Open resource links from any organization/sandbox

cvat-core/src/api-implementation.ts

@@ -310,11 +310,17 @@ export default function implementAPI(cvat) {
 
     cvat.organizations.activate.implementation = (organization) => {
         checkObjectType('organization', organization, null, Organization);
-        config.organizationID = organization.slug;
+        config.organization = {
+            organizationID: organization.id,
+            organizationSlug: organization.slug,
+        };
     };
 
     cvat.organizations.deactivate.implementation = async () => {
-        config.organizationID = null;
+        config.organization = {
+            organizationID: null,
+            organizationSlug: null,
+        };
     };
 
     cvat.webhooks.get.implementation = async (filter) => {

cvat-core/src/api.ts

@@ -225,6 +225,12 @@ function build() {
             set removeUnderlyingMaskPixels(value: boolean) {
                 config.removeUnderlyingMaskPixels = value;
             },
+            get onOrganizationChange(): (orgId: number) => void {
+                return config.onOrganizationChange;
+            },
+            set onOrganizationChange(value: (orgId: number) => void) {
+                config.onOrganizationChange = value;
+            },
         },
         client: {
             version: `${pjson.version}`,

cvat-core/src/config.ts

@@ -5,10 +5,14 @@
 
 const config = {
     backendAPI: '/api',
-    organizationID: null,
+    organization: {
+        organizationID: null,
+        organizationSlug: null,
+    },
     origin: '',
     uploadChunkSize: 100,
     removeUnderlyingMaskPixels: false,
+    onOrganizationChange: null,
 };
 
 export default config;

cvat-core/src/organization.ts

@@ -282,7 +282,10 @@ Object.defineProperties(Organization.prototype.remove, {
         value: async function implementation() {
             if (typeof this.id === 'number') {
                 await serverProxy.organizations.delete(this.id);
-                config.organizationID = null;
+                config.organization = {
+                    organizationID: null,
+                    organizationSlug: null,
+                };
             }
         },
     },

cvat-core/src/server-proxy.ts

@@ -32,7 +32,7 @@ type Params = {
 };
 
 function enableOrganization(): { org: string } {
-    return { org: config.organizationID || '' };
+    return { org: config.organization.organizationSlug || '' };
 }
 
 function configureStorage(storage: Storage, useDefaultLocation = false): Partial<Params> {
@@ -266,10 +266,25 @@ Axios.interceptors.request.use((reqConfig) => {
         return reqConfig;
     }
 
+    if (/\/([0-9]+)$/.test(reqConfig.url)) {
+        return reqConfig;
+    }
+
     reqConfig.params = { ...organization, ...(reqConfig.params || {}) };
     return reqConfig;
 });
 
+Axios.interceptors.response.use((response) => {
+    if (/\/([0-9]+)$/.test(response.config.url)) {
+        const newOrg = response.data.organization;
+        if (newOrg && config.organization.organizationID !== newOrg) {
+            config?.onOrganizationChange(newOrg);
+        }
+    }
+
+    return response;
+});
+
 let token = store.get('token');
 if (token) {
     Axios.defaults.headers.common.Authorization = `Token ${token}`;

cvat-ui/src/components/cvat-app.tsx

@@ -73,6 +73,7 @@ import EmailConfirmationPage from './email-confirmation-pages/email-confirmed';
 import EmailVerificationSentPage from './email-confirmation-pages/email-verification-sent';
 import IncorrectEmailConfirmationPage from './email-confirmation-pages/incorrect-email-confirmation';
 import CreateModelPage from './create-model-page/create-model-page';
+import OrganizationWatcher from './watchers/organization-watcher';
 
 interface CVATAppProps {
     loadFormats: () => void;
@@ -499,14 +500,14 @@ class CVATApplication extends React.PureComponent<CVATAppProps & RouteComponentP
                                             />
                                         </Switch>
                                     </GlobalHotKeys>
-                                    {/* eslint-disable-next-line */}
                                     <ExportDatasetModal />
                                     <ExportBackupModal />
                                     <ImportDatasetModal />
                                     <ImportBackupModal />
                                     { loggedInModals.map((Component, idx) => (
                                         <Component key={idx} targetProps={this.props} targetState={this.state} />
                                     ))}
+                                    <OrganizationWatcher />
                                     {/* eslint-disable-next-line */}
                                     <a id='downloadAnchor' target='_blank' style={{ display: 'none' }} download />
                                 </Layout.Content>

