1 files changed, 51 insertions, 0 deletions
diff --git a/app/services/uploads/destroy_service.rb b/app/services/uploads/destroy_service.rb
new file mode 100644
index 00000000000..1f0d99ff7bb
--- /dev/null
+++ b/app/services/uploads/destroy_service.rb
@@ -0,0 +1,51 @@
+# frozen_string_literal: true
+
+module Uploads
+  class DestroyService < BaseService
+    attr_accessor :model, :current_user
+
+    def initialize(model, user = nil)
+      @model = model
+      @current_user = user
+    end
+
+    def execute(secret, filename)
+      upload = find_upload(secret, filename)
+
+      unless current_user && upload && current_user.can?(:destroy_upload, upload)
+        return error(_("The resource that you are attempting to access does not "\
+                       "exist or you don't have permission to perform this action."))
+      end
+
+      if upload.destroy
+        success(upload: upload)
+      else
+        error(_('Upload could not be deleted.'))
+      end
+    end
+
+    private
+
+    # rubocop: disable CodeReuse/ActiveRecord
+    def find_upload(secret, filename)
+      uploader = uploader_class.new(model, secret: secret)
+      upload_paths = uploader.upload_paths(filename)
+
+      Upload.find_by(model: model, uploader: uploader_class.to_s, path: upload_paths)
+    rescue FileUploader::InvalidSecret
+      nil
+    end
+    # rubocop: enable CodeReuse/ActiveRecord
+
+    def uploader_class
+      case model
+      when Group
+        NamespaceFileUploader
+      when Project
+        FileUploader
+      else
+        raise ArgumentError, "unknown uploader for #{model.class.name}"
+      end
+    end
+  end
+end