gitlab-ce/app/controllers/abuse_reports_controller.rb

70 lines
1.8 KiB
Ruby

# frozen_string_literal: true
class AbuseReportsController < ApplicationController
before_action :set_user, :set_ref_url, only: [:new, :add_category]
before_action :save_origin_url, only: [:new, :add_category]
before_action :set_origin_url, only: [:create]
feature_category :insider_threat
def new
@abuse_report = AbuseReport.new(user_id: @user.id)
end
def add_category
@abuse_report = AbuseReport.new(
user_id: @user.id,
category: report_params[:category]
)
render :new
end
def create
@abuse_report = AbuseReport.new(report_params)
@abuse_report.reporter = current_user
if @abuse_report.save
@abuse_report.notify
message = _("Thank you for your report. A GitLab administrator will look into it shortly.")
redirect_to root_path, notice: message
elsif report_params[:user_id].present?
render :new
else
redirect_to root_path, alert: _("Cannot create the abuse report. The reported user was invalid. Please try again or contact support.")
end
end
private
def report_params
params.require(:abuse_report).permit(:message, :user_id, :category)
end
# rubocop: disable CodeReuse/ActiveRecord
def set_user
@user = User.find_by(id: params[:user_id])
if @user.nil?
redirect_to root_path, alert: _("Cannot create the abuse report. The user has been deleted.")
elsif @user.blocked?
redirect_to @user, alert: _("Cannot create the abuse report. This user has been blocked.")
end
end
# rubocop: enable CodeReuse/ActiveRecord
def set_ref_url
@ref_url = params.fetch(:ref_url, '')
end
def save_origin_url
@origin_url = params.fetch(:ref_url, request.referer)
session[:abuse_report_origin_url] = @origin_url
end
def set_origin_url
@origin_url = session[:abuse_report_origin_url]
end
end