core&ui: add allow invite option

packages/hydrooj/src/handler/domain.ts

@@ -175,7 +175,7 @@ class DomainUserHandler extends ManageHandler {
     @param('role', Types.Role)
     @param('join', Types.Boolean)
     async postSetUsers(domainId: string, uid: number[], role: string, join = false) {
-        if (join) this.checkPriv(PRIV.PRIV_MANAGE_ALL_DOMAIN);
+        if (join && !system.get('server.allowInvite')) this.checkPriv(PRIV.PRIV_MANAGE_ALL_DOMAIN);
         await Promise.all([
             domain.setUserRole(domainId, uid, role),
             oplog.log(this, 'domain.setRole', { uid, role, join }),

packages/hydrooj/src/model/setting.ts

@@ -314,6 +314,7 @@ SystemSetting(Schema.object({
         verify: Schema.boolean().default(true).description('Verify register email'),
     }).extra('family', 'setting_smtp'),
     server: Schema.object({
+        allowInvite: Schema.boolean().default(true).description('Allow invite users'),
         center: Schema.string().default('https://hydro.ac/center').description('Server Center').role('url').hidden(),
         name: Schema.string().default('Hydro').description('Server Name'),
         url: Schema.string().default('/').description('Server BaseURL'),

packages/ui-default/templates/domain_user.html

@@ -1,7 +1,7 @@
 {% extends "domain_base.html" %}
 {% block domain_content %}
 {{ set(UiContext, 'roles', roles.map(eval('(i) => i._id'))) }}
-{{ set(UiContext, 'canForceJoin', handler.user.hasPriv(PRIV.PRIV_MANAGE_ALL_DOMAIN)) }}
+{{ set(UiContext, 'canForceJoin', model.system.get('server.allowInvite') or handler.user.hasPriv(PRIV.PRIV_MANAGE_ALL_DOMAIN)) }}
 {% set _rolesSelect = roles.filter(eval("(i) => i._id !== 'guest'")).map(eval('(role) => [role._id, role._id]')) %}
 <div class="section">
   <div class="section__header">