Apps\Controller\Api\Profile\ActionDeleteAnswerOwner::deleteAnswerOwner()

Complexity

Conditions	7
Paths	5

Size

Total Lines	36
Code Lines	16

Duplication

Lines	0
Ratio	0 %

Importance

Changes

0

<?php
    public function deleteAnswerOwner(string $answerId): ?string
    {
        $this->setJsonHeader();
        // hello script kiddy, you must be auth ;)
        if (!App::$User->isAuth()) {
            throw new ForbiddenException('Auth required');
        }

        // answer id must be an unsigned integer
        if (!Any::isInt($answerId) || $answerId < 1) {
            throw new NativeException('Wrong input data');
        }

        /** @var WallAnswer $findAnswer */
        $findAnswer = WallAnswer::find($answerId);
        // check if this answer id exist
        if (!$findAnswer) {

$findAnswer is of type Apps\ActiveRecord\WallAnswer, thus it always evaluated to true.

            throw new NotFoundException('Wrong input data');
        }

        // get current viewer
        $viewer = App::$User->identity();
        // get post info
        $postInfo = $findAnswer->post;

        // if not a target user of answer and not answer owner - lets throw exception
        if ($postInfo->target_id !== $viewer->id && $findAnswer->user_id !== $viewer->id) {
            throw new ForbiddenException('Access declined!');
        }

        // all is ok, lets remove this answer ;)
        $findAnswer->delete();

        return json_encode([
            'status' => 1,
            'message' => 'ok'
        ]);