using MongoDB.Entities; using PrivaPub.Models; using PrivaPub.Models.User; namespace PrivaPub.Domain.Moderation { public interface IModerationLog { /// Keeps one act of the staff (Models/AdminAction.cs). Never throws: an act that was done stays done when /// its entry can't be written, and the failure is logged. Task Write(string byRootId, string action, string targetKind, string targetId, string targetLabel, string reportId = default, string note = default, CancellationToken token = default); } // The staff's log (completion program R5): administrators read all of it, moderators what isn't about a login // (ModeratorController's /clientapi/moderator/log). An entry never holds an IP address, and never pairs a root with its // own personas: an act on a persona that the acting root owns, on a post of it, a group it owns or a report about it // (R6), is kept without who acted. public class ModerationLog : IModerationLog { const int MaxLabel = 200; const int MaxNote = 1000; readonly ILogger _logger; public ModerationLog(ILogger logger) { _logger = logger; } public async Task Write(string byRootId, string action, string targetKind, string targetId, string targetLabel, string reportId = default, string note = default, CancellationToken token = default) { try { if (byRootId != default && byRootId != AdminAction.Cli && await OwnPersona(byRootId, targetKind, targetId, reportId, token)) byRootId = default; await DB.Default.SaveAsync(new AdminAction { ByRootId = byRootId, Action = action, TargetKind = targetKind, TargetId = targetId, TargetLabel = Cut(targetLabel, MaxLabel), ReportId = reportId, Note = Cut(note, MaxNote) }, CancellationToken.None);//an act that was done is logged even when its request went away } catch (Exception ex) { _logger.LogWarning(ex, "The staff's log could not keep a {Action}", action); } } // whether what an entry is about is a persona of the acting login: the persona itself, a post of it, a group it owns, // or a report about it (R6) — any of them would pair the login with that persona static async Task OwnPersona(string rootId, string targetKind, string targetId, string reportId, CancellationToken token) { var personas = new List(); if (targetId != default) switch (targetKind) { case AdminTargets.Persona: personas.Add(targetId); break; case AdminTargets.Post when MongoDB.Bson.ObjectId.TryParse(targetId, out _): if (await DB.Default.Find().MatchID(targetId).Match(p => !p.IsFederatedCopy) .Project(p => p.Include(x => x.GroupUserId)).ExecuteFirstAsync(token) is { GroupUserId: { } author }) personas.Add(author); break; case AdminTargets.Group when MongoDB.Bson.ObjectId.TryParse(targetId, out _): if (await DB.Default.Find().MatchID(targetId).Project(g => g.Include(x => x.OwnerAvatarId)) .ExecuteFirstAsync(token) is { OwnerAvatarId: { } owner }) personas.Add(owner); break; } var report = reportId ?? (targetKind == AdminTargets.Report ? targetId : default); if (report != default && MongoDB.Bson.ObjectId.TryParse(report, out _) && await DB.Default.Find().MatchID(report).Project(r => r.Include(x => x.TargetAccountId)).ExecuteFirstAsync(token) is { TargetAccountId: { } reported }) personas.Add(reported); return personas.Count > 0 && await DB.Default.Find().Match(r => r.RootId == rootId && personas.Contains(r.AvatarId)).ExecuteAnyAsync(token); } static string Cut(string text, int max) => string.IsNullOrEmpty(text) ? text : text.Length <= max ? text : text[..(max - 1)] + "…"; } }