'use strict'; var async = require('async'); var groups = require('../groups'); var meta = require('../meta'); var user = require('../user'); var utils = require('../utils'); var groupsController = require('../controllers/groups'); var events = require('../events'); var SocketGroups = module.exports; SocketGroups.before = function (socket, method, data, next) { if (!data) { return next(new Error('[[error:invalid-data]]')); } next(); }; SocketGroups.join = function (socket, data, callback) { if (socket.uid <= 0) { return callback(new Error('[[error:invalid-uid]]')); } if (data.groupName === 'administrators' || groups.isPrivilegeGroup(data.groupName)) { return callback(new Error('[[error:not-allowed]]')); } async.waterfall([ function (next) { groups.exists(data.groupName, next); }, function (exists, next) { if (!exists) { return next(new Error('[[error:no-group]]')); } if (!meta.config.allowPrivateGroups) { return groups.join(data.groupName, socket.uid, callback); } async.parallel({ isAdmin: async.apply(user.isAdministrator, socket.uid), groupData: async.apply(groups.getGroupData, data.groupName), }, next); }, function (results, next) { if (results.groupData.private && results.groupData.disableJoinRequests) { return next(new Error('[[error:join-requests-disabled]]')); } if (!results.groupData.private || results.isAdmin) { groups.join(data.groupName, socket.uid, next); } else { groups.requestMembership(data.groupName, socket.uid, next); } }, ], callback); }; SocketGroups.leave = function (socket, data, callback) { if (socket.uid <= 0) { return callback(new Error('[[error:invalid-uid]]')); } if (data.groupName === 'administrators') { return callback(new Error('[[error:cant-remove-self-as-admin]]')); } groups.leave(data.groupName, socket.uid, callback); }; SocketGroups.addMember = isOwner(function (socket, data, callback) { if (data.groupName === 'administrators' || groups.isPrivilegeGroup(data.groupName)) { return callback(new Error('[[error:not-allowed]]')); } groups.join(data.groupName, data.uid, callback); }); function isOwner(next) { return function (socket, data, callback) { async.parallel({ isAdmin: async.apply(user.isAdministrator, socket.uid), isGlobalModerator: async.apply(user.isGlobalModerator, socket.uid), isOwner: async.apply(groups.ownership.isOwner, socket.uid, data.groupName), group: async.apply(groups.getGroupData, data.groupName), }, function (err, results) { if (err) { return callback(err); } var isOwner = results.isOwner || results.isAdmin || (results.isGlobalModerator && !results.group.system); if (!isOwner) { return callback(new Error('[[error:no-privileges]]')); } next(socket, data, callback); }); }; } function isInvited(next) { return function (socket, data, callback) { groups.isInvited(socket.uid, data.groupName, function (err, invited) { if (err || !invited) { return callback(err || new Error('[[error:not-invited]]')); } next(socket, data, callback); }); }; } SocketGroups.grant = isOwner(function (socket, data, callback) { groups.ownership.grant(data.toUid, data.groupName, callback); }); SocketGroups.rescind = isOwner(function (socket, data, callback) { groups.ownership.rescind(data.toUid, data.groupName, callback); }); SocketGroups.accept = isOwner(function (socket, data, callback) { async.waterfall([ function (next) { groups.acceptMembership(data.groupName, data.toUid, next); }, function (next) { events.log({ type: 'accept-membership', uid: socket.uid, ip: socket.ip, groupName: data.groupName, targetUid: data.toUid, }); setImmediate(next); }, ], callback); }); SocketGroups.reject = isOwner(function (socket, data, callback) { async.waterfall([ function (next) { groups.rejectMembership(data.groupName, data.toUid, next); }, function (next) { events.log({ type: 'reject-membership', uid: socket.uid, ip: socket.ip, groupName: data.groupName, targetUid: data.toUid, }); setImmediate(next); }, ], callback); }); SocketGroups.acceptAll = isOwner(function (socket, data, callback) { acceptRejectAll(SocketGroups.accept, socket, data, callback); }); SocketGroups.rejectAll = isOwner(function (socket, data, callback) { acceptRejectAll(SocketGroups.reject, socket, data, callback); }); function acceptRejectAll(method, socket, data, callback) { async.waterfall([ function (next) { groups.getPending(data.groupName, next); }, function (uids, next) { async.each(uids, function (uid, next) { method(socket, { groupName: data.groupName, toUid: uid }, next); }, next); }, ], callback); } SocketGroups.issueInvite = isOwner(function (socket, data, callback) { groups.invite(data.groupName, data.toUid, callback); }); SocketGroups.issueMassInvite = isOwner(function (socket, data, callback) { if (!data || !data.usernames || !data.groupName) { return callback(new Error('[[error:invalid-data]]')); } var usernames = String(data.usernames).split(','); usernames = usernames.map(function (username) { return username && username.trim(); }); async.waterfall([ function (next) { user.getUidsByUsernames(usernames, next); }, function (uids, next) { uids = uids.filter(function (uid) { return !!uid && parseInt(uid, 10); }); async.eachSeries(uids, function (uid, next) { groups.invite(data.groupName, uid, next); }, next); }, ], callback); }); SocketGroups.rescindInvite = isOwner(function (socket, data, callback) { groups.rejectMembership(data.groupName, data.toUid, callback); }); SocketGroups.acceptInvite = isInvited(function (socket, data, callback) { groups.acceptMembership(data.groupName, socket.uid, callback); }); SocketGroups.rejectInvite = isInvited(function (socket, data, callback) { groups.rejectMembership(data.groupName, socket.uid, callback); }); SocketGroups.update = isOwner(function (socket, data, callback) { groups.update(data.groupName, data.values, callback); }); SocketGroups.kick = isOwner(function (socket, data, callback) { if (socket.uid === parseInt(data.uid, 10)) { return callback(new Error('[[error:cant-kick-self]]')); } async.waterfall([ function (next) { groups.ownership.isOwner(data.uid, data.groupName, next); }, function (isOwner, next) { groups.kick(data.uid, data.groupName, isOwner, next); }, ], callback); }); SocketGroups.create = function (socket, data, callback) { if (!socket.uid) { return callback(new Error('[[error:no-privileges]]')); } else if (!meta.config.allowGroupCreation) { return callback(new Error('[[error:group-creation-disabled]]')); } else if (groups.isPrivilegeGroup(data.name)) { return callback(new Error('[[error:invalid-group-name]]')); } data.ownerUid = socket.uid; groups.create(data, callback); }; SocketGroups.delete = isOwner(function (socket, data, callback) { if (data.groupName === 'administrators' || data.groupName === 'registered-users' || data.groupName === 'guests' || data.groupName === 'Global Moderators') { return callback(new Error('[[error:not-allowed]]')); } groups.destroy(data.groupName, callback); }); SocketGroups.search = function (socket, data, callback) { data.options = data.options || {}; if (!data.query) { var groupsPerPage = 15; groupsController.getGroupsFromSet(socket.uid, data.options.sort, 0, groupsPerPage - 1, function (err, data) { callback(err, !err ? data.groups : null); }); return; } groups.search(data.query, data.options, callback); }; SocketGroups.loadMore = function (socket, data, callback) { if (!data.sort || !utils.isNumber(data.after) || parseInt(data.after, 10) < 0) { return callback(new Error('[[error:invalid-data]]')); } var groupsPerPage = 9; var start = parseInt(data.after, 10); var stop = start + groupsPerPage - 1; groupsController.getGroupsFromSet(socket.uid, data.sort, start, stop, callback); }; SocketGroups.searchMembers = function (socket, data, callback) { data.uid = socket.uid; groups.searchMembers(data, callback); }; SocketGroups.loadMoreMembers = function (socket, data, callback) { if (!data.groupName || !utils.isNumber(data.after) || parseInt(data.after, 10) < 0) { return callback(new Error('[[error:invalid-data]]')); } data.after = parseInt(data.after, 10); async.waterfall([ function (next) { user.getUsersFromSet('group:' + data.groupName + ':members', socket.uid, data.after, data.after + 9, next); }, function (users, next) { next(null, { users: users, nextStart: data.after + 10, }); }, ], callback); }; SocketGroups.cover = {}; SocketGroups.cover.update = function (socket, data, callback) { if (!socket.uid) { return callback(new Error('[[error:no-privileges]]')); } async.waterfall([ function (next) { groups.ownership.isOwner(socket.uid, data.groupName, next); }, function (isOwner, next) { if (!isOwner) { return next(new Error('[[error:no-privileges]]')); } groups.updateCover(socket.uid, data, next); }, ], callback); }; SocketGroups.cover.remove = function (socket, data, callback) { if (!socket.uid) { return callback(new Error('[[error:no-privileges]]')); } async.waterfall([ function (next) { groups.ownership.isOwner(socket.uid, data.groupName, next); }, function (isOwner, next) { if (!isOwner) { return next(new Error('[[error:no-privileges]]')); } groups.removeCover(data, next); }, ], callback); };