discourse/lib/post_action_destroyer.rb
Sam 346e4cc28c
FIX: Allow moderators to unhide posts using acting_user context (#36512)
We were not acting as moderators when unhide, making it impossible for
moderators
to unhide posts that violated a post's validation rules.

(eg: too many links, not allowed to have embedding, etc)

Note: this still leaves the post "uneditable" by the actual user, but at
least
give the moderator a way of allowing something banned by the rules.


https://meta.discourse.org/t/embedded-media-post-allowed-groups-conflicts-with-post-moderation-workflow-unhide-fails-with-activerecord-recordinvalid/390575

---------

Co-authored-by: Krzysztof Kotlarek <kotlarek.krzysztof@gmail.com>
2025-12-09 09:25:52 +08:00

102 lines
2.6 KiB
Ruby

# frozen_string_literal: true
class PostActionDestroyer
class DestroyResult < PostActionResult
attr_accessor :post
end
def initialize(destroyed_by, post, post_action_type_id, opts = {})
@destroyed_by, @post, @post_action_type_id, @opts =
destroyed_by,
post,
post_action_type_id,
opts
end
def self.destroy(destroyed_by, post, action_key, opts = {})
new(destroyed_by, post, PostActionType.types[action_key], opts).perform
end
def post_action_type_view
@post_action_type_view ||= PostActionTypeView.new
end
def perform
result = DestroyResult.new
if @post.blank?
result.not_found = true
return result
end
finder =
PostAction.where(user: @destroyed_by, post: @post, post_action_type_id: @post_action_type_id)
finder = finder.with_deleted if @destroyed_by.staff?
post_action = finder.first
if post_action.blank?
result.not_found = true
return result
end
unless @opts[:skip_delete_check] == true || guardian.can_delete?(post_action)
result.forbidden = true
result.add_error(I18n.t("invalid_access"))
return result
end
RateLimiter.new(
@destroyed_by,
"post_action-#{@post.id}_#{@post_action_type_id}",
4,
1.minute,
).performed!
post_action.remove_act!(@destroyed_by)
if post_action.staff_took_action
post_action.post.acting_user = @destroyed_by
post_action.post.unhide!
end
if @post_action_type_id == post_action_type_view.types[:like]
GivenDailyLike.decrement_for(@destroyed_by.id)
end
case @post_action_type_id
when *post_action_type_view.notify_flag_type_ids
DiscourseEvent.trigger(:flag_destroyed, post_action, self)
when post_action_type_view.types[:like]
DiscourseEvent.trigger(:like_destroyed, post_action, self)
end
UserActionManager.post_action_destroyed(post_action)
PostActionNotifier.post_action_deleted(post_action)
result.success = true
result.post = @post.reload
notify_subscribers
result
end
protected
def self.notify_types
@notify_types ||= PostActionType.notify_flag_types.keys
end
def notify_subscribers
name = post_action_type_view.types[@post_action_type_id]
if name == :like
@post.publish_change_to_clients!(
:unliked,
{ likes_count: @post.like_count, user_id: @destroyed_by.id },
)
elsif self.class.notify_types.include?(name)
@post.publish_change_to_clients!(:acted)
end
end
def guardian
@guardian ||= Guardian.new(@destroyed_by)
end
end