feat(global): introduce user teams and new UAC system (#868)

app/services/userService.js

@@ -1,17 +1,63 @@
 angular.module('portainer.services')
-.factory('UserService', ['$q', 'Users', function UserServiceFactory($q, Users) {
+.factory('UserService', ['$q', 'Users', 'UserHelper', 'TeamMembershipService', function UserServiceFactory($q, Users, UserHelper, TeamMembershipService) {
   'use strict';
   var service = {};
-  service.users = function() {
-    return Users.query({}).$promise;
+
+  service.users = function(includeAdministrators) {
+    var deferred = $q.defer();
+
+    Users.query({}).$promise
+    .then(function success(data) {
+      var users = data.map(function (user) {
+        return new UserViewModel(user);
+      });
+      if (!includeAdministrators) {
+        users = UserHelper.filterNonAdministratorUsers(users);
+      }
+      deferred.resolve(users);
+    })
+    .catch(function error(err) {
+      deferred.reject({ msg: 'Unable to retrieve users', err: err });
+    });
+
+    return deferred.promise;
   };
 
   service.user = function(id) {
-    return Users.get({id: id}).$promise;
+    var deferred = $q.defer();
+
+    Users.get({id: id}).$promise
+    .then(function success(data) {
+      var user = new UserViewModel(data);
+      deferred.resolve(user);
+    })
+    .catch(function error(err) {
+      deferred.reject({ msg: 'Unable to retrieve user details', err: err });
+    });
+
+    return deferred.promise;
   };
 
-  service.createUser = function(username, password, role) {
-    return Users.create({}, {username: username, password: password, role: role}).$promise;
+  service.createUser = function(username, password, role, teamIds) {
+    var deferred = $q.defer();
+
+    Users.create({}, {username: username, password: password, role: role}).$promise
+    .then(function success(data) {
+      var userId = data.Id;
+      var teamMembershipQueries = [];
+      angular.forEach(teamIds, function(teamId) {
+        teamMembershipQueries.push(TeamMembershipService.createMembership(userId, teamId, 2));
+      });
+      $q.all(teamMembershipQueries)
+      .then(function success() {
+        deferred.resolve();
+      });
+    })
+    .catch(function error(err) {
+      deferred.reject({ msg: 'Unable to create user', err: err });
+    });
+
+    return deferred.promise;
   };
 
   service.deleteUser = function(id) {
@@ -28,12 +74,14 @@ angular.module('portainer.services')
 
   service.updateUserPassword = function(id, currentPassword, newPassword) {
     var deferred = $q.defer();
+
     Users.checkPassword({id: id}, {password: currentPassword}).$promise
     .then(function success(data) {
       if (!data.valid) {
         deferred.reject({invalidPassword: true});
+      } else {
+        return service.updateUser(id, newPassword, undefined);
       }
-      return service.updateUser(id, newPassword, undefined);
     })
     .then(function success(data) {
       deferred.resolve();
@@ -41,6 +89,65 @@ angular.module('portainer.services')
     .catch(function error(err) {
       deferred.reject({msg: 'Unable to update user password', err: err});
     });
+
+    return deferred.promise;
+  };
+
+  service.userMemberships = function(id) {
+    var deferred = $q.defer();
+
+    Users.queryMemberships({id: id}).$promise
+    .then(function success(data) {
+      var memberships = data.map(function (item) {
+        return new TeamMembershipModel(item);
+      });
+      deferred.resolve(memberships);
+    })
+    .catch(function error(err) {
+      deferred.reject({ msg: 'Unable to retrieve user memberships', err: err });
+    });
+
+    return deferred.promise;
+  };
+
+  service.userTeams = function(id) {
+    var deferred = $q.defer();
+
+    Users.queryTeams({id: id}).$promise
+    .then(function success(data) {
+      var teams = data.map(function (item) {
+        return new TeamViewModel(item);
+      });
+      deferred.resolve(teams);
+    })
+    .catch(function error(err) {
+      deferred.reject({ msg: 'Unable to retrieve user teams', err: err });
+    });
+
+    return deferred.promise;
+  };
+
+  service.userLeadingTeams = function(id) {
+    var deferred = $q.defer();
+
+    $q.all({
+      teams: service.userTeams(id),
+      memberships: service.userMemberships(id)
+    })
+    .then(function success(data) {
+      var memberships = data.memberships;
+      var teams = data.teams.filter(function (team) {
+        var membership = _.find(memberships, {TeamId: team.Id});
+        if (membership && membership.Role === 1) {
+          return team;
+        }
+      });
+      deferred.resolve(teams);
+    })
+    .catch(function error(err) {
+      deferred.reject({ msg: 'Unable to retrieve user teams', err: err });
+    });
+
     return deferred.promise;
   };