summaryrefslogtreecommitdiff
path: root/app/services/snippets/destroy_service.rb
blob: f253817d94fd53b1ef85bf1ccfb730a5ce064f9d (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
# frozen_string_literal: true

module Snippets
  class DestroyService
    include Gitlab::Allowable

    attr_reader :current_user, :project

    def initialize(user, snippet)
      @current_user = user
      @snippet = snippet
      @project = snippet&.project
    end

    def execute
      if snippet.nil?
        return service_response_error('No snippet found.', 404)
      end

      unless user_can_delete_snippet?
        return service_response_error(
          "You don't have access to delete this snippet.",
          403
        )
      end

      if snippet.destroy
        ServiceResponse.success(message: 'Snippet was deleted.')
      else
        service_response_error('Failed to remove snippet.', 400)
      end
    end

    private

    attr_reader :snippet

    def user_can_delete_snippet?
      return can?(current_user, :admin_project_snippet, snippet) if project

      can?(current_user, :admin_personal_snippet, snippet)
    end

    def service_response_error(message, http_status)
      ServiceResponse.error(message: message, http_status: http_status)
    end
  end
end