discourse/lib/post_localization_updater.rb
Natalie Tay 71b96243e1
FIX: Also check if user can see post or topic prior to letting them localize it (#36749)
There exists a `localization_guardian` that checks if a user can
localize based on settings like
- `content_localization_allowed_groups`
- `content_localization_allow_author_localization`

However, it missed out checking if the user can even see the model.

This commit fixes that by adding the checks. This issue was found as I was
adding a new model (`tags`) and discovered they were absent for the
older models.

This commit also introduces a small refactor that `.find`s the model first
on the controller and passes the object, so that the subsequent services
do not have to `.find` them again.
2025-12-18 02:12:58 +08:00

22 lines
644 B
Ruby

# frozen_string_literal: true
class PostLocalizationUpdater
def self.update(post:, locale:, raw:, user:)
Guardian.new(user).ensure_can_localize_post!(post)
localization = PostLocalization.find_by(post_id: post.id, locale: locale)
raise Discourse::NotFound unless localization
return localization if localization.raw == raw
localization.raw = raw
localization.cooked = PrettyText.cook(raw)
localization.localizer_user_id = user.id
localization.post_version = post.version
localization.save!
Jobs.enqueue(:process_localized_cooked, post_localization_id: localization.id)
localization
end
end