- // Should have videofile file
- const videofile = files.videofile
- if (!videofile || videofile.length === 0) return false
+ // Check if the user can delete the video
+ // The user can delete it if he has the right
+ // Or if s/he is the video's account
+ const account = video.VideoChannel.Account
+ if (user.hasRight(right) === false && account.userId !== user.id) {
+ res.status(403)
+ .json({ error: 'Cannot manage a video of another user.' })
+ .end()
+ return false
+ }
+
+ return true
+}
+
+async function isVideoExist (id: string, res: Response) {
+ let video: VideoModel | null
+
+ if (validator.isInt(id)) {
+ video = await VideoModel.loadAndPopulateAccountAndServerAndTags(+id)
+ } else { // UUID
+ video = await VideoModel.loadByUUIDAndPopulateAccountAndServerAndTags(id)
+ }
+
+ if (video === null) {
+ res.status(404)
+ .json({ error: 'Video not found' })
+ .end()
+
+ return false
+ }
+
+ res.locals.video = video
+ return true
+}