Import upstream v0.16.22, stripped

Upstream commit: 474dd0229cb20cf513036619781ed97bd8073c3f Enterprise-only files removed or emptied: 63 Enterprise-only snippets removed: 117 in 50 files Dangling module declarations removed: 5 Cargo edits turning enterprise off: 14 Verification: clean Enterprise feature gates left for rebuilt features: 19 in 18 files Produced by tools/fork/strip.py. The full report is in docs/fork/strip-reports/ on main.
2026-09-18 10:21:56 -07:00
commit 7dae9b29fd
1650 changed files with 485521 additions and 0 deletions
@@ -0,0 +1,107 @@
+/*
+ * SPDX-FileCopyrightText: 2020 Stalwart Labs LLC <[email protected]>
+ *
+ * SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-SEL
+ */
+
+use crate::{
+    DavError, DavMethod,
+    common::{
+        lock::{LockRequestHandler, ResourceState},
+        uri::DavUriResource,
+    },
+};
+use common::{Server, auth::AccessToken};
+use dav_proto::RequestHeaders;
+use groupware::{DestroyArchive, cache::GroupwareCache};
+use http_proto::HttpResponse;
+use hyper::StatusCode;
+use trc::AddContext;
+use types::{acl::Acl, collection::SyncCollection};
+
+pub(crate) trait FileDeleteRequestHandler: Sync + Send {
+    fn handle_file_delete_request(
+        &self,
+        access_token: &AccessToken,
+        headers: &RequestHeaders<'_>,
+    ) -> impl Future<Output = crate::Result<HttpResponse>> + Send;
+}
+
+impl FileDeleteRequestHandler for Server {
+    async fn handle_file_delete_request(
+        &self,
+        access_token: &AccessToken,
+        headers: &RequestHeaders<'_>,
+    ) -> crate::Result<HttpResponse> {
+        // Validate URI
+        let resource = self
+            .validate_uri(access_token, headers.uri)
+            .await?
+            .into_owned_uri()?;
+        let account_id = resource.account_id;
+        let delete_path = resource
+            .resource
+            .filter(|r| !r.is_empty())
+            .ok_or(DavError::Code(StatusCode::FORBIDDEN))?;
+        let resources = self
+            .fetch_dav_resources(
+                access_token.account_id(),
+                account_id,
+                SyncCollection::FileNode,
+            )
+            .await
+            .caused_by(trc::location!())?;
+
+        // Find ids to delete
+        let mut ids = resources.subtree(delete_path).collect::<Vec<_>>();
+        if ids.is_empty() {
+            return Err(DavError::Code(StatusCode::NOT_FOUND));
+        }
+
+        // Sort ids descending from the deepest to the root
+        ids.sort_unstable_by_key(|b| std::cmp::Reverse(b.hierarchy_seq()));
+        let (document_id, full_delete_path) = ids
+            .last()
+            .map(|a| (a.document_id(), resources.format_resource(*a)))
+            .unwrap();
+        let mut sorted_ids = Vec::with_capacity(ids.len());
+        sorted_ids.extend(ids.into_iter().map(|a| a.document_id()));
+
+        // Validate ACLs
+        if !access_token.is_member(account_id) {
+            let permissions = resources.shared_containers(access_token, [Acl::Delete], false);
+            if permissions.len() < sorted_ids.len() as u64
+                || !sorted_ids.iter().all(|id| permissions.contains(*id))
+            {
+                return Err(DavError::Code(StatusCode::FORBIDDEN));
+            }
+        }
+
+        // Validate headers
+        self.validate_headers(
+            access_token,
+            headers,
+            vec![ResourceState {
+                account_id,
+                collection: resource.collection,
+                document_id: document_id.into(),
+                path: delete_path,
+                ..Default::default()
+            }],
+            Default::default(),
+            DavMethod::DELETE,
+        )
+        .await?;
+
+        DestroyArchive(sorted_ids)
+            .delete(
+                self,
+                access_token.account_tenant_ids(),
+                account_id,
+                full_delete_path.into(),
+            )
+            .await?;
+
+        Ok(HttpResponse::new(StatusCode::NO_CONTENT))
+    }
+}