feat: implement bulk move api with loop validation

Author: Kirari04

controllers/MoveItemsController.go

@@ -0,0 +1,29 @@
+package controllers
+
+import (
+	"ch/kirari04/videocms/helpers"
+	"ch/kirari04/videocms/logic"
+	"ch/kirari04/videocms/models"
+
+	"github.com/labstack/echo/v4"
+)
+
+func MoveItems(c echo.Context) error {
+	// parse & validate request
+	var moveValidation models.MoveItemsValidation
+	if status, err := helpers.Validate(c, &moveValidation); err != nil {
+		return c.String(status, err.Error())
+	}
+
+	status, err := logic.MoveItems(
+		c.Get("UserID").(uint),
+		moveValidation.ParentFolderID,
+		moveValidation.FolderIDs,
+		moveValidation.LinkIDs,
+	)
+	if err != nil {
+		return c.String(status, err.Error())
+	}
+
+	return c.NoContent(status)
+}

logic/MoveItems.go

@@ -0,0 +1,79 @@
+package logic
+
+import (
+	"ch/kirari04/videocms/helpers"
+	"ch/kirari04/videocms/inits"
+	"ch/kirari04/videocms/models"
+	"errors"
+	"net/http"
+)
+
+func MoveItems(userId uint, targetFolderId uint, folderIds []uint, linkIds []uint) (int, error) {
+	// check if at least one item is being moved
+	if len(folderIds) == 0 && len(linkIds) == 0 {
+		return http.StatusBadRequest, errors.New("no items selected to move")
+	}
+
+	// 1. Validate Target Folder
+	if targetFolderId > 0 {
+		var targetFolder models.Folder
+		if res := inits.DB.First(&targetFolder, targetFolderId); res.Error != nil {
+			return http.StatusBadRequest, errors.New("target folder doesn't exist")
+		}
+		if targetFolder.UserID != userId {
+			return http.StatusForbidden, errors.New("unauthorized access to target folder")
+		}
+	}
+
+	// 2. Move Folders
+	for _, folderId := range folderIds {
+		// Cannot move a folder into itself
+		if folderId == targetFolderId {
+			return http.StatusBadRequest, errors.New("cannot move folder into itself")
+		}
+
+		var folder models.Folder
+		if res := inits.DB.First(&folder, folderId); res.Error != nil {
+			return http.StatusBadRequest, errors.New("folder to move not found")
+		}
+		
+		if folder.UserID != userId {
+			return http.StatusForbidden, errors.New("unauthorized access to folder")
+		}
+
+		// Loop detection: Check if the folder we are moving contains the target folder
+		if targetFolderId > 0 {
+			contains, err := helpers.FolderContainsFolder(folderId, targetFolderId)
+			if err != nil {
+				return http.StatusInternalServerError, err
+			}
+			if contains {
+				return http.StatusBadRequest, errors.New("cannot move parent folder into its child")
+			}
+		}
+
+		folder.ParentFolderID = targetFolderId
+		if res := inits.DB.Save(&folder); res.Error != nil {
+			return http.StatusInternalServerError, res.Error
+		}
+	}
+
+	// 3. Move Links (Files)
+	for _, linkId := range linkIds {
+		var link models.Link
+		if res := inits.DB.First(&link, linkId); res.Error != nil {
+			return http.StatusBadRequest, errors.New("file to move not found")
+		}
+		
+		if link.UserID != userId {
+			return http.StatusForbidden, errors.New("unauthorized access to file")
+		}
+
+		link.ParentFolderID = targetFolderId
+		if res := inits.DB.Save(&link); res.Error != nil {
+			return http.StatusInternalServerError, res.Error
+		}
+	}
+
+	return http.StatusOK, nil
+}

models/Folder.go

@@ -30,3 +30,9 @@ type FolderUpdateValidation struct {
 	FolderID       uint   `validate:"required,number" json:"FolderID" form:"FolderID"`
 	ParentFolderID uint   `validate:"number" json:"ParentFolderID" form:"ParentFolderID"`
 }
+
+type MoveItemsValidation struct {
+	ParentFolderID uint   `validate:"number" json:"ParentFolderID" form:"ParentFolderID"`
+	FolderIDs      []uint `json:"FolderIDs" form:"FolderIDs"`
+	LinkIDs        []uint `json:"LinkIDs" form:"LinkIDs"`
+}

routes/api.go

@@ -42,6 +42,7 @@ func Api() {
 	protectedApi.POST("/folder", controllers.CreateFolder)
 	protectedApi.PUT("/folder", controllers.UpdateFolder)
 	protectedApi.DELETE("/folder", controllers.DeleteFolder)
+	protectedApi.PUT("/move", controllers.MoveItems)
 	protectedApi.GET("/folders", controllers.ListFolders)
 	protectedApi.DELETE("/folders", controllers.DeleteFolders)