snapshot of https://github.com/RocketChat/Rocket.Chat.git (develop, 2026-09-16; blobs > 131072B omitted)

apps/meteor/ee/server/api/lib/canned-responses.js

@@ -0,0 +1,168 @@
+import { CannedResponse } from '@rocket.chat/models';
+import { escapeRegExp } from '@rocket.chat/tools';
+
+import { hasPermissionAsync } from '../../../../server/lib/authorization/hasPermission';
+import { getDepartmentsWhichUserCanAccess } from '../v1/omnichannel/lib/departments';
+
+export async function findAllCannedResponses({ userId }) {
+	// If the user is an admin or livechat manager, get his own responses and all responses from all departments
+	if (await hasPermissionAsync(userId, 'view-all-canned-responses')) {
+		const cannedResponses = await CannedResponse.find({
+			$or: [
+				{
+					scope: 'user',
+					userId,
+				},
+				{
+					scope: 'department',
+				},
+				{
+					scope: 'global',
+				},
+			],
+		}).toArray();
+		return cannedResponses;
+	}
+
+	// Last scenario: user is an agent, so get his own responses and those from the departments he is in
+	const accessibleDepartments = await getDepartmentsWhichUserCanAccess(userId, true);
+
+	const cannedResponses = await CannedResponse.find({
+		$or: [
+			{
+				scope: 'user',
+				userId,
+			},
+			{
+				scope: 'department',
+				departmentId: {
+					$in: accessibleDepartments,
+				},
+			},
+			{
+				scope: 'global',
+			},
+		],
+	}).toArray();
+
+	return cannedResponses;
+}
+
+/**
+ * @param {Object} param0
+ * @param {String} param0.userId
+ * @param {String} [param0.shortcut]
+ * @param {String} [param0.text]
+ * @param {String} [param0.departmentId]
+ * @param {String} [param0.scope]
+ * @param {String} [param0.createdBy]
+ * @param {String[]} [param0.tags]
+ * @param {Object} param0.options
+ * @param {Number} param0.options.offset
+ * @param {Number} param0.options.count
+ * @param {Object} param0.options.sort
+ * @param {Object} param0.options.fields
+ */
+export async function findAllCannedResponsesFilter({ userId, shortcut, text, departmentId, scope, createdBy, tags = [], options = {} }) {
+	let extraFilter = [];
+	// if user cannot see all, filter to private + public + departments user is in
+	if (!(await hasPermissionAsync(userId, 'view-all-canned-responses'))) {
+		const accessibleDepartments = await getDepartmentsWhichUserCanAccess(userId, true);
+		const isDepartmentInScope = (departmentId) => !!accessibleDepartments.includes(departmentId);
+
+		const departmentIds = departmentId && isDepartmentInScope(departmentId) ? [departmentId] : accessibleDepartments;
+
+		extraFilter = [
+			{
+				$or: [
+					{
+						scope: 'user',
+						userId,
+					},
+					{
+						scope: 'department',
+						departmentId: {
+							$in: departmentIds,
+						},
+					},
+					{
+						scope: 'global',
+					},
+				],
+			},
+		];
+	}
+
+	if (departmentId) {
+		extraFilter = [
+			{
+				departmentId,
+			},
+		];
+	}
+
+	const textFilter = new RegExp(escapeRegExp(text), 'i');
+
+	let filter = {
+		$and: [
+			...(shortcut ? [{ shortcut }] : []),
+			...(text ? [{ $or: [{ shortcut: textFilter }, { text: textFilter }] }] : []),
+			...(scope ? [{ scope }] : []),
+			...(createdBy ? [{ 'createdBy._id': createdBy }] : []),
+			...(tags.length
+				? [
+						{
+							tags: {
+								$in: tags,
+							},
+						},
+					]
+				: []),
+			...extraFilter,
+		],
+	};
+
+	if (!filter.$and.length) {
+		filter = {};
+	}
+
+	const { cursor, totalCount } = CannedResponse.findPaginated(filter, {
+		sort: options.sort || { shortcut: 1 },
+		skip: options.offset,
+		limit: options.count,
+	});
+	const [cannedResponses, total] = await Promise.all([cursor.toArray(), totalCount]);
+	return {
+		cannedResponses,
+		total,
+	};
+}
+
+export async function findOneCannedResponse({ userId, _id }) {
+	if (await hasPermissionAsync(userId, 'view-all-canned-responses')) {
+		return CannedResponse.findOneById(_id);
+	}
+
+	const accessibleDepartments = await getDepartmentsWhichUserCanAccess(userId, true);
+
+	const filter = {
+		_id,
+		$or: [
+			{
+				scope: 'user',
+				userId,
+			},
+			{
+				scope: 'department',
+				departmentId: {
+					$in: accessibleDepartments,
+				},
+			},
+			{
+				scope: 'global',
+			},
+		],
+	};
+
+	return CannedResponse.findOne(filter);
+}