// Copyright (c) 2018 Vikunja and contributors. // // This program is free software: you can redistribute it and/or modify // it under the terms of the GNU Lesser General Public License as published by // the Free Software Foundation, either version 3 of the License, or // (at your option) any later version. // // This program is distributed in the hope that it will be useful, // but WITHOUT ANY WARRANTY; without even the implied warranty of // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the // GNU Lesser General Public License for more details. // // You should have received a copy of the GNU Lesser General Public License // along with this program. If not, see . package handler import ( "fmt" "github.com/labstack/echo/v4" "net/http" ) type message struct { Message string `json:"message"` } // DeleteWeb is the web handler to delete something func (c *WebHandler) DeleteWeb(ctx echo.Context) error { // Get our model currentStruct := c.EmptyStruct() // Bind params to struct if err := ctx.Bind(currentStruct); err != nil { config.LoggingProvider.Debugf("Invalid model error. Internal error was: %s", err.Error()) if he, is := err.(*echo.HTTPError); is { return echo.NewHTTPError(http.StatusBadRequest, fmt.Sprintf("Invalid model provided. Error was: %s", he.Message)) } return echo.NewHTTPError(http.StatusBadRequest, fmt.Sprintf("Invalid model provided.")) } // Check if the user has the right to delete currentAuth, err := config.AuthProvider.AuthObject(ctx) if err != nil { return echo.NewHTTPError(http.StatusInternalServerError) } // Create the db session s := config.SessionFactory() canDelete, err := currentStruct.CanDelete(s, currentAuth) if err != nil { _ = s.Rollback() return HandleHTTPError(err, ctx) } if !canDelete { _ = s.Rollback() config.LoggingProvider.Noticef("Tried to delete while not having the rights for it (User: %v)", currentAuth) return echo.NewHTTPError(http.StatusForbidden) } err = currentStruct.Delete(s) if err != nil { _ = s.Rollback() return HandleHTTPError(err, ctx) } err = s.Commit() if err != nil { return HandleHTTPError(err, ctx) } err = ctx.JSON(http.StatusOK, message{"Successfully deleted."}) if err != nil { return HandleHTTPError(err, ctx) } return err }