tetratto/crates/core/src/database/messages.rs

use super::*;
use crate::cache::Cache;
use crate::model::moderation::AuditLogEntry;
use crate::model::{
    Error, Result, auth::User, permissions::FinePermission,
    communities_permissions::CommunityPermission, channels::Message,
};
use crate::{auto_method, execute, get, query_row, query_rows, params};

#[cfg(feature = "sqlite")]
use rusqlite::Row;

use tetratto_shared::unix_epoch_timestamp;
#[cfg(feature = "postgres")]
use tokio_postgres::Row;

impl DataManager {
    /// Get a [`Message`] from an SQL row.
    pub(crate) fn get_message_from_row(
        #[cfg(feature = "sqlite")] x: &Row<'_>,
        #[cfg(feature = "postgres")] x: &Row,
    ) -> Message {
        Message {
            id: get!(x->0(i64)) as usize,
            channel: get!(x->1(i64)) as usize,
            owner: get!(x->2(i64)) as usize,
            created: get!(x->3(i64)) as usize,
            edited: get!(x->4(i64)) as usize,
            content: get!(x->5(String)),
            context: serde_json::from_str(&get!(x->6(String))).unwrap(),
        }
    }

    auto_method!(get_message_by_id(usize)@get_message_from_row -> "SELECT * FROM messages WHERE id = $1" --name="message" --returns=Message --cache-key-tmpl="atto.message:{}");

    /// Get all messages by channel (paginated).
    ///
    /// # Arguments
    /// * `channel` - the ID of the community to fetch channels for
    /// * `batch` - the limit of items in each page
    /// * `page` - the page number
    pub async fn get_messages_by_channel(
        &self,
        channel: usize,
        batch: usize,
        page: usize,
    ) -> Result<Vec<Message>> {
        let conn = match self.connect().await {
            Ok(c) => c,
            Err(e) => return Err(Error::DatabaseConnection(e.to_string())),
        };

        let res = query_rows!(
            &conn,
            "SELECT * FROM messages WHERE channel = $1 ORDER BY created DESC LIMIT $1 OFFSET $2",
            &[&(channel as i64), &(batch as i64), &((page * batch) as i64)],
            |x| { Self::get_message_from_row(x) }
        );

        if res.is_err() {
            return Err(Error::GeneralNotFound("message".to_string()));
        }

        Ok(res.unwrap())
    }

    /// Create a new message in the database.
    ///
    /// # Arguments
    /// * `data` - a mock [`Message`] object to insert
    pub async fn create_message(&self, data: Message) -> Result<()> {
        let user = self.get_user_by_id(data.owner).await?;
        let channel = self.get_channel_by_id(data.channel).await?;

        // check user permission in community
        let membership = self
            .get_membership_by_owner_community(user.id, channel.community)
            .await?;

        if !membership.role.check_member() {
            return Err(Error::NotAllowed);
        }

        // check user permission to post in channel
        let role = membership.role.bits();

        if role < channel.minimum_role_write {
            return Err(Error::NotAllowed);
        }

        // ...
        let conn = match self.connect().await {
            Ok(c) => c,
            Err(e) => return Err(Error::DatabaseConnection(e.to_string())),
        };

        let res = execute!(
            &conn,
            "INSERT INTO messages VALUES ($1, $2, $3, $4, $5, $6, $7)",
            params![
                &(data.id as i64),
                &(data.channel as i64),
                &(data.owner as i64),
                &(data.created as i64),
                &(data.edited as i64),
                &data.content,
                &serde_json::to_string(&data.context).unwrap()
            ]
        );

        if let Err(e) = res {
            return Err(Error::DatabaseError(e.to_string()));
        }

        Ok(())
    }

    pub async fn delete_message(&self, id: usize, user: User) -> Result<()> {
        let message = self.get_message_by_id(id).await?;
        let channel = self.get_channel_by_id(message.channel).await?;

        // check user permission in community
        let membership = self
            .get_membership_by_owner_community(user.id, channel.community)
            .await?;

        if !membership.role.check(CommunityPermission::MANAGE_MESSAGES)
            && !user.permissions.check(FinePermission::MANAGE_MESSAGES)
        {
            return Err(Error::NotAllowed);
        } else if user.permissions.check(FinePermission::MANAGE_MESSAGES) {
            self.create_audit_log_entry(AuditLogEntry::new(
                user.id,
                format!("invoked `delete_message` with x value `{id}`"),
            ))
            .await?
        }

        // ...
        let conn = match self.connect().await {
            Ok(c) => c,
            Err(e) => return Err(Error::DatabaseConnection(e.to_string())),
        };

        let res = execute!(&conn, "DELETE FROM messages WHERE id = $1", &[&(id as i64)]);

        if let Err(e) = res {
            return Err(Error::DatabaseError(e.to_string()));
        }

        self.2.remove(format!("atto.message:{}", id)).await;
        Ok(())
    }

    pub async fn update_message_content(&self, id: usize, user: User, x: String) -> Result<()> {
        let y = self.get_message_by_id(id).await?;

        if user.id != y.owner {
            if !user.permissions.check(FinePermission::MANAGE_MESSAGES) {
                return Err(Error::NotAllowed);
            } else {
                self.create_audit_log_entry(AuditLogEntry::new(
                    user.id,
                    format!("invoked `update_message_content` with x value `{id}`"),
                ))
                .await?
            }
        }

        // ...
        let conn = match self.connect().await {
            Ok(c) => c,
            Err(e) => return Err(Error::DatabaseConnection(e.to_string())),
        };

        let res = execute!(
            &conn,
            "UPDATE messages SET content = $1, edited = $2 WHERE id = $2",
            params![&x, &(unix_epoch_timestamp() as i64), &(id as i64)]
        );

        if let Err(e) = res {
            return Err(Error::DatabaseError(e.to_string()));
        }

        // return
        Ok(())
    }
}