zammad/app/controllers/tickets_mass_controller.rb

# Copyright (C) 2012-2023 Zammad Foundation, https://zammad-foundation.org/

class TicketsMassController < ApplicationController
  include CreatesTicketArticles

  prepend_before_action :authentication_check
  before_action :fetch_tickets

  def macro
    macro = Macro.find params[:macro_id]

    applicable = macro.applicable_on? @tickets

    if !applicable
      render json: {
        error:            __('Macro group restrictions do not cover all tickets'),
        blocking_tickets: applicable.blocking_tickets.map(&:id)
      }, status: :unprocessable_entity

      return
    end

    execute_transaction(@tickets) do |ticket|
      ticket.screen = 'edit'
      ticket.perform_changes macro, 'macro', ticket, current_user.id
    end
  end

  def update
    clean_params = clean_update_params

    execute_transaction(@tickets) do |ticket|
      ticket.update!(clean_params) if clean_params
      if params[:article].present?
        article_create(ticket, params[:article])
      end
    end
  end

  private

  def fetch_tickets
    @tickets = Ticket.find params[:ticket_ids]

    @tickets.each do |elem|
      authorize!(elem, :follow_up?)
    end
  rescue Pundit::NotAuthorizedError => e
    render json: { error: true, ticket_id: e.record.id }, status: :unprocessable_entity
  end

  def clean_update_params
    return if params[:attributes].blank?

    clean_params = Ticket.association_name_to_id_convert(params.require(:attributes))
    clean_params = Ticket.param_cleanup(clean_params, true)
    clean_params.compact_blank!

    clean_params[:screen] = 'edit'
    clean_params.delete('number')

    clean_params
  end

  def execute_transaction(tickets, &)
    failed_record = nil

    ActiveRecord::Base.transaction do
      tickets.each(&)

      assets = ApplicationModel::CanAssets.reduce tickets

      render json: { ticket_ids: tickets.map(&:id), assets: assets }, status: :ok
    rescue => e
      raise e if !e.try(:record)

      failed_record = e.record

      raise ActiveRecord::Rollback
    end

    render json: { error: true, ticket_id: failed_record.id }, status: :unprocessable_entity if failed_record
  end
end