handmade-revolt-backend/src/routes/servers/roles_delete.rs

use crate::database::*;
use crate::notifications::events::ClientboundNotification;
use crate::util::result::{Error, Result, EmptyResponse};

use mongodb::bson::doc;

#[delete("/<target>/roles/<role_id>")]
pub async fn req(user: User, target: Ref, role_id: String) -> Result<EmptyResponse> {
    let target = target.fetch_server().await?;

    let perm = permissions::PermissionCalculator::new(&user)
        .with_server(&target)
        .for_server()
        .await?;

    if !perm.get_manage_roles() {
        Err(Error::MissingPermission)?
    }

    get_collection("servers")
        .update_one(
            doc! {
                "_id": &target.id
            },
            doc! {
                "$unset": {
                    "roles.".to_owned() + &role_id: 1
                }
            },
            None
        )
        .await
        .map_err(|_| Error::DatabaseError {
            operation: "update_one",
            with: "servers"
        })?;

    get_collection("channels")
        .update_one(
            doc! {
                "server": &target.id
            },
            doc! {
                "$unset": {
                    "role_permissions.".to_owned() + &role_id: 1
                }
            },
            None
        )
        .await
        .map_err(|_| Error::DatabaseError {
            operation: "update_one",
            with: "channels"
        })?;

    get_collection("server_members")
        .update_many(
            doc! {
                "_id.server": &target.id
            },
            doc! {
                "$pull": {
                    "roles": &role_id
                }
            },
            None
        )
        .await
        .map_err(|_| Error::DatabaseError {
            operation: "update_many",
            with: "server_members"
        })?;

    ClientboundNotification::ServerRoleDelete {
        id: target.id.clone(),
        role_id
    }
    .publish(target.id);

    Ok(EmptyResponse {})
}