SimoandCursor
3c8a8ff888
Gate pages and mutations on module PERMS instead of dashboard-only staff checks, add radio view/edit slugs with migration 0015, and expand the operations contract tests. Co-authored-by: Cursor <[email protected]>
45 lines
1.3 KiB
TypeScript
45 lines
1.3 KiB
TypeScript
"use server";
|
|
|
|
import { revalidatePath } from "next/cache";
|
|
import { requirePermission } from "@/lib/admin/guard";
|
|
import { PERMS } from "@/lib/permissions";
|
|
import { prisma } from "@/lib/prisma";
|
|
import { logStaffActivity } from "@/lib/services/staff-activity";
|
|
|
|
/** Parse a FormData field into a positive BigInt id, or null when invalid. */
|
|
function parseId(raw: FormDataEntryValue | null): bigint | null {
|
|
if (typeof raw !== "string" || raw.trim() === "") return null;
|
|
try {
|
|
const id = BigInt(raw.trim());
|
|
return id > 0n ? id : null;
|
|
} catch {
|
|
return null;
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Delete a radio shout from the DJ moderation page. Re-reads auth via
|
|
* requireStaff, writes a staff-activity audit entry and revalidates the
|
|
* moderation route. Fails soft if the row is already gone.
|
|
*/
|
|
export async function deleteShout(formData: FormData): Promise<void> {
|
|
const staff = await requirePermission(PERMS.RADIO_EDIT);
|
|
const id = parseId(formData.get("id"));
|
|
if (id === null) return;
|
|
|
|
try {
|
|
await prisma.radioShouts.delete({ where: { id } });
|
|
await logStaffActivity({
|
|
staffId: staff.id,
|
|
action: "radio.shout.delete",
|
|
description: `Deleted radio shout #${id}`,
|
|
targetType: "radio_shout",
|
|
targetId: Number(id),
|
|
});
|
|
} catch {
|
|
// Row may already be gone; ignore so the action does not throw.
|
|
}
|
|
|
|
revalidatePath("/admin/radio/moderation");
|
|
}
|