1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
|
# frozen_string_literal: true
module Mutations
module WorkItems
class Update < BaseMutation
graphql_name 'WorkItemUpdate'
description "Updates a work item by Global ID."
include Mutations::SpamProtection
include Mutations::WorkItems::UpdateArguments
include Mutations::WorkItems::Widgetable
authorize :read_work_item
field :work_item, Types::WorkItemType,
null: true,
description: 'Updated work item.'
def resolve(id:, **attributes)
Gitlab::QueryLimiting.disable!('https://gitlab.com/gitlab-org/gitlab/-/issues/408575')
work_item = authorized_find!(id: id)
widget_params = extract_widget_params!(work_item.work_item_type, attributes)
interpret_quick_actions!(work_item, current_user, widget_params, attributes)
# Only checks permissions for base attributes because widgets define their own permissions independently
raise_resource_not_available_error! unless attributes.empty? || can_update?(work_item)
update_result = ::WorkItems::UpdateService.new(
container: work_item.resource_parent,
current_user: current_user,
params: attributes,
widget_params: widget_params,
perform_spam_check: true
).execute(work_item)
check_spam_action_response!(work_item)
{
work_item: (update_result[:work_item] if update_result[:status] == :success),
errors: Array.wrap(update_result[:message])
}
end
private
def interpret_quick_actions!(work_item, current_user, widget_params, attributes = {})
return unless work_item.work_item_type.widgets.include?(::WorkItems::Widgets::Description)
description_param = widget_params[::WorkItems::Widgets::Description.api_symbol]
return unless description_param
original_description = description_param.fetch(:description, work_item.description)
description, command_params = QuickActions::InterpretService
.new(work_item.project, current_user, {})
.execute(original_description, work_item)
description_param[:description] = description if description && description != original_description
parsed_params = work_item.transform_quick_action_params(command_params)
widget_params.merge!(parsed_params[:widgets])
attributes.merge!(parsed_params[:common])
end
def can_update?(work_item)
current_user.can?(:update_work_item, work_item)
end
end
end
end
Mutations::WorkItems::Update.prepend_mod
|
