application specific: Ensure only allowed person (usually admin or file owner) i...

[github-actions]

application specific: Ensure only allowed person (usually admin or file owner) is allowed to delete

flox/backend/src/flox/modules/file/file.resolver.ts

Line 52 in 480f934

// TODO application specific: Ensure only allowed person (usually admin or file owner) is allowed to delete

  ): Promise<PrivateFile> {
    return this.fileService.getPrivateFile(getPrivateFileArgs);
  }

  /**
   * Deletes a private file
   * @param {DeleteFileInput} deleteFileInput - contains UUID
   * @returns {Promise<PrivateFile>} - the file that was deleted
   */
  @LoggedIn() // TODO application specific: set appropriate guards here
  @Mutation(() => User)
  async deletePrivateFile(
    @Args('deleteFileInput')
    deleteFileInput: DeleteFileInput,
  ): Promise<PrivateFile> {
    // TODO application specific: Ensure only allowed person (usually admin or file owner) is allowed to delete
    return this.fileService.deleteFile(
      deleteFileInput,
      false,
    ) as unknown as PrivateFile;
  }

  /**
   * Deletes a public file
   * @param {DeleteFileInput} deleteFileInput - contains UUID
   * @returns {Promise<PrivateFile>} - the file that was deleted
   */
  @LoggedIn() // TODO application specific: set appropriate guards here
  @Mutation(() => User)
  async deletePublicFile(
    @Args('deleteFileInput')
    deleteFileInput: DeleteFileInput,
  ): Promise<PublicFile> {
    // TODO application specific: Ensure only allowed person (usually admin ) is allowed to delete
    return this.fileService.deleteFile(
      deleteFileInput,
      true,
    ) as unknown as PublicFile;
  }
}

d6668fa7e012f399c9446efb24d8acddbd2c93f9