support disabling custom icon uploads for specified users

Author: mayswind

conf/ezbookkeeping.ini

@@ -538,6 +538,8 @@ max_user_avatar_size = 1048576
 # 15: OAuth 2.0 Login
 # 16: Unlink Third-party Login
 # 17: Generate API Token
+# 18: Create Transactions from AI Text Recognition
+# 18: Upload Custom Icon
 default_feature_restrictions =
 
 [data]

pkg/api/user_custom_icons.go

@@ -25,6 +25,7 @@ type UserCustomIconsApi struct {
 	ApiUsingConfig
 	ApiUsingDuplicateChecker
 	icons *services.UserCustomIconService
+	users *services.UserService
 }
 
 // Initialize a user custom icons api singleton instance
@@ -40,6 +41,7 @@ var (
 			container: duplicatechecker.Container,
 		},
 		icons: services.UserCustomIcons,
+		users: services.Users,
 	}
 )
 
@@ -67,6 +69,20 @@ func (a *UserCustomIconsApi) CustomIconListHandler(c *core.WebContext) (any, *er
 // CustomIconUploadHandler saves a new custom icon for current user
 func (a *UserCustomIconsApi) CustomIconUploadHandler(c *core.WebContext) (any, *errs.Error) {
 	uid := c.GetCurrentUid()
+	user, err := a.users.GetUserById(c, uid)
+
+	if err != nil {
+		if !errs.IsCustomError(err) {
+			log.Errorf(c, "[user_custom_icons.CustomIconUploadHandler] failed to get user, because %s", err.Error())
+		}
+
+		return nil, errs.ErrUserNotFound
+	}
+
+	if user.FeatureRestriction.Contains(core.USER_FEATURE_RESTRICTION_TYPE_UPLOAD_CUSTOM_ICON) {
+		return nil, errs.ErrNotPermittedToPerformThisAction
+	}
+
 	form, err := c.MultipartForm()
 
 	if err != nil {
@@ -260,6 +276,20 @@ func (a *UserCustomIconsApi) CustomIconDeleteHandler(c *core.WebContext) (any, *
 	}
 
 	uid := c.GetCurrentUid()
+	user, err := a.users.GetUserById(c, uid)
+
+	if err != nil {
+		if !errs.IsCustomError(err) {
+			log.Errorf(c, "[user_custom_icons.CustomIconDeleteHandler] failed to get user, because %s", err.Error())
+		}
+
+		return nil, errs.ErrUserNotFound
+	}
+
+	if user.FeatureRestriction.Contains(core.USER_FEATURE_RESTRICTION_TYPE_UPLOAD_CUSTOM_ICON) {
+		return nil, errs.ErrNotPermittedToPerformThisAction
+	}
+
 	err = a.icons.DeleteCustomIcon(c, uid, iconDeleteReq.Id)
 
 	if err != nil {

pkg/core/user_feature_restriction.go

@@ -94,10 +94,11 @@ const (
 	USER_FEATURE_RESTRICTION_TYPE_UNLINK_THIRD_PARTY_LOGIN                     UserFeatureRestrictionType = 16
 	USER_FEATURE_RESTRICTION_TYPE_GENERATE_API_TOKEN                           UserFeatureRestrictionType = 17
 	USER_FEATURE_RESTRICTION_TYPE_CREATE_TRANSACTION_FROM_AI_TEXT_RECOGNITION  UserFeatureRestrictionType = 18
+	USER_FEATURE_RESTRICTION_TYPE_UPLOAD_CUSTOM_ICON                           UserFeatureRestrictionType = 19
 )
 
 const userFeatureRestrictionTypeMinValue UserFeatureRestrictionType = USER_FEATURE_RESTRICTION_TYPE_UPDATE_PASSWORD
-const userFeatureRestrictionTypeMaxValue UserFeatureRestrictionType = USER_FEATURE_RESTRICTION_TYPE_CREATE_TRANSACTION_FROM_AI_TEXT_RECOGNITION
+const userFeatureRestrictionTypeMaxValue UserFeatureRestrictionType = USER_FEATURE_RESTRICTION_TYPE_UPLOAD_CUSTOM_ICON
 
 // String returns a textual representation of the restriction type of user features
 func (t UserFeatureRestrictionType) String() string {
@@ -138,6 +139,8 @@ func (t UserFeatureRestrictionType) String() string {
 		return "Generate API Token"
 	case USER_FEATURE_RESTRICTION_TYPE_CREATE_TRANSACTION_FROM_AI_TEXT_RECOGNITION:
 		return "Create Transaction from AI Text Recognition"
+	case USER_FEATURE_RESTRICTION_TYPE_UPLOAD_CUSTOM_ICON:
+		return "Upload Custom Icon"
 	default:
 		return fmt.Sprintf("Invalid(%d)", int(t))
 	}