blob: 1f0d99ff7bbb21e12307e380acf8233f1286cf13 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
|
# frozen_string_literal: true
module Uploads
class DestroyService < BaseService
attr_accessor :model, :current_user
def initialize(model, user = nil)
@model = model
@current_user = user
end
def execute(secret, filename)
upload = find_upload(secret, filename)
unless current_user && upload && current_user.can?(:destroy_upload, upload)
return error(_("The resource that you are attempting to access does not "\
"exist or you don't have permission to perform this action."))
end
if upload.destroy
success(upload: upload)
else
error(_('Upload could not be deleted.'))
end
end
private
# rubocop: disable CodeReuse/ActiveRecord
def find_upload(secret, filename)
uploader = uploader_class.new(model, secret: secret)
upload_paths = uploader.upload_paths(filename)
Upload.find_by(model: model, uploader: uploader_class.to_s, path: upload_paths)
rescue FileUploader::InvalidSecret
nil
end
# rubocop: enable CodeReuse/ActiveRecord
def uploader_class
case model
when Group
NamespaceFileUploader
when Project
FileUploader
else
raise ArgumentError, "unknown uploader for #{model.class.name}"
end
end
end
end
|
