openproject/lib/api/v3/queries/queries_api.rb

module API
  module V3
    module Queries
      class QueriesAPI < Grape::API

        resources :queries do

          params do
            requires :id, desc: 'Query id'
          end
          namespace ':id' do

            before do
              @query = Query.find(params[:id])
              model = ::API::V3::Queries::QueryModel.new(query: @query)
              @representer =  ::API::V3::Queries::QueryRepresenter.new(model)
            end

            helpers do
              def allowed_to_manage_stars?
                (@query.is_public? && current_user.allowed_to?(:manage_public_queries, @query.project)) ||
                  (!@query.is_public?  && (current_user.admin? ||
                    (current_user.allowed_to?(:save_queries, @query.project) && @query.user_id == current_user.id)))
              end
            end

            patch :star do
              authorize({ controller: :queries, action: :star }, context: @query.project, allow: allowed_to_manage_stars?)
              normalized_query_name = @query.name.parameterize.underscore
              query_menu_item = MenuItems::QueryMenuItem.find_or_initialize_by_name_and_navigatable_id(
                normalized_query_name, @query.id, title: @query.name
              )
              query_menu_item.save!
              @representer.to_json
            end

            patch :unstar do
              authorize({ controller: :queries, action: :unstar }, context: @query.project, allow: allowed_to_manage_stars?)
              query_menu_item = @query.query_menu_item
              return @representer.to_json if @query.query_menu_item.nil?
              query_menu_item.destroy
              @query.reload
              @representer.to_json
            end
          end

        end

      end
    end
  end
end