library.js

'use strict';

const posts = require.main.require('./src/posts');
const privileges = require.main.require('./src/privileges');

const SILENT_EDIT_PRIVILEGE = 'posts:silent-edit';
const SILENT_EDIT_CACHE_TTL = 60000;

const pendingSilentNotifications = new Map();

const plugin = module.exports;

plugin.addCategoryPrivilege = async function ({ privileges: categoryPrivileges }) {
	const privilegeData = {
		label: '[[silent-edit:admin.privilege.label]]',
		type: 'posting',
	};
	const historyPrivilege = categoryPrivileges.get('posts:history');
	const entries = Array.from(categoryPrivileges.entries())
		.filter(([key]) => key !== SILENT_EDIT_PRIVILEGE && key !== 'posts:history');
	const reordered = [];
	let inserted = false;

	entries.forEach((entry) => {
		reordered.push(entry);
		if (entry[0] === 'posts:edit') {
			reordered.push([SILENT_EDIT_PRIVILEGE, privilegeData]);
			if (historyPrivilege) {
				reordered.push(['posts:history', historyPrivilege]);
			}
			inserted = true;
		}
	});

	if (!inserted) {
		reordered.push([SILENT_EDIT_PRIVILEGE, privilegeData]);
		if (historyPrivilege) {
			reordered.push(['posts:history', historyPrivilege]);
		}
	}

	categoryPrivileges.clear();
	reordered.forEach(([key, value]) => categoryPrivileges.set(key, value));
};

plugin.addComposerBuildData = async function (hookData) {
	if (!hookData || !hookData.req || !hookData.templateData) {
		return hookData;
	}

	const pid = parseInt(hookData.req.query.pid, 10);
	if (!pid) {
		return hookData;
	}

	hookData.templateData.canSilentEdit = await canUseSilentEdit(pid, hookData.req.uid);
	return hookData;
};

plugin.addComposerPushData = async function (hookData) {
	if (!hookData || !hookData.pid || !hookData.caller) {
		return hookData;
	}

	hookData.canSilentEdit = await canUseSilentEdit(hookData.pid, hookData.caller.uid);
	return hookData;
};

plugin.captureSilentEdit = async function (hookData) {
	if (!hookData || !hookData.data || !hookData.data.silentEdit) {
		return hookData;
	}

	const { pid, uid } = hookData.data;
	const allowed = await canUseSilentEdit(pid, uid);
	if (!allowed) {
		throw new Error('[[error:no-privileges]]');
	}

	pendingSilentNotifications.set(buildNotificationId(pid, uid), Date.now());
	prunePendingNotifications();

	return hookData;
};

plugin.filterNotificationsCreate = async function (hookData) {
	if (!hookData || !hookData.data || !hookData.data.nid) {
		return hookData;
	}

	prunePendingNotifications();

	if (!pendingSilentNotifications.has(hookData.data.nid)) {
		return hookData;
	}

	pendingSilentNotifications.delete(hookData.data.nid);
	hookData.data = null;
	return hookData;
};

async function canUseSilentEdit(pid, uid) {
	if (!parseInt(uid, 10) || !pid) {
		return false;
	}

	const cid = await posts.getCidByPid(pid);
	if (!cid) {
		return false;
	}

	return await privileges.categories.can(SILENT_EDIT_PRIVILEGE, cid, uid);
}

function buildNotificationId(pid, uid) {
	return `edit_post:${pid}:uid:${uid}`;
}

function prunePendingNotifications() {
	const cutoff = Date.now() - SILENT_EDIT_CACHE_TTL;

	for (const [nid, timestamp] of pendingSilentNotifications.entries()) {
		if (timestamp < cutoff) {
			pendingSilentNotifications.delete(nid);
		}
	}
}