snapshot of https://github.com/mattermost/mattermost.git (master, 2026-09-16; blobs > 131072B omitted)

server/channels/app/draft.go

@@ -0,0 +1,192 @@
+// Copyright (c) 2015-present Mattermost, Inc. All Rights Reserved.
+// See LICENSE.txt for license information.
+
+package app
+
+import (
+	"encoding/json"
+	"errors"
+	"net/http"
+
+	"github.com/mattermost/mattermost/server/public/model"
+	"github.com/mattermost/mattermost/server/public/shared/mlog"
+	"github.com/mattermost/mattermost/server/public/shared/request"
+	"github.com/mattermost/mattermost/server/v8/channels/store"
+)
+
+func (a *App) GetDraft(userID, channelID, rootID string) (*model.Draft, *model.AppError) {
+	if !*a.Config().ServiceSettings.AllowSyncedDrafts {
+		return nil, model.NewAppError("GetDraft", "app.draft.feature_disabled", nil, "", http.StatusNotImplemented)
+	}
+
+	draft, err := a.Srv().Store().Draft().Get(userID, channelID, rootID, false)
+	if err != nil {
+		var nfErr *store.ErrNotFound
+		switch {
+		case errors.As(err, &nfErr):
+			return nil, model.NewAppError("GetDraft", "app.draft.get.app_error", nil, "", http.StatusNotFound).Wrap(err)
+		default:
+			return nil, model.NewAppError("GetDraft", "app.draft.get.app_error", nil, "", http.StatusInternalServerError).Wrap(err)
+		}
+	}
+
+	return draft, nil
+}
+
+func (a *App) UpsertDraft(rctx request.CTX, draft *model.Draft, connectionID string) (*model.Draft, *model.AppError) {
+	if !*a.Config().ServiceSettings.AllowSyncedDrafts {
+		return nil, model.NewAppError("CreateDraft", "app.draft.feature_disabled", nil, "", http.StatusNotImplemented)
+	}
+
+	// Check that channel exists and has not been deleted
+	channel, errCh := a.Srv().Store().Channel().Get(draft.ChannelId, true)
+	if errCh != nil {
+		err := model.NewAppError("CreateDraft", "api.context.invalid_param.app_error", map[string]any{"Name": "draft.channel_id"}, "", http.StatusBadRequest).Wrap(errCh)
+		return nil, err
+	}
+
+	if channel.DeleteAt != 0 {
+		err := model.NewAppError("CreateDraft", "api.draft.create_draft.can_not_draft_to_deleted.error", nil, "", http.StatusBadRequest)
+		return nil, err
+	}
+
+	restrictDM, err := a.CheckIfChannelIsRestrictedDM(rctx, channel)
+	if err != nil {
+		return nil, err
+	}
+
+	if restrictDM {
+		err := model.NewAppError("CreateDraft", "api.draft.create_draft.can_not_draft_to_restricted_dm.error", nil, "", http.StatusBadRequest)
+		return nil, err
+	}
+
+	_, nErr := a.Srv().Store().User().Get(rctx, draft.UserId)
+	if nErr != nil {
+		return nil, model.NewAppError("CreateDraft", "app.user.get.app_error", nil, "", http.StatusInternalServerError).Wrap(nErr)
+	}
+
+	// If the draft is empty, just delete it
+	if draft.Message == "" {
+		deleteErr := a.Srv().Store().Draft().Delete(draft.UserId, draft.ChannelId, draft.RootId)
+		if deleteErr != nil {
+			return nil, model.NewAppError("CreateDraft", "app.draft.save.app_error", nil, "", http.StatusInternalServerError).Wrap(deleteErr)
+		}
+		rctx.Logger().Debug("Draft deleted via empty-message upsert", mlog.String("user_id", draft.UserId), mlog.String("channel_id", draft.ChannelId), mlog.String("root_id", draft.RootId))
+		return nil, nil
+	}
+
+	var guardErr *model.AppError
+	draft, guardErr = a.runGuardedDraftWillBeUpserted(rctx, draft)
+	if guardErr != nil {
+		return nil, guardErr
+	}
+
+	dt, nErr := a.Srv().Store().Draft().Upsert(draft)
+	if nErr != nil {
+		return nil, model.NewAppError("CreateDraft", "app.draft.save.app_error", nil, "", http.StatusInternalServerError).Wrap(nErr)
+	}
+
+	dt = a.prepareDraftWithFileInfos(rctx, draft.UserId, dt)
+
+	message := model.NewWebSocketEvent(model.WebsocketEventDraftCreated, "", dt.ChannelId, dt.UserId, nil, connectionID)
