ld
6604ecb026
- feat: cross-user file access returns not-found instead of permission-denied - fix: repository delete now only affects active rows and returns ErrNotFound when no row changes; repeated deletes yield not-found - feat: parent directory operations (list, upload, create-dir, move) conceal ownership of other user's directories - test: update handler, service, repository, and integration tests to assert not-found behavior for cross-user and missing file operations
130 lines
4.2 KiB
Go
130 lines
4.2 KiB
Go
package repository
|
|
|
|
import (
|
|
"context"
|
|
"errors"
|
|
|
|
"gorm.io/gorm"
|
|
|
|
"github.com/dhao2001/mygo/internal/model"
|
|
)
|
|
|
|
// FileRepository provides access to file records.
|
|
type FileRepository interface {
|
|
Create(ctx context.Context, file *model.File) error
|
|
FindByID(ctx context.Context, id string) (*model.File, error)
|
|
FindByUserID(ctx context.Context, userID string, offset, limit int) ([]model.File, int64, error)
|
|
FindByParentID(ctx context.Context, userID string, parentID *string) ([]model.File, error)
|
|
FindByParentIDPaginated(ctx context.Context, userID string, parentID *string, offset, limit int) ([]model.File, int64, error)
|
|
FindByNameAndParent(ctx context.Context, userID string, parentID *string, name string) (*model.File, error)
|
|
Update(ctx context.Context, file *model.File) error
|
|
Delete(ctx context.Context, id string) error
|
|
}
|
|
|
|
type fileRepository struct {
|
|
db *gorm.DB
|
|
}
|
|
|
|
// NewFileRepository creates a FileRepository backed by GORM.
|
|
func NewFileRepository(db *gorm.DB) FileRepository {
|
|
return &fileRepository{db: db}
|
|
}
|
|
|
|
func (r *fileRepository) Create(ctx context.Context, file *model.File) error {
|
|
result := r.db.WithContext(ctx).Create(file)
|
|
if result.Error != nil {
|
|
if isDuplicateKeyError(result.Error) {
|
|
return model.ErrDuplicate
|
|
}
|
|
return result.Error
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func (r *fileRepository) FindByID(ctx context.Context, id string) (*model.File, error) {
|
|
var file model.File
|
|
result := r.db.WithContext(ctx).First(&file, "id = ? AND status = ?", id, model.StatusActive)
|
|
if errors.Is(result.Error, gorm.ErrRecordNotFound) {
|
|
return nil, model.ErrNotFound
|
|
}
|
|
if result.Error != nil {
|
|
return nil, result.Error
|
|
}
|
|
return &file, nil
|
|
}
|
|
|
|
func (r *fileRepository) FindByUserID(ctx context.Context, userID string, offset, limit int) ([]model.File, int64, error) {
|
|
var files []model.File
|
|
var total int64
|
|
|
|
if err := r.db.WithContext(ctx).Model(&model.File{}).Where("user_id = ? AND status = ?", userID, model.StatusActive).Count(&total).Error; err != nil {
|
|
return nil, 0, err
|
|
}
|
|
|
|
result := r.db.WithContext(ctx).Where("user_id = ? AND status = ?", userID, model.StatusActive).Offset(offset).Limit(limit).Find(&files)
|
|
if result.Error != nil {
|
|
return nil, 0, result.Error
|
|
}
|
|
|
|
return files, total, nil
|
|
}
|
|
|
|
func (r *fileRepository) FindByParentID(ctx context.Context, userID string, parentID *string) ([]model.File, error) {
|
|
var files []model.File
|
|
result := r.db.WithContext(ctx).Where("user_id = ? AND parent_id IS ? AND status = ?", userID, parentID, model.StatusActive).Find(&files)
|
|
if result.Error != nil {
|
|
return nil, result.Error
|
|
}
|
|
return files, nil
|
|
}
|
|
|
|
func (r *fileRepository) FindByParentIDPaginated(ctx context.Context, userID string, parentID *string, offset, limit int) ([]model.File, int64, error) {
|
|
var files []model.File
|
|
var total int64
|
|
|
|
if err := r.db.WithContext(ctx).Model(&model.File{}).Where("user_id = ? AND parent_id IS ? AND status = ?", userID, parentID, model.StatusActive).Count(&total).Error; err != nil {
|
|
return nil, 0, err
|
|
}
|
|
|
|
result := r.db.WithContext(ctx).Where("user_id = ? AND parent_id IS ? AND status = ?", userID, parentID, model.StatusActive).Offset(offset).Limit(limit).Order("is_dir DESC, name ASC").Find(&files)
|
|
if result.Error != nil {
|
|
return nil, 0, result.Error
|
|
}
|
|
|
|
return files, total, nil
|
|
}
|
|
|
|
func (r *fileRepository) FindByNameAndParent(ctx context.Context, userID string, parentID *string, name string) (*model.File, error) {
|
|
var file model.File
|
|
result := r.db.WithContext(ctx).Where("user_id = ? AND parent_id IS ? AND name = ? AND status = ?", userID, parentID, name, model.StatusActive).First(&file)
|
|
if errors.Is(result.Error, gorm.ErrRecordNotFound) {
|
|
return nil, model.ErrNotFound
|
|
}
|
|
if result.Error != nil {
|
|
return nil, result.Error
|
|
}
|
|
return &file, nil
|
|
}
|
|
|
|
func (r *fileRepository) Update(ctx context.Context, file *model.File) error {
|
|
result := r.db.WithContext(ctx).Save(file)
|
|
if result.Error != nil {
|
|
return result.Error
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func (r *fileRepository) Delete(ctx context.Context, id string) error {
|
|
result := r.db.WithContext(ctx).
|
|
Model(&model.File{}).
|
|
Where("id = ? AND status = ?", id, model.StatusActive).
|
|
Update("status", model.StatusUserDeleted)
|
|
if result.Error != nil {
|
|
return result.Error
|
|
}
|
|
if result.RowsAffected == 0 {
|
|
return model.ErrNotFound
|
|
}
|
|
return nil
|
|
}
|