mirror of
https://github.com/grafana/grafana.git
synced 2024-11-24 09:50:29 -06:00
a14621fff6
* Chore: Add user service method SetUsingOrg * Chore: Add user service method GetSignedInUserWithCacheCtx * Use method GetSignedInUserWithCacheCtx from user service * Fix lint after rebase * Fix lint * Fix lint error * roll back some changes * Roll back changes in api and middleware * Add xorm tags to SignedInUser ID fields
51 lines
1.7 KiB
Go
51 lines
1.7 KiB
Go
package api
|
|
|
|
import (
|
|
"errors"
|
|
"net/http"
|
|
|
|
"github.com/grafana/grafana/pkg/api/response"
|
|
"github.com/grafana/grafana/pkg/models"
|
|
"github.com/grafana/grafana/pkg/services/comments"
|
|
"github.com/grafana/grafana/pkg/services/org"
|
|
"github.com/grafana/grafana/pkg/util"
|
|
"github.com/grafana/grafana/pkg/web"
|
|
)
|
|
|
|
func (hs *HTTPServer) commentsGet(c *models.ReqContext) response.Response {
|
|
cmd := comments.GetCmd{}
|
|
if err := web.Bind(c.Req, &cmd); err != nil {
|
|
return response.Error(http.StatusBadRequest, "bad request data", err)
|
|
}
|
|
items, err := hs.commentsService.Get(c.Req.Context(), c.OrgID, c.SignedInUser, cmd)
|
|
if err != nil {
|
|
if errors.Is(err, comments.ErrPermissionDenied) {
|
|
return response.Error(http.StatusForbidden, "permission denied", err)
|
|
}
|
|
return response.Error(http.StatusInternalServerError, "internal error", err)
|
|
}
|
|
return response.JSON(http.StatusOK, util.DynMap{
|
|
"comments": items,
|
|
})
|
|
}
|
|
|
|
func (hs *HTTPServer) commentsCreate(c *models.ReqContext) response.Response {
|
|
cmd := comments.CreateCmd{}
|
|
if err := web.Bind(c.Req, &cmd); err != nil {
|
|
return response.Error(http.StatusBadRequest, "bad request data", err)
|
|
}
|
|
if c.SignedInUser.UserID == 0 && !c.SignedInUser.HasRole(org.RoleAdmin) {
|
|
return response.Error(http.StatusForbidden, "admin role required", nil)
|
|
}
|
|
comment, err := hs.commentsService.Create(c.Req.Context(), c.OrgID, c.SignedInUser, cmd)
|
|
if err != nil {
|
|
if errors.Is(err, comments.ErrPermissionDenied) {
|
|
return response.Error(http.StatusForbidden, "permission denied", err)
|
|
}
|
|
return response.Error(http.StatusInternalServerError, "internal error", err)
|
|
}
|
|
return response.JSON(http.StatusOK, util.DynMap{
|
|
"comment": comment,
|
|
})
|
|
}
|