0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-05 17:25:34 +08:00
discourse/app/models/group_archived_message.rb
Arpit Jalan 0a0f4975ef
FIX: Scope group archive and inbox actions to the group's messages (#41662)
Previously, `GroupArchivedMessage.archive!` and `.move_to_inbox!` did
not validate the target topic against the given group before updating
state and triggering events.

This change makes both methods no-ops unless the topic is a private
message with the group as an allowed recipient, and applies the same
check in `TopicsBulkAction`.
2026-07-14 10:05:10 +05:30

75 lines
2.3 KiB
Ruby
Vendored

# frozen_string_literal: true
class GroupArchivedMessage < ActiveRecord::Base
belongs_to :group
belongs_to :topic
def self.move_to_inbox!(group_id, topic, opts = {})
return unless topic.private_message? && topic.topic_allowed_groups.exists?(group_id: group_id)
topic_id = topic.id
GroupArchivedMessage.where(group_id: group_id, topic_id: topic_id).destroy_all
trigger(:move_to_inbox, group_id, topic_id)
MessageBus.publish("/topic/#{topic_id}", { type: "move_to_inbox" }, group_ids: [group_id])
publish_topic_tracking_state(topic, group_id, opts[:acting_user_id])
Jobs.enqueue(
:group_pm_update_summary,
group_id: group_id,
topic_id: topic_id,
acting_user_id: opts[:acting_user_id],
)
end
def self.archive!(group_id, topic, opts = {})
return unless topic.private_message? && topic.topic_allowed_groups.exists?(group_id: group_id)
topic_id = topic.id
GroupArchivedMessage.where(group_id: group_id, topic_id: topic_id).destroy_all
GroupArchivedMessage.create!(group_id: group_id, topic_id: topic_id)
trigger(:archive_message, group_id, topic_id)
MessageBus.publish("/topic/#{topic_id}", { type: "archived" }, group_ids: [group_id])
publish_topic_tracking_state(topic, group_id, opts[:acting_user_id])
Jobs.enqueue(
:group_pm_update_summary,
group_id: group_id,
topic_id: topic_id,
acting_user_id: opts[:acting_user_id],
)
end
def self.trigger(event, group_id, topic_id)
group = Group.find_by(id: group_id)
topic = Topic.find_by(id: topic_id)
DiscourseEvent.trigger(event, group: group, topic: topic) if group && topic
end
def self.publish_topic_tracking_state(topic, group_id, acting_user_id = nil)
PrivateMessageTopicTrackingState.publish_group_archived(
topic: topic,
group_id: group_id,
acting_user_id: acting_user_id,
)
end
private_class_method :publish_topic_tracking_state
end
# == Schema Information
#
# Table name: group_archived_messages
#
# id :integer not null, primary key
# created_at :datetime not null
# updated_at :datetime not null
# group_id :integer not null
# topic_id :integer not null
#
# Indexes
#
# index_group_archived_messages_on_group_id_and_topic_id (group_id,topic_id) UNIQUE
#