gitlab_support_readiness 1.0.119 → 1.0.121

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5a2b0108587e5e82022714ed390e5810b3fc139fe9192649b1216b18a957605a
-  data.tar.gz: 70948909b5727d437b9c396abdc6bd07c36273a297cbb9ebfd5e47f27dcef842
+  metadata.gz: 48fd190b6e50d389bfce4cd77bd04794f35162cec19727ff82aa913cfeb0ac24
+  data.tar.gz: 6ab595513585c78ae81a23abc63a214b50378a53885d087820a57b2fe8abe573
 SHA512:
-  metadata.gz: 923828b4dc892451fb3d542503bd46a70cc115e99a258558160c2fee030e90210de87b66521ce015b687c98c4c101ab92cfdaa53d7a69dba7fd5427684c5ccc5
-  data.tar.gz: fdfca9336366bea66430ee3d2acb3aecdfbcfa955f62509661dceb0127288baae3b4bc7fd3eccc18848e50ab23cee1effc12de071058b007db207bd0519959fb
+  metadata.gz: a2ff80cc59bcef6612ceca4842c87dcebe1fd9a199e2d3c4d77482557dbbc1dc3a015736eed30f0514d684bcb5de1fa9c659a92c7e7a05e79cdcb6b8edc31963
+  data.tar.gz: a58bb9251007ad5c4e3c075b53d8c8fd32b27313003acf37df67e92a8e2ec4f3a5edb57e8f5a1f4ed69c9801842ce8ecce53d0e31f85b7ee01c47166f3c1c1fc

data/lib/support_readiness/repos/ticket_fields.rb

@@ -60,7 +60,7 @@ module Readiness
             zd_options.each do |zd_option|
               repo_option = repo.custom_field_options.detect { |rp_o| rp_o.value == zd_option.value }
               if repo_option.nil?
-                @diffs[:option_deletes].push({ "#{repo.value}" => zd_option })
+                @diffs[:option_deletes].push({ "#{zd_option.value}" => zd_option })
               end
             end
           end

