Add latest changes from gitlab-org/gitlab@master

4 files changed, 194 insertions, 0 deletions

diff --git a/app/graphql/mutations/snippets/base.rb b/app/graphql/mutations/snippets/base.rb
new file mode 100644
index 00000000000..9dc6d49774e
--- /dev/null
+++ b/app/graphql/mutations/snippets/base.rb
@@ -0,0 +1,30 @@
+# frozen_string_literal: true
+
+module Mutations
+  module Snippets
+    class Base < BaseMutation
+      field :snippet,
+            Types::SnippetType,
+            null: true,
+            description: 'The snippet after mutation'
+
+      private
+
+      def find_object(id:)
+        GitlabSchema.object_from_id(id)
+      end
+
+      def authorized_resource?(snippet)
+        Ability.allowed?(context[:current_user], ability_for(snippet), snippet)
+      end
+
+      def ability_for(snippet)
+        "#{ability_name}_#{snippet.to_ability_name}".to_sym
+      end
+
+      def ability_name
+        raise NotImplementedError
+      end
+    end
+  end
+end
diff --git a/app/graphql/mutations/snippets/create.rb b/app/graphql/mutations/snippets/create.rb
new file mode 100644
index 00000000000..fe1f543ea1a
--- /dev/null
+++ b/app/graphql/mutations/snippets/create.rb
@@ -0,0 +1,77 @@
+# frozen_string_literal: true
+
+module Mutations
+  module Snippets
+    class Create < BaseMutation
+      include Mutations::ResolvesProject
+
+      graphql_name 'CreateSnippet'
+
+      field :snippet,
+            Types::SnippetType,
+            null: true,
+            description: 'The snippet after mutation'
+
+      argument :title, GraphQL::STRING_TYPE,
+               required: true,
+               description: 'Title of the snippet'
+
+      argument :file_name, GraphQL::STRING_TYPE,
+               required: false,
+               description: 'File name of the snippet'
+
+      argument :content, GraphQL::STRING_TYPE,
+               required: true,
+               description: 'Content of the snippet'
+
+      argument :description, GraphQL::STRING_TYPE,
+               required: false,
+               description: 'Description of the snippet'
+
+      argument :visibility_level, Types::VisibilityLevelsEnum,
+               description: 'The visibility level of the snippet',
+               required: true
+
+      argument :project_path, GraphQL::ID_TYPE,
+               required: false,
+               description: 'The project full path the snippet is associated with'
+
+      def resolve(args)
+        project_path = args.delete(:project_path)
+
+        if project_path.present?
+          project = find_project!(project_path: project_path)
+        elsif !can_create_personal_snippet?
+          raise_resource_not_avaiable_error!
+        end
+
+        snippet = CreateSnippetService.new(project,
+                                           context[:current_user],
+                                           args).execute
+
+        {
+          snippet: snippet.valid? ? snippet : nil,
+          errors: errors_on_object(snippet)
+        }
+      end
+
+      private
+
+      def find_project!(project_path:)
+        authorized_find!(full_path: project_path)
+      end
+
+      def find_object(full_path:)
+        resolve_project(full_path: full_path)
+      end
+
+      def authorized_resource?(project)
+        Ability.allowed?(context[:current_user], :create_project_snippet, project)
+      end
+
+      def can_create_personal_snippet?
+        Ability.allowed?(context[:current_user], :create_personal_snippet)
+      end
+    end
+  end
+end
diff --git a/app/graphql/mutations/snippets/destroy.rb b/app/graphql/mutations/snippets/destroy.rb
new file mode 100644
index 00000000000..115fcfd6488
--- /dev/null
+++ b/app/graphql/mutations/snippets/destroy.rb
@@ -0,0 +1,33 @@
+# frozen_string_literal: true
+
+module Mutations
+  module Snippets
+    class Destroy < Base
+      graphql_name 'DestroySnippet'
+
+      ERROR_MSG = 'Error deleting the snippet'
+
+      argument :id,
+               GraphQL::ID_TYPE,
+               required: true,
+               description: 'The global id of the snippet to destroy'
+
+      def resolve(id:)
+        snippet = authorized_find!(id: id)
+
+        result = snippet.destroy
+        errors = result ? [] : [ERROR_MSG]
+
+        {
+          errors: errors
+        }
+      end
+
+      private
+
+      def ability_name
+        "admin"
+      end
+    end
+  end
+end
diff --git a/app/graphql/mutations/snippets/update.rb b/app/graphql/mutations/snippets/update.rb
new file mode 100644
index 00000000000..27c232bc7f8
--- /dev/null
+++ b/app/graphql/mutations/snippets/update.rb
@@ -0,0 +1,54 @@
+# frozen_string_literal: true
+
+module Mutations
+  module Snippets
+    class Update < Base
+      graphql_name 'UpdateSnippet'
+
+      argument :id,
+               GraphQL::ID_TYPE,
+               required: true,
+               description: 'The global id of the snippet to update'
+
+      argument :title, GraphQL::STRING_TYPE,
+               required: false,
+               description: 'Title of the snippet'
+
+      argument :file_name, GraphQL::STRING_TYPE,
+               required: false,
+               description: 'File name of the snippet'
+
+      argument :content, GraphQL::STRING_TYPE,
+               required: false,
+               description: 'Content of the snippet'
+
+      argument :description, GraphQL::STRING_TYPE,
+               required: false,
+               description: 'Description of the snippet'
+
+      argument :visibility_level, Types::VisibilityLevelsEnum,
+               description: 'The visibility level of the snippet',
+               required: false
+
+      def resolve(args)
+        snippet = authorized_find!(id: args.delete(:id))
+
+        result = UpdateSnippetService.new(snippet.project,
+                                          context[:current_user],
+                                          snippet,
+                                          args).execute
+
+        {
+          snippet: result ? snippet : snippet.reset,
+          errors: errors_on_object(snippet)
+        }
+      end
+
+      private
+
+      def ability_name
+        "update"
+      end
+    end
+  end
+end