From f71e7830cb6fddba06606c7b2738278d8911f92d Mon Sep 17 00:00:00 2001
From: Joscha Henningsen <joscha.henningsen@tum.de>
Date: Wed, 12 Jul 2023 10:59:56 +0200
Subject: [PATCH 1/4] allow copying videos to other courses

---
 api/courses.go                                | 50 +++++++++++++++++
 model/stream.go                               |  1 +
 .../manage/lecture-management-card.gohtml     | 54 ++++++++++++++++++-
 3 files changed, 104 insertions(+), 1 deletion(-)

diff --git a/api/courses.go b/api/courses.go
index 366a9b6c7..94f9cd98a 100644
--- a/api/courses.go
+++ b/api/courses.go
@@ -80,6 +80,7 @@ func configGinCourseRouter(router *gin.Engine, daoWrapper dao.DaoWrapper) {
 			{
 				stream.Use(tools.InitStream(daoWrapper))
 				stream.GET("/transcodingProgress", routes.getTranscodingProgress)
+				stream.POST("/copy", routes.copyStream)
 			}
 
 			stats := courses.Group("/stats")
@@ -1516,6 +1517,55 @@ type copyCourseRequest struct {
 	YearW    string
 }
 
+func (r coursesRoutes) copyStream(c *gin.Context) {
+	type req struct {
+		TargetCourse uint `json:"targetCourse"`
+	}
+	var request req
+	err := c.BindJSON(&request)
+	if err != nil {
+		_ = c.Error(tools.RequestError{Status: http.StatusBadRequest, CustomMessage: "Bad request", Err: err})
+		return
+	}
+	tlctx := c.MustGet("TUMLiveContext").(tools.TUMLiveContext)
+
+	targetCourseAdmins, err := r.DaoWrapper.CoursesDao.GetCourseAdmins(request.TargetCourse)
+	if err != nil {
+		log.WithError(err).Error("Error getting course admins")
+		_ = c.Error(tools.RequestError{
+			Status:        http.StatusInternalServerError,
+			CustomMessage: "can't determine admins of target course",
+			Err:           err,
+		})
+	}
+	isAdmin := false
+	for _, admin := range targetCourseAdmins {
+		if admin.ID == tlctx.User.ID {
+			isAdmin = true
+			break
+		}
+	}
+	if !isAdmin {
+		_ = c.Error(tools.RequestError{
+			Status:        http.StatusForbidden,
+			CustomMessage: "you are not admin of the target course",
+		})
+		return
+	}
+
+	stream := tlctx.Stream
+	stream.Model = gorm.Model{}
+	stream.CourseID = request.TargetCourse
+	err = r.StreamsDao.CreateStream(stream)
+	if err != nil {
+		_ = c.Error(tools.RequestError{
+			Status:        http.StatusInternalServerError,
+			CustomMessage: "Can't save stream",
+			Err:           err,
+		})
+	}
+}
+
 func (r coursesRoutes) copyCourse(c *gin.Context) {
 	var request copyCourseRequest
 	err := c.BindJSON(&request)
diff --git a/model/stream.go b/model/stream.go
index 855c13990..27dec2161 100755
--- a/model/stream.go
+++ b/model/stream.go
@@ -345,6 +345,7 @@ func (s Stream) getJson(lhs []LectureHall, course Course) gin.H {
 		"courseSlug":            course.Slug,
 		"private":               s.Private,
 		"downloadableVods":      s.GetVodFiles(),
+		"isCopying":             false,
 	}
 }
 
diff --git a/web/template/partial/course/manage/lecture-management-card.gohtml b/web/template/partial/course/manage/lecture-management-card.gohtml
index 8681f9931..a4cefac1c 100644
--- a/web/template/partial/course/manage/lecture-management-card.gohtml
+++ b/web/template/partial/course/manage/lecture-management-card.gohtml
@@ -199,6 +199,10 @@
                                     :class="lecture.private?'text-gray-400 dark:hover:text-gray-500 hover:text-gray-300':'text-red-400 dark:hover:text-red-500 hover:text-red-300'">
                                 Make private
                             </button>
+                            <button class="block w-full px-4 py-2 text-left text-sm text-gray-400 dark:hover:text-gray-500 hover:text-gray-300"
+                                    @click="lecture.isCopying = true; closeMoreDropdown()">
+                                Move/Copy to other course
+                            </button>
                         </div>
                         <template x-if="lecture.seriesIdentifier.length > 0">
                             <div class="border-t border-black">
@@ -217,7 +221,7 @@
             </div>
         </div>
 