cvat-ui/src/components/watchers/organization-watcher.tsx

@@ -0,0 +1,28 @@
+// Copyright (C) 2023 CVAT.ai Corporation
+//
+// SPDX-License-Identifier: MIT
+
+import { getCore } from 'cvat-core-wrapper';
+import React, { useEffect } from 'react';
+import { useSelector } from 'react-redux';
+import { CombinedState } from 'reducers';
+
+const core = getCore();
+
+function OrganizationWatcher(): JSX.Element {
+    const organizationList = useSelector((state: CombinedState) => state.organizations.list);
+
+    useEffect(() => {
+        core.config.onOrganizationChange = (newOrgId: number) => {
+            const newOrganization = organizationList.find((org) => org.id === newOrgId);
+            if (newOrganization) {
+                localStorage.setItem('currentOrganization', newOrganization.slug);
+                window.location.reload();
+            }
+        };
+    }, []);
+
+    return <></>;
+}
+
+export default React.memo(OrganizationWatcher);

cvat/apps/engine/models.py

@@ -493,7 +493,8 @@ def get_task_id(self):
         task = self.segment.task
         return task.id if task else None
 
-    def get_organization_id(self):
+    @property
+    def organization_id(self):
         return self.segment.task.organization_id
 
     def get_organization_slug(self):
@@ -542,7 +543,8 @@ def create(cls, **kwargs):
         except IntegrityError:
             raise InvalidLabel("All label names must be unique")
 
-    def get_organization_id(self):
+    @property
+    def organization_id(self):
         if self.project is not None:
             return self.project.organization.id
         if self.task is not None:
@@ -720,8 +722,9 @@ class Issue(models.Model):
     def get_project_id(self):
         return self.job.get_project_id()
 
-    def get_organization_id(self):
-        return self.job.get_organization_id()
+    @property
+    def organization_id(self):
+        return self.job.organization_id
 
     def get_organization_slug(self):
         return self.job.get_organization_slug()
@@ -743,8 +746,9 @@ class Comment(models.Model):
     def get_project_id(self):
         return self.issue.get_project_id()
 
-    def get_organization_id(self):
-        return self.issue.get_organization_id()
+    @property
+    def organization_id(self):
+        return self.issue.organization_id
 
     def get_organization_slug(self):
         return self.issue.get_organization_slug()

cvat/apps/engine/view_utils.py

@@ -79,7 +79,7 @@ def list_action(serializer_class: Type[Serializer], **kwargs):
 def get_cloud_storage_for_import_or_export(
     storage_id: int, *, request, is_default: bool = False
 ) -> CloudStorageModel:
-    perm = CloudStoragePermission.create_scope_view(request=request, storage_id=storage_id)
+    perm = CloudStoragePermission.create_scope_view(None, storage_id=storage_id, request=request)
     result = perm.check_access()
     if not result.allow:
         if is_default:

cvat/apps/events/handlers.py

@@ -58,10 +58,7 @@ def organization_id(instance):
         return instance.id
 
     try:
-        oid = getattr(instance, "organization_id", None)
-        if oid is None:
-            return instance.get_organization_id()
-        return oid
+        return getattr(instance, "organization_id", None)
     except Exception:
         return None
 

cvat/apps/events/serializers.py

@@ -35,7 +35,7 @@ class ClientEventsSerializer(serializers.Serializer):
 
     def to_internal_value(self, data):
         request = self.context.get("request")
-        org = request.iam_context['organization']
+        org = request.iam_context["organization"]
         org_id = getattr(org, "id", None)
         org_slug = getattr(org, "slug", None)
 

cvat/apps/iam/filters.py

@@ -25,7 +25,18 @@ def filter_queryset(self, request, queryset, view):
         # filter isn't necessary but it is an extra check that we show only
         # objects inside an organization if the request in context of the
         # organization.
-        visibility = request.iam_context['visibility']
+        visibility = None
+
+        org = request.iam_context["organization"]
+        if org:
+            visibility = {'organization': org.id}
+
+        elif not org and 'org' in request.query_params:
+            visibility = {'organization': None}
+
+        elif not org and 'org_id' in request.query_params:
+            visibility = {'organization': None}
+
         if visibility and view.iam_organization_field:
             visibility[view.iam_organization_field] = visibility.pop('organization')
             return queryset.filter(**visibility).distinct()