Add file attachments

server/api/controllers/attachments/create.js

@@ -0,0 +1,68 @@
+const Errors = {
+  CARD_NOT_FOUND: {
+    cardNotFound: 'Card not found',
+  },
+};
+
+module.exports = {
+  inputs: {
+    cardId: {
+      type: 'string',
+      regex: /^[0-9]+$/,
+      required: true,
+    },
+  },
+
+  exits: {
+    cardNotFound: {
+      responseType: 'notFound',
+    },
+    uploadError: {
+      responseType: 'unprocessableEntity',
+    },
+  },
+
+  async fn(inputs, exits) {
+    const { currentUser } = this.req;
+
+    const { card, project } = await sails.helpers
+      .getCardToProjectPath(inputs.cardId)
+      .intercept('pathNotFound', () => Errors.CARD_NOT_FOUND);
+
+    const isUserMemberForProject = await sails.helpers.isUserMemberForProject(
+      project.id,
+      currentUser.id,
+    );
+
+    if (!isUserMemberForProject) {
+      throw Errors.CARD_NOT_FOUND; // Forbidden
+    }
+
+    this.req.file('file').upload(sails.helpers.createAttachmentReceiver(), async (error, files) => {
+      if (error) {
+        return exits.uploadError(error.message);
+      }
+
+      if (files.length === 0) {
+        return exits.uploadError('No file was uploaded');
+      }
+
+      const file = files[0];
+
+      const attachment = await sails.helpers.createAttachment(
+        card,
+        {
+          dirname: file.extra.dirname,
+          filename: file.filename,
+          isImage: file.extra.isImage,
+          name: file.filename,
+        },
+        this.req,
+      );
+
+      return exits.success({
+        item: attachment.toJSON(),
+      });
+    });
+  },
+};

server/api/controllers/attachments/delete.js

@@ -0,0 +1,51 @@
+const Errors = {
+  ATTACHMENT_NOT_FOUND: {
+    attachmentNotFound: 'Attachment not found',
+  },
+};
+
+module.exports = {
+  inputs: {
+    id: {
+      type: 'string',
+      regex: /^[0-9]+$/,
+      required: true,
+    },
+  },
+
+  exits: {
+    attachmentNotFound: {
+      responseType: 'notFound',
+    },
+  },
+
+  async fn(inputs, exits) {
+    const { currentUser } = this.req;
+
+    const attachmentToProjectPath = await sails.helpers
+      .getAttachmentToProjectPath(inputs.id)
+      .intercept('pathNotFound', () => Errors.ATTACHMENT_NOT_FOUND);
+
+    let { attachment } = attachmentToProjectPath;
+    const { board, project } = attachmentToProjectPath;
+
+    const isUserMemberForProject = await sails.helpers.isUserMemberForProject(
+      project.id,
+      currentUser.id,
+    );
+
+    if (!isUserMemberForProject) {
+      throw Errors.ATTACHMENT_NOT_FOUND; // Forbidden
+    }
+
+    attachment = await sails.helpers.deleteAttachment(attachment, board, this.req);
+
+    if (!attachment) {
+      throw Errors.ATTACHMENT_NOT_FOUND;
+    }
+
+    return exits.success({
+      item: attachment,
+    });
+  },
+};

server/api/controllers/attachments/update.js

@@ -0,0 +1,57 @@
+const Errors = {
+  ATTACHMENT_NOT_FOUND: {
+    attachmentNotFound: 'Attachment not found',
+  },
+};
+
+module.exports = {
+  inputs: {
+    id: {
+      type: 'string',
+      regex: /^[0-9]+$/,
+      required: true,
+    },
+    name: {
+      type: 'string',
+      isNotEmptyString: true,
+    },
+  },
+
+  exits: {
+    attachmentNotFound: {
+      responseType: 'notFound',
+    },
+  },
+
+  async fn(inputs, exits) {
+    const { currentUser } = this.req;
+
+    const attachmentToProjectPath = await sails.helpers
+      .getAttachmentToProjectPath(inputs.id)
+      .intercept('pathNotFound', () => Errors.ATTACHMENT_NOT_FOUND);
+
+    let { attachment } = attachmentToProjectPath;
+    const { board, project } = attachmentToProjectPath;
+
+    const isUserMemberForProject = await sails.helpers.isUserMemberForProject(
+      project.id,
+      currentUser.id,
+    );
+
+    if (!isUserMemberForProject) {
+      throw Errors.ATTACHMENT_NOT_FOUND; // Forbidden
+    }
+
+    const values = _.pick(inputs, ['name']);
+
+    attachment = await sails.helpers.updateAttachment(attachment, values, board, this.req);
+
+    if (!attachment) {
+      throw Errors.ATTACHMENT_NOT_FOUND;
+    }
+
+    return exits.success({
+      item: attachment,
+    });
+  },
+};