mirror of
https://github.com/philomena-dev/philomena.git
synced 2024-11-30 23:08:00 +01:00
60 lines
1.4 KiB
Elixir
60 lines
1.4 KiB
Elixir
|
defmodule PhilomenaWeb.Admin.User.EraseController do
|
||
|
use PhilomenaWeb, :controller
|
||
|
|
||
|
alias Philomena.Users.User
|
||
|
alias Philomena.Users
|
||
|
|
||
|
plug :verify_authorized
|
||
|
|
||
|
plug :load_resource,
|
||
|
model: User,
|
||
|
id_name: "user_id",
|
||
|
id_field: "slug",
|
||
|
persisted: true,
|
||
|
preload: [:roles]
|
||
|
|
||
|
plug :prevent_deleting_privileged_users
|
||
|
plug :prevent_deleting_verified_users
|
||
|
|
||
|
def new(conn, _params) do
|
||
|
render(conn, "new.html", title: "Erase user")
|
||
|
end
|
||
|
|
||
|
def create(conn, _params) do
|
||
|
{:ok, user} = Users.erase_user(conn.assigns.user, conn.assigns.current_user)
|
||
|
|
||
|
conn
|
||
|
|> put_flash(:info, "User erase started")
|
||
|
|> redirect(to: ~p"/profiles/#{user}")
|
||
|
end
|
||
|
|
||
|
defp verify_authorized(conn, _opts) do
|
||
|
case Canada.Can.can?(conn.assigns.current_user, :index, User) do
|
||
|
true -> conn
|
||
|
_false -> PhilomenaWeb.NotAuthorizedPlug.call(conn)
|
||
|
end
|
||
|
end
|
||
|
|
||
|
defp prevent_deleting_privileged_users(conn, _opts) do
|
||
|
if conn.assigns.user.role != "user" do
|
||
|
conn
|
||
|
|> put_flash(:error, "Cannot erase a privileged user")
|
||
|
|> redirect(to: ~p"/profiles/#{conn.assigns.user}")
|
||
|
|> Plug.Conn.halt()
|
||
|
else
|
||
|
conn
|
||
|
end
|
||
|
end
|
||
|
|
||
|
defp prevent_deleting_verified_users(conn, _opts) do
|
||
|
if conn.assigns.user.verified do
|
||
|
conn
|
||
|
|> put_flash(:error, "Cannot erase a verified user")
|
||
|
|> redirect(to: ~p"/profiles/#{conn.assigns.user}")
|
||
|
|> Plug.Conn.halt()
|
||
|
else
|
||
|
conn
|
||
|
end
|
||
|
end
|
||
|
end
|