silverstripe / silverstripe-asset-admin

        $fileIds = $vars['ids'];

        $files = $this->getList()->filter("ID", $fileIds)->toArray();

        if (!count($files)) {

            return (new HTTPResponse(json_encode(['status' => 'error']), 404))

                ->addHeader('Content-Type', 'application/json');

        }

        if (!min(array_map(function (File $file) {

            return $file->canDelete();

        $file = Injector::inst()->create($fileClass);

        // check canCreate permissions

        if (!$file->canCreate(null, $data)) {

            return (new HTTPResponse(json_encode(['status' => 'error']), 403))

                ->addHeader('Content-Type', 'application/json');

        }

        $uploadResult = $upload->loadIntoFile($tmpFile, $file, $parentRecord ? $parentRecord->getFilename() : '/');

        if(!$uploadResult) {

        }

        $uploadResult = $upload->loadIntoFile($tmpFile, $file, $parentRecord ? $parentRecord->getFilename() : '/');

        if(!$uploadResult) {

            $result = ['error' => 'unknown'];

            return (new HTTPResponse(json_encode($result), 400))

                ->addHeader('Content-Type', 'application/json');

        }

        $file->ParentID = $parentRecord ? $parentRecord->ID : 0;

        $file->write();

        $id = (int) $data['ID'];

        $record = $this->getList()->filter('ID', $id)->first();

        if (!$record) {

            return (new HTTPResponse(json_encode(['status' => 'error']), 404))

                ->addHeader('Content-Type', 'application/json');

        }

        if (!$record->canEdit()) {

            return (new HTTPResponse(json_encode(['status' => 'error']), 401))

                ->addHeader('Content-Type', 'application/json');

        }

        if (!$record->canEdit()) {

            return (new HTTPResponse(json_encode(['status' => 'error']), 401))

                ->addHeader('Content-Type', 'application/json');

        }

        $form->saveInto($record);

        $record->write();