]>
Commit | Line | Data |
---|---|---|
1 | import express from 'express' | |
2 | import { body } from 'express-validator' | |
3 | import { isBulkRemoveCommentsOfScopeValid } from '@server/helpers/custom-validators/bulk' | |
4 | import { HttpStatusCode, UserRight } from '@shared/models' | |
5 | import { BulkRemoveCommentsOfBody } from '@shared/models/bulk/bulk-remove-comments-of-body.model' | |
6 | import { areValidationErrors, doesAccountNameWithHostExist } from './shared' | |
7 | ||
8 | const bulkRemoveCommentsOfValidator = [ | |
9 | body('accountName') | |
10 | .exists(), | |
11 | body('scope') | |
12 | .custom(isBulkRemoveCommentsOfScopeValid), | |
13 | ||
14 | async (req: express.Request, res: express.Response, next: express.NextFunction) => { | |
15 | if (areValidationErrors(req, res)) return | |
16 | if (!await doesAccountNameWithHostExist(req.body.accountName, res)) return | |
17 | ||
18 | const user = res.locals.oauth.token.User | |
19 | const body = req.body as BulkRemoveCommentsOfBody | |
20 | ||
21 | if (body.scope === 'instance' && user.hasRight(UserRight.REMOVE_ANY_VIDEO_COMMENT) !== true) { | |
22 | return res.fail({ | |
23 | status: HttpStatusCode.FORBIDDEN_403, | |
24 | message: 'User cannot remove any comments of this instance.' | |
25 | }) | |
26 | } | |
27 | ||
28 | return next() | |
29 | } | |
30 | ] | |
31 | ||
32 | // --------------------------------------------------------------------------- | |
33 | ||
34 | export { | |
35 | bulkRemoveCommentsOfValidator | |
36 | } | |
37 | ||
38 | // --------------------------------------------------------------------------- |