-        <button x-show="lecture.uiEditMode == 0"
+        <button x-show="lecture.uiEditMode == 0 && !lecture.isCopying"
                 @click="lecture.startSingleEdit(); closeMoreDropdown();"
                 class="bg-gray-100 dark:bg-gray-900 w-full py-2 mt-2 rounded-b">
             <span class="text-gray-700 dark:text-gray-300">Edit Lecture</span>
@@ -451,5 +455,53 @@
                 </div>
             </div>
         </div>
+
+        <template x-if="lecture.isCopying">
+            <form class="p-4" x-data="{move: false, selected: -1, success: undefined}"
+                @submit.prevent="fetch(`/api/course/${lecture.courseId}/stream/${lecture.lectureId}/copy`,
+                {method: 'POST', body: JSON.stringify({targetCourse: selected})}).then(r=>{success=r.ok})">
+                <div x-show="success===undefined">
+                    <div class="w-full grid grid-cols-2">
+                        <button @click="move=false" class="w-full py-2 mt-2 rounded" :class="!move && 'bg-indigo-500/70'" type="button">
+                            <span class="text-gray-700 dark:text-gray-300">Copy</span>
+                        </button>
+                        <button @click="move=true" class="w-full py-2 mt-2 rounded" :class="move && 'bg-indigo-500/70'" type="button">
+                            <span class="text-gray-700 dark:text-gray-300">Move</span>
+                        </button>
+                    </div>
+                    <span class="text-3 mt-3">Select target course:</span>
+                    <div class="flex flex-col m-2 mb-4">
+                        {{range $c := $user.AdministeredCourses}}
+                            {{if ne $c.ID $course.ID}}
+                                <label class="w-full">
+                                    <input name="targetcourse" type="radio" @click="selected={{$c.ID}}">
+                                    <span>
+                                        {{$c.Name}}
+                                        <span class="font-semibold">{{$c.Year}} | {{$c.TeachingTerm}}</span>
+                                    </span>
+                                </label>
+                            {{end}}
+                        {{end}}
+                    </div>
+                    <button @click="lecture.isCopying = false"
+                            type="button"
+                            class="px-8 py-3 text-2 text-white rounded bg-indigo-500/70 hover:bg-indigo-500/90 dark:bg-indigo-500/10 disabled:opacity-20 dark:hover:bg-indigo-500/20 mr-4">
+                        Cancel
+                    </button>
+
+                    <button type="submit"
+                            class="px-8 py-3 text-2 text-white rounded bg-indigo-500/70 hover:bg-indigo-500/90 dark:bg-indigo-500/10 disabled:opacity-20 dark:hover:bg-indigo-500/20 mr-4"
+                            :disabled="selected === -1">
+                        Done
+                    </button>
+                </div>
+                <div x-show="success===true">
+                    <span class="text-success font-semibold">Lecture copied successfully.</span>
+                </div>
+                <div x-show="success===false">
+                    <span class="text-red-500 font-semibold">Lecture could not be copied!</span>
+                </div>
+            </form>
+        </template>
     </li>
 {{end}}
\ No newline at end of file

From a72fd4ed6b2672f03ff712b6c7bc3c2072737724 Mon Sep 17 00:00:00 2001
From: Joscha Henningsen <joscha.henningsen@tum.de>
Date: Wed, 12 Jul 2023 11:01:54 +0200
Subject: [PATCH 2/4] allow moving lectures as well

---
 api/courses.go                                                | 4 ++++
 .../partial/course/manage/lecture-management-card.gohtml      | 2 +-
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/api/courses.go b/api/courses.go
index 94f9cd98a..cf8e5b246 100644
--- a/api/courses.go
+++ b/api/courses.go
@@ -1520,6 +1520,7 @@ type copyCourseRequest struct {
 func (r coursesRoutes) copyStream(c *gin.Context) {
 	type req struct {
 		TargetCourse uint `json:"targetCourse"`
+		Move         bool `json:"move"`
 	}
 	var request req
 	err := c.BindJSON(&request)
@@ -1564,6 +1565,9 @@ func (r coursesRoutes) copyStream(c *gin.Context) {
 			Err:           err,
 		})
 	}
+	if request.Move {
+		r.StreamsDao.DeleteStream(strconv.Itoa(int(tlctx.Stream.ID)))
+	}
 }
 