+	draftJSON, jsonErr := json.Marshal(dt)
+	if jsonErr != nil {
+		rctx.Logger().Warn("Failed to encode draft to JSON", mlog.Err(jsonErr))
+	}
+	message.Add("draft", string(draftJSON))
+	a.Publish(message)
+
+	return dt, nil
+}
+
+func (a *App) GetDraftsForUser(rctx request.CTX, userID, teamID string) ([]*model.Draft, *model.AppError) {
+	if !*a.Config().ServiceSettings.AllowSyncedDrafts {
+		return nil, model.NewAppError("GetDraftsForUser", "app.draft.feature_disabled", nil, "", http.StatusNotImplemented)
+	}
+
+	drafts, err := a.Srv().Store().Draft().GetDraftsForUser(userID, teamID)
+
+	if err != nil {
+		return nil, model.NewAppError("GetDraftsForUser", "app.draft.get_drafts.app_error", nil, "", http.StatusInternalServerError).Wrap(err)
+	}
+
+	for _, draft := range drafts {
+		a.prepareDraftWithFileInfos(rctx, userID, draft)
+	}
+	return drafts, nil
+}
+
+func (a *App) prepareDraftWithFileInfos(rctx request.CTX, userID string, draft *model.Draft) *model.Draft {
+	if fileInfos, err := a.getFileInfosForDraft(rctx, draft); err != nil {
+		rctx.Logger().Error("Failed to get files for a user's drafts", mlog.String("user_id", userID), mlog.Err(err))
+	} else {
+		draft.Metadata = &model.PostMetadata{}
+		draft.Metadata.Files = fileInfos
+	}
+
+	return draft
+}
+
+func (a *App) getFileInfosForDraft(rctx request.CTX, draft *model.Draft) ([]*model.FileInfo, *model.AppError) {
+	if len(draft.FileIds) == 0 {
+		return nil, nil
+	}
+
+	allFileInfos, err := a.Srv().Store().FileInfo().GetByIds(draft.FileIds, false, true, false)
+	if err != nil {
+		return nil, model.NewAppError("GetFileInfosForDraft", "app.draft.get_for_draft.app_error", nil, "", http.StatusInternalServerError).Wrap(err)
+	}
+
+	fileInfos := []*model.FileInfo{}
+	for _, fileInfo := range allFileInfos {
+		if fileInfo.PostId == "" && fileInfo.CreatorId == draft.UserId {
+			fileInfos = append(fileInfos, fileInfo)
+		} else {
+			rctx.Logger().Debug("Invalid file id in draft", mlog.String("file_id", fileInfo.Id), mlog.String("user_id", draft.UserId))
+		}
+	}
+
+	if len(fileInfos) == 0 {
+		return nil, nil
+	}
+
+	// A draft is unsent content the author still has to be able to see and send, so the
+	// metadata stays. The rendered thumbnail is the file's actual content, so it is
+	// withheld — and never generated — when the policy denies downloading it.
+	if !a.hasFileAttachmentAccess(rctx, draft.UserId, draft.ChannelId) {
+		rctx.Logger().Debug("Withholding draft file thumbnails due to ABAC permission policy",
+			mlog.String("user_id", draft.UserId),
+			mlog.String("channel_id", draft.ChannelId),
+		)
+		for _, fileInfo := range fileInfos {
+			fileInfo.MiniPreview = nil
+		}
+
+		return fileInfos, nil
+	}
+
+	a.generateMiniPreviewForInfos(rctx, fileInfos)
+
+	return fileInfos, nil
+}
+
+func (a *App) DeleteDraft(rctx request.CTX, draft *model.Draft, connectionID string) *model.AppError {
+	if !*a.Config().ServiceSettings.AllowSyncedDrafts {
+		return model.NewAppError("DeleteDraft", "app.draft.feature_disabled", nil, "", http.StatusNotImplemented)
+	}
+
+	if err := a.Srv().Store().Draft().Delete(draft.UserId, draft.ChannelId, draft.RootId); err != nil {
+		return model.NewAppError("DeleteDraft", "app.draft.delete.app_error", nil, "", http.StatusInternalServerError).Wrap(err)
+	}
+
+	draftJSON, jsonErr := json.Marshal(draft)
+	if jsonErr != nil {
+		rctx.Logger().Warn("Failed to encode draft to JSON")
+	}
+
+	message := model.NewWebSocketEvent(model.WebsocketEventDraftDeleted, "", draft.ChannelId, draft.UserId, nil, connectionID)
+	message.Add("draft", string(draftJSON))
+	a.Publish(message)
+
+	return nil
+}