NodeBB/src/user/uploads.js

'use strict';

var async = require('async');

var db = require('../database');
var file = require('../file');

module.exports = function (User) {
	User.deleteUpload = function (callerUid, uid, url, callback) {
		async.waterfall([
			function (next) {
				async.parallel({
					isUsersUpload: function (next) {
						db.isSortedSetMember('uid:' + callerUid + ':uploads', url, next);
					},
					isAdminOrGlobalMod: function (next) {
						User.isAdminOrGlobalMod(callerUid, next);
					},
				}, next);
			},
			function (results, next) {
				if (!results.isAdminOrGlobalMod && !results.isUsersUpload) {
					return next(new Error('[[error:no-privileges]]'));
				}

				file.delete(file.uploadUrlToPath(url), next);
			},
			function (next) {
				db.sortedSetRemove('uid:' + uid + ':uploads', url, next);
			},
		], callback);
	};
};