!(path, [dir])
path
end
end
end
end
end
end
|
