]>
Commit | Line | Data |
---|---|---|
41fb13c3 | 1 | import express from 'express' |
444c0a0e C |
2 | import { body } from 'express-validator' |
3 | import { isBulkRemoveCommentsOfScopeValid } from '@server/helpers/custom-validators/bulk' | |
4c7e60bc | 4 | import { HttpStatusCode, UserRight } from '@shared/models' |
444c0a0e C |
5 | import { BulkRemoveCommentsOfBody } from '@shared/models/bulk/bulk-remove-comments-of-body.model' |
6 | import { logger } from '../../helpers/logger' | |
10363c74 | 7 | import { areValidationErrors, doesAccountNameWithHostExist } from './shared' |
444c0a0e C |
8 | |
9 | const bulkRemoveCommentsOfValidator = [ | |
10 | body('accountName').exists().withMessage('Should have an account name with host'), | |
11 | body('scope') | |
12 | .custom(isBulkRemoveCommentsOfScopeValid).withMessage('Should have a valid scope'), | |
13 | ||
14 | async (req: express.Request, res: express.Response, next: express.NextFunction) => { | |
15 | logger.debug('Checking bulkRemoveCommentsOfValidator parameters', { parameters: req.body }) | |
16 | ||
17 | if (areValidationErrors(req, res)) return | |
18 | if (!await doesAccountNameWithHostExist(req.body.accountName, res)) return | |
19 | ||
20 | const user = res.locals.oauth.token.User | |
21 | const body = req.body as BulkRemoveCommentsOfBody | |
22 | ||
23 | if (body.scope === 'instance' && user.hasRight(UserRight.REMOVE_ANY_VIDEO_COMMENT) !== true) { | |
76148b27 RK |
24 | return res.fail({ |
25 | status: HttpStatusCode.FORBIDDEN_403, | |
26 | message: 'User cannot remove any comments of this instance.' | |
444c0a0e C |
27 | }) |
28 | } | |
29 | ||
30 | return next() | |
31 | } | |
32 | ] | |
33 | ||
34 | // --------------------------------------------------------------------------- | |
35 | ||
36 | export { | |
37 | bulkRemoveCommentsOfValidator | |
38 | } | |
39 | ||
40 | // --------------------------------------------------------------------------- |