'use strict'; var async = require('async'); var winston = require('winston'); var db = require('../../database'); var user = require('../../user'); var meta = require('../../meta'); var websockets = require('../index'); var events = require('../../events'); var privileges = require('../../privileges'); var plugins = require('../../plugins'); var emailer = require('../../emailer'); var translator = require('../../translator'); var utils = require('../../../public/src/utils'); module.exports = function (SocketUser) { SocketUser.banUsers = function (socket, data, callback) { if (!data || !Array.isArray(data.uids)) { return callback(new Error('[[error:invalid-data]]')); } toggleBan(socket.uid, data.uids, function (uid, next) { async.waterfall([ function (next) { banUser(socket.uid, uid, data.until || 0, data.reason || '', next); }, function (next) { events.log({ type: 'user-ban', uid: socket.uid, targetUid: uid, ip: socket.ip, reason: data.reason || undefined, }, next); }, function (next) { plugins.fireHook('action:user.banned', { callerUid: socket.uid, ip: socket.ip, uid: uid, until: data.until > 0 ? data.until : undefined, reason: data.reason || undefined, }); next(); }, function (next) { user.auth.revokeAllSessions(uid, next); }, ], next); }, callback); }; SocketUser.unbanUsers = function (socket, uids, callback) { toggleBan(socket.uid, uids, function (uid, next) { async.waterfall([ function (next) { user.bans.unban(uid, next); }, function (next) { events.log({ type: 'user-unban', uid: socket.uid, targetUid: uid, ip: socket.ip, }, next); }, function (next) { plugins.fireHook('action:user.unbanned', { callerUid: socket.uid, ip: socket.ip, uid: uid, }); next(); }, ], next); }, callback); }; function toggleBan(uid, uids, method, callback) { if (!Array.isArray(uids)) { return callback(new Error('[[error:invalid-data]]')); } async.waterfall([ function (next) { privileges.users.hasBanPrivilege(uid, next); }, function (hasBanPrivilege, next) { if (!hasBanPrivilege) { return next(new Error('[[error:no-privileges]]')); } async.each(uids, method, next); }, ], callback); } function banUser(callerUid, uid, until, reason, callback) { async.waterfall([ function (next) { user.isAdministrator(uid, next); }, function (isAdmin, next) { if (isAdmin) { return next(new Error('[[error:cant-ban-other-admins]]')); } user.getUserField(uid, 'username', next); }, function (username, next) { var siteTitle = meta.config.title || 'NodeBB'; var data = { subject: '[[email:banned.subject, ' + siteTitle + ']]', username: username, until: until ? utils.toISOString(until) : false, reason: reason, }; emailer.send('banned', uid, data, function (err) { if (err) { winston.error('[emailer.send] ' + err.message); } next(); }); }, function (next) { user.bans.ban(uid, until, reason, next); }, function (banData, next) { db.setObjectField('uid:' + uid + ':ban:' + banData.timestamp, 'fromUid', callerUid, next); }, function (next) { if (reason) { return next(null, reason); } translator.translate('[[user:info.banned-no-reason]]', function (translated) { next(null, translated); }); }, function (_reason, next) { websockets.in('uid_' + uid).emit('event:banned', { until: until, reason: _reason, }); next(); }, ], callback); } };