screwdriver-api/plugins/templates/removeTag.js

API server for the Screwdriver.cd service

'use strict';

const boom = require('@hapi/boom');
const joi = require('joi');
const schema = require('screwdriver-data-schema');
const baseSchema = schema.models.templateTag.base;

/* Currently, only build scope is allowed to tag template due to security reasons.
 * The same pipeline that publishes the template has the permission to tag it.
 */
module.exports = () => ({
    method: 'DELETE',
    path: '/templates/{templateName}/tags/{tagName}',
    options: {
        description: 'Delete a template tag',
        notes: 'Delete a specific template',
        tags: ['api', 'templates'],
        auth: {
            strategies: ['token'],
            scope: ['build']
        },

        handler: async (request, h) => {
            const { pipelineFactory, templateFactory, templateTagFactory } = request.server.app;
            const { pipelineId, isPR } = request.auth.credentials;
            const name = request.params.templateName;
            const tag = request.params.tagName;

            return templateTagFactory
                .get({ name, tag })
                .then(templateTag => {
                    if (!templateTag) {
                        throw boom.notFound('Template tag does not exist');
                    }

                    return Promise.all([
                        pipelineFactory.get(pipelineId),
                        templateFactory.get({
                            name,
                            version: templateTag.version
                        })
                    ]).then(([pipeline, template]) => {
                        // Check for permission
                        if (pipeline.id !== template.pipelineId || isPR) {
                            throw boom.forbidden('Not allowed to delete this template tag');
                        }

                        // Remove the template tag, not the template
                        return templateTag.remove();
                    });
                })
                .then(() => h.response().code(204))
                .catch(err => {
                    throw err;
                });
        },
        validate: {
            params: joi.object({
                templateName: baseSchema.extract('name'),
                tagName: baseSchema.extract('tag')
            })
        }
    }
});