talk/graph/mutators/action.js

const errors = require('../../errors');
const UsersService = require('../../services/users');
const {CREATE_ACTION, DELETE_ACTION} = require('../../perms/constants');
const {
  IGNORE_FLAGS_AGAINST_STAFF,
} = require('../../config');

/**
 * getActionItem will return the item that is associated with the given action.
 * If it does not exist, it will throw an error.
 *
 * @param {Object} ctx    the graphql context for the request
 * @param {Object} action the action being performed
 * @return {Promise}      resolves to the referenced item
 */
const getActionItem = async (ctx, {item_id, item_type}) => {
  const {
    loaders: {
      Comments,
      Users,
    },
  } = ctx;

  if (item_type === 'COMMENTS') {
    const comment = await Comments.get.load(item_id);
    if (!comment) {
      throw errors.ErrNotFound;
    }

    return comment;
  } else if (item_type === 'USERS') {
    const user = await Users.getByID.load(item_id);
    if (!user) {
      throw errors.ErrNotFound;
    }

    return user;
  }
};

/**
 * Creates an action on a item. If the item is a user flag, sets the user's status to
 * pending.
 *
 * @param  {Object} ctx    the graphql context for the request
 * @param  {Object} action the action being created
 * @return {Promise}       resolves to the action created
 */
const createAction = async (ctx, {item_id, item_type, action_type, group_id, metadata = {}}) => {
  const {
    user = {},
    pubsub,
    connectors: {
      services: {
        Actions,
      },
    },
  } = ctx;

  // Gets the item referenced by the action.
  const item = await getActionItem(ctx, {item_id, item_type});

  // If we are ignoring flags against staff, ensure that the target isn't a
  // staff member.
  if (IGNORE_FLAGS_AGAINST_STAFF) {
    if (action_type === 'FLAG') {

      // If the item is a user, and this is a flag. Check to see if they are
      // staff, if they are, don't permit the flag.
      if (item_type === 'USERS' && item.isStaff()) {
        return null;
      }
    }
  }

  // Create the action itself.
  let action = await Actions.create({
    item_id,
    item_type,
    user_id: user.id,
    group_id,
    action_type,
    metadata
  });

  if (action_type === 'FLAG') {
    if (item_type === 'USERS') {

      // Set the user's status as pending, as we need to review it.
      await UsersService.setStatus(item_id, 'PENDING');
    } else if (item_type === 'COMMENTS') {

      // The item is a comment, and this is a flag. Push that the comment was
      // flagged, don't wait for it to finish.
      pubsub.publish('commentFlagged', item);
    }
  }

  return action;
};

/**
 * Deletes an action based on the user id if the user owns that action.
 * @param  {Object} user the user performing the request
 * @param  {String} id   the id of the action to delete
 * @return {Promise}     resolves to the deleted action, or null if not found.
 */
const deleteAction = (ctx, {id}) => {
  const {
    user,
    connectors: {
      services: {
        Actions,
      },
    },
  } = ctx;

  return Actions.delete({id, user_id: user.id});
};

module.exports = (ctx) => {
  if (ctx.user && ctx.user.can(CREATE_ACTION, DELETE_ACTION)) {
    return {
      Action: {
        create: (action) => createAction(ctx, action),
        delete: (action) => deleteAction(ctx, action)
      }
    };
  }

  return {
    Action: {
      create: () => Promise.reject(errors.ErrNotAuthorized),
      delete: () => Promise.reject(errors.ErrNotAuthorized)
    }
  };
};