]> Untitled Git - lemmy.git/blob - crates/api_crud/src/post/delete.rs
Dont return error in case optional auth is invalid (#2879)
[lemmy.git] / crates / api_crud / src / post / delete.rs
1 use crate::PerformCrud;
2 use actix_web::web::Data;
3 use lemmy_api_common::{
4   context::LemmyContext,
5   post::{DeletePost, PostResponse},
6   utils::{check_community_ban, check_community_deleted_or_removed, local_user_view_from_jwt},
7   websocket::UserOperationCrud,
8 };
9 use lemmy_db_schema::{
10   source::post::{Post, PostUpdateForm},
11   traits::Crud,
12 };
13 use lemmy_utils::{error::LemmyError, ConnectionId};
14
15 #[async_trait::async_trait(?Send)]
16 impl PerformCrud for DeletePost {
17   type Response = PostResponse;
18
19   #[tracing::instrument(skip(context, websocket_id))]
20   async fn perform(
21     &self,
22     context: &Data<LemmyContext>,
23     websocket_id: Option<ConnectionId>,
24   ) -> Result<PostResponse, LemmyError> {
25     let data: &DeletePost = self;
26     let local_user_view = local_user_view_from_jwt(&data.auth, context).await?;
27
28     let post_id = data.post_id;
29     let orig_post = Post::read(context.pool(), post_id).await?;
30
31     // Dont delete it if its already been deleted.
32     if orig_post.deleted == data.deleted {
33       return Err(LemmyError::from_message("couldnt_update_post"));
34     }
35
36     check_community_ban(
37       local_user_view.person.id,
38       orig_post.community_id,
39       context.pool(),
40     )
41     .await?;
42     check_community_deleted_or_removed(orig_post.community_id, context.pool()).await?;
43
44     // Verify that only the creator can delete
45     if !Post::is_post_creator(local_user_view.person.id, orig_post.creator_id) {
46       return Err(LemmyError::from_message("no_post_edit_allowed"));
47     }
48
49     // Update the post
50     let post_id = data.post_id;
51     let deleted = data.deleted;
52     Post::update(
53       context.pool(),
54       post_id,
55       &PostUpdateForm::builder().deleted(Some(deleted)).build(),
56     )
57     .await?;
58
59     let res = context
60       .send_post_ws_message(
61         &UserOperationCrud::DeletePost,
62         data.post_id,
63         websocket_id,
64         Some(local_user_view.person.id),
65       )
66       .await?;
67
68     Ok(res)
69   }
70 }