data/lib/support_readiness/ticket_processor/2fa_removal.rb

@@ -0,0 +1,116 @@
+# frozen_string_literal: true
+
+# Defines the module Readiness.
+module Readiness
+  # Defines the module TicketProcessor
+  module TicketProcessor
+    ##
+    # Defines the class TwoFARemoval within the module {Readiness::Zendesk}.
+    #
+    # @author Jason Colyer
+    # @since 1.0.121
+    class TwoFARemoval < Readiness::Client
+      ##
+      # Process a 2FA Removal request
+      #
+      # @author Jason Colyer
+      # @since 1.0.121
+      def self.process!(zendesk_client, gitlab_admin_client, ticket_id)
+        @zendesk_client = zendesk_client
+        @gitlab_admin_client = gitlab_admin_client
+        @ticket = Readiness::Zendesk::Tickets.find!(@zendesk_client, ticket_id)
+        @fields = Readiness::Zendesk::TicketFields.list(@zendesk_client)
+        zd_field = Readiness::Zendesk::TicketFields.find_by_name(@zendesk_client, '2FA removal target', @fields)
+        if zd_field.nil?
+          puts 'Cannot locate relevant zendesk ticket field, exiting for safety'
+          exit 0
+        end
+        ticket_field = @ticket.custom_fields.detect { |c| c['id'] == zd_field.id }
+        if ticket_field.nil?
+          puts 'Cannot locate relevant ticket field, exiting for safety'
+          exit 0
+        end
+        if ticket_field['value'] == '2fa_removal_self'
+          tags_to_add = if support_entitlement_check
+                          %w[2fa_challenge_questions]
+                        else
+                          %w[2fa_user_not_entitled]
+                        end
+        elsif ticket_field['value'] == '2fa_removal_other'
+          tags_to_add = if owner_entitlement_check
+                          %w[2fa_snippet_verification]
+                        else
+                          %w[2fa_owner_not_entitled]
+                        end
+        else
+          puts "Unknown request type of '#{ticket_field['value']}', exiting for safety"
+          exit 0
+        end
+        new_ticket = Readiness::Zendesk::Tickets.new
+        new_ticket.id = @ticket.id
+        new_ticket.additional_tags = tags_to_add
+        pp new_ticket.additional_tags
+        #Readiness::Zendesk::Tickets.update_many!(@zendesk_client, [new_ticket])
+      end
+
+      ##
+      # Determine if a request has support entitlement
+      #
+      # @author Jason Colyer
+      # @since 1.0.121
+      def self.support_entitlement_check
+        tags = %w[
+          sub_consumption_cicd_minutes
+          sub_consumption_eap
+          sub_consumption_storage
+          sub_dotcom_premium
+          sub_dotcom_ultimate
+        ]
+        tags.each do |t|
+          return true if @ticket.tags.include? t
+        end
+        false
+      end
+
+      ##
+      # Determine if a owner driven request has entitlement
+      #
+      # @author Jason Colyer
+      # @since 1.0.121
+      def self.owner_entitlement_check
+        return false unless support_entitlement_check
+
+        zd_field = Readiness::Zendesk::TicketFields.find_by_name(@zendesk_client, 'Impacted email address', @ticket_fields)
+        zd_requester = Readiness::Zendesk::Users.find!(@zendesk_client, @ticket.submitter_id)
+        target_email = @ticket.custom_fields.detect { |t| t['id'] == zd_field.id }['value']
+        return false unless zd_requester.email.split('@').last.downcase == target_email.split('@').last.downcase
+
+        users = Readiness::GitLab::Users.search_by_email(@gitlab_admin_client, target_email)
+        return false unless users.count == 1
+
+        target = users.first
+        users = Readiness::GitLab::Users.search_by_email(@gitlab_admin_client, zd_requester.email)
+        return false unless users.count == 1
+
+        requester = users.first
+        memberships = Readiness::GitLab::Users.memberships(@gitlab_admin_client, requester, ['type=Namespace'])
+        namespaces_to_check = []
+        memberships.select { |m| m['access_level'] == 50 }.each do |m|
+          namespace = Readiness::GitLab::Namespaces.find!(@gitlab_admin_client, m['source_id'])
+          next unless namespace.parent_id.nil?
+          next unless Readiness::GitLab::Namespaces.is_paid?(@gitlab_admin_client, namespace)
+
+          namespaces_to_check.push(namespace)
+        end
+        return false if namespaces_to_check.count.zero?
+
+        namespaces_to_check.each do |namespace|
+          group = Readiness::GitLab::Groups.new({ 'id' => namespace.id })
+          all_members = Readiness::GitLab::Groups.all_members(@gitlab_admin_client, group, ["user_ids=#{target.id}"])
+          return true unless all_members.count.zero?
+        end
+        false
+      end
+    end
+  end
+end

data/lib/support_readiness/ticket_processor.rb

@@ -7,6 +7,7 @@ module Readiness
   # @author Jason Colyer
   # @since 1.0.44
   module TicketProcessor
+    require "#{__dir__}/ticket_processor/2fa_removal"
     require "#{__dir__}/ticket_processor/account_blocked"
     require "#{__dir__}/ticket_processor/code_request_advanced_sast"
     require "#{__dir__}/ticket_processor/email_suppressions"

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: gitlab_support_readiness
 version: !ruby/object:Gem::Version
-  version: 1.0.119
+  version: 1.0.121
 platform: ruby
 authors:
 - Jason Colyer
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2025-02-11 00:00:00.000000000 Z
+date: 2025-02-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -391,6 +391,7 @@ files:
 - lib/support_readiness/support_super_form_processor/usgov_set_collaboration_id.rb
 - lib/support_readiness/support_super_form_processor/usgov_set_org_ase.rb
 - lib/support_readiness/ticket_processor.rb
+- lib/support_readiness/ticket_processor/2fa_removal.rb
 - lib/support_readiness/ticket_processor/account_blocked.rb
 - lib/support_readiness/ticket_processor/code_request_advanced_sast.rb
 - lib/support_readiness/ticket_processor/email_suppressions.rb