]>
Commit | Line | Data |
---|---|---|
41fb13c3 | 1 | import express from 'express' |
444c0a0e C |
2 | import { body } from 'express-validator' |
3 | import { isBulkRemoveCommentsOfScopeValid } from '@server/helpers/custom-validators/bulk' | |
4c7e60bc | 4 | import { HttpStatusCode, UserRight } from '@shared/models' |
444c0a0e | 5 | import { BulkRemoveCommentsOfBody } from '@shared/models/bulk/bulk-remove-comments-of-body.model' |
10363c74 | 6 | import { areValidationErrors, doesAccountNameWithHostExist } from './shared' |
444c0a0e C |
7 | |
8 | const bulkRemoveCommentsOfValidator = [ | |
396f6f01 C |
9 | body('accountName') |
10 | .exists(), | |
444c0a0e | 11 | body('scope') |
396f6f01 | 12 | .custom(isBulkRemoveCommentsOfScopeValid), |
444c0a0e C |
13 | |
14 | async (req: express.Request, res: express.Response, next: express.NextFunction) => { | |
444c0a0e C |
15 | if (areValidationErrors(req, res)) return |
16 | if (!await doesAccountNameWithHostExist(req.body.accountName, res)) return | |
17 | ||
18 | const user = res.locals.oauth.token.User | |
19 | const body = req.body as BulkRemoveCommentsOfBody | |
20 | ||
21 | if (body.scope === 'instance' && user.hasRight(UserRight.REMOVE_ANY_VIDEO_COMMENT) !== true) { | |
76148b27 RK |
22 | return res.fail({ |
23 | status: HttpStatusCode.FORBIDDEN_403, | |
24 | message: 'User cannot remove any comments of this instance.' | |
444c0a0e C |
25 | }) |
26 | } | |
27 | ||
28 | return next() | |
29 | } | |
30 | ] | |
31 | ||
32 | // --------------------------------------------------------------------------- | |
33 | ||
34 | export { | |
35 | bulkRemoveCommentsOfValidator | |
36 | } | |
37 | ||
38 | // --------------------------------------------------------------------------- |