1 files changed, 39 insertions, 0 deletions
diff --git a/app/services/packages/protection/create_rule_service.rb b/app/services/packages/protection/create_rule_service.rb
new file mode 100644
index 00000000000..e69eb8faf60
--- /dev/null
+++ b/app/services/packages/protection/create_rule_service.rb
@@ -0,0 +1,39 @@
+# frozen_string_literal: true
+
+module Packages
+  module Protection
+    class CreateRuleService < BaseProjectService
+      ALLOWED_ATTRIBUTES = %i[
+        package_name_pattern
+        package_type
+        push_protected_up_to_access_level
+      ].freeze
+
+      def execute
+        unless can?(current_user, :admin_package, project)
+          error_message = _('Unauthorized to create a package protection rule')
+          return service_response_error(message: error_message)
+        end
+
+        package_protection_rule = project.package_protection_rules.create(params.slice(*ALLOWED_ATTRIBUTES))
+
+        unless package_protection_rule.persisted?
+          return service_response_error(message: package_protection_rule.errors.full_messages)
+        end
+
+        ServiceResponse.success(payload: { package_protection_rule: package_protection_rule })
+      rescue StandardError => e
+        service_response_error(message: e.message)
+      end
+
+      private
+
+      def service_response_error(message:)
+        ServiceResponse.error(
+          message: message,
+          payload: { package_protection_rule: nil }
+        )
+      end
+    end
+  end
+end