jcoffey-dev
7dae9b29fd
Upstream commit: 474dd0229cb20cf513036619781ed97bd8073c3f Enterprise-only files removed or emptied: 63 Enterprise-only snippets removed: 117 in 50 files Dangling module declarations removed: 5 Cargo edits turning enterprise off: 14 Verification: clean Enterprise feature gates left for rebuilt features: 19 in 18 files Produced by tools/fork/strip.py. The full report is in docs/fork/strip-reports/ on main.
108 lines
3.3 KiB
Rust
108 lines
3.3 KiB
Rust
/*
|
|
* SPDX-FileCopyrightText: 2020 Stalwart Labs LLC <[email protected]>
|
|
*
|
|
* SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-SEL
|
|
*/
|
|
|
|
use crate::{
|
|
DavError, DavMethod,
|
|
common::{
|
|
lock::{LockRequestHandler, ResourceState},
|
|
uri::DavUriResource,
|
|
},
|
|
};
|
|
use common::{Server, auth::AccessToken};
|
|
use dav_proto::RequestHeaders;
|
|
use groupware::{DestroyArchive, cache::GroupwareCache};
|
|
use http_proto::HttpResponse;
|
|
use hyper::StatusCode;
|
|
use trc::AddContext;
|
|
use types::{acl::Acl, collection::SyncCollection};
|
|
|
|
pub(crate) trait FileDeleteRequestHandler: Sync + Send {
|
|
fn handle_file_delete_request(
|
|
&self,
|
|
access_token: &AccessToken,
|
|
headers: &RequestHeaders<'_>,
|
|
) -> impl Future<Output = crate::Result<HttpResponse>> + Send;
|
|
}
|
|
|
|
impl FileDeleteRequestHandler for Server {
|
|
async fn handle_file_delete_request(
|
|
&self,
|
|
access_token: &AccessToken,
|
|
headers: &RequestHeaders<'_>,
|
|
) -> crate::Result<HttpResponse> {
|
|
// Validate URI
|
|
let resource = self
|
|
.validate_uri(access_token, headers.uri)
|
|
.await?
|
|
.into_owned_uri()?;
|
|
let account_id = resource.account_id;
|
|
let delete_path = resource
|
|
.resource
|
|
.filter(|r| !r.is_empty())
|
|
.ok_or(DavError::Code(StatusCode::FORBIDDEN))?;
|
|
let resources = self
|
|
.fetch_dav_resources(
|
|
access_token.account_id(),
|
|
account_id,
|
|
SyncCollection::FileNode,
|
|
)
|
|
.await
|
|
.caused_by(trc::location!())?;
|
|
|
|
// Find ids to delete
|
|
let mut ids = resources.subtree(delete_path).collect::<Vec<_>>();
|
|
if ids.is_empty() {
|
|
return Err(DavError::Code(StatusCode::NOT_FOUND));
|
|
}
|
|
|
|
// Sort ids descending from the deepest to the root
|
|
ids.sort_unstable_by_key(|b| std::cmp::Reverse(b.hierarchy_seq()));
|
|
let (document_id, full_delete_path) = ids
|
|
.last()
|
|
.map(|a| (a.document_id(), resources.format_resource(*a)))
|
|
.unwrap();
|
|
let mut sorted_ids = Vec::with_capacity(ids.len());
|
|
sorted_ids.extend(ids.into_iter().map(|a| a.document_id()));
|
|
|
|
// Validate ACLs
|
|
if !access_token.is_member(account_id) {
|
|
let permissions = resources.shared_containers(access_token, [Acl::Delete], false);
|
|
if permissions.len() < sorted_ids.len() as u64
|
|
|| !sorted_ids.iter().all(|id| permissions.contains(*id))
|
|
{
|
|
return Err(DavError::Code(StatusCode::FORBIDDEN));
|
|
}
|
|
}
|
|
|
|
// Validate headers
|
|
self.validate_headers(
|
|
access_token,
|
|
headers,
|
|
vec![ResourceState {
|
|
account_id,
|
|
collection: resource.collection,
|
|
document_id: document_id.into(),
|
|
path: delete_path,
|
|
..Default::default()
|
|
}],
|
|
Default::default(),
|
|
DavMethod::DELETE,
|
|
)
|
|
.await?;
|
|
|
|
DestroyArchive(sorted_ids)
|
|
.delete(
|
|
self,
|
|
access_token.account_tenant_ids(),
|
|
account_id,
|
|
full_delete_path.into(),
|
|
)
|
|
.await?;
|
|
|
|
Ok(HttpResponse::new(StatusCode::NO_CONTENT))
|
|
}
|
|
}
|