 func (r coursesRoutes) copyCourse(c *gin.Context) {
diff --git a/web/template/partial/course/manage/lecture-management-card.gohtml b/web/template/partial/course/manage/lecture-management-card.gohtml
index a4cefac1c..b0d9f8359 100644
--- a/web/template/partial/course/manage/lecture-management-card.gohtml
+++ b/web/template/partial/course/manage/lecture-management-card.gohtml
@@ -459,7 +459,7 @@
         <template x-if="lecture.isCopying">
             <form class="p-4" x-data="{move: false, selected: -1, success: undefined}"
                 @submit.prevent="fetch(`/api/course/${lecture.courseId}/stream/${lecture.lectureId}/copy`,
-                {method: 'POST', body: JSON.stringify({targetCourse: selected})}).then(r=>{success=r.ok})">
+                {method: 'POST', body: JSON.stringify({targetCourse: selected, move: move})}).then(r=>{success=r.ok})">
                 <div x-show="success===undefined">
                     <div class="w-full grid grid-cols-2">
                         <button @click="move=false" class="w-full py-2 mt-2 rounded" :class="!move && 'bg-indigo-500/70'" type="button">

From 021d2a436f4495d6be1601e7c55657d0805eab7a Mon Sep 17 00:00:00 2001
From: Joscha Henningsen <joscha.henningsen@tum.de>
Date: Mon, 17 Jul 2023 09:19:00 +0200
Subject: [PATCH 3/4] allow admins to copy everywhere

---
 web/admin.go                                                   | 3 ++-
 .../partial/course/manage/lecture-management-card.gohtml       | 3 ++-
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/web/admin.go b/web/admin.go
index 7e99b9064..b62dadef4 100755
--- a/web/admin.go
+++ b/web/admin.go
@@ -241,7 +241,7 @@ func (r mainRoutes) EditCoursePage(c *gin.Context) {
 		Semesters:      semesters,
 		CurY:           tumLiveContext.Course.Year,
 		CurT:           tumLiveContext.Course.TeachingTerm,
-		EditCourseData: EditCourseData{IndexData: indexData, IngestBase: tools.Cfg.IngestBase, LectureHalls: lectureHalls},
+		EditCourseData: EditCourseData{Courses: courses, IndexData: indexData, IngestBase: tools.Cfg.IngestBase, LectureHalls: lectureHalls},
 	})
 	if err != nil {
 		log.Printf("%v\n", err)
@@ -331,6 +331,7 @@ type EditCourseData struct {
 	IndexData    IndexData
 	IngestBase   string
 	LectureHalls []model.LectureHall
+	Courses      []model.Course // administered courses of user
 }
 
 type LectureUnitsPageData struct {
diff --git a/web/template/partial/course/manage/lecture-management-card.gohtml b/web/template/partial/course/manage/lecture-management-card.gohtml
index b0d9f8359..8b03a9bd2 100644
--- a/web/template/partial/course/manage/lecture-management-card.gohtml
+++ b/web/template/partial/course/manage/lecture-management-card.gohtml
@@ -2,6 +2,7 @@
     {{- /*gotype: github.com/joschahenningsen/TUM-Live/web.AdminPageData*/ -}}
 
     {{$course := .IndexData.TUMLiveContext.Course}}
+    {{$courses := .Courses}}
     {{$user := .IndexData.TUMLiveContext.User}}
     {{$ingestBase := .IngestBase}}
     {{$lectureHalls := .LectureHalls}}
@@ -471,7 +472,7 @@
                     </div>
                     <span class="text-3 mt-3">Select target course:</span>
                     <div class="flex flex-col m-2 mb-4">
-                        {{range $c := $user.AdministeredCourses}}
+                        {{range $c := $courses}}
                             {{if ne $c.ID $course.ID}}
                                 <label class="w-full">
                                     <input name="targetcourse" type="radio" @click="selected={{$c.ID}}">

From 0e7a5c5681d046dfef9d5f0de5722aca04492d2e Mon Sep 17 00:00:00 2001
From: Joscha Henningsen <joscha.henningsen@tum.de>
Date: Mon, 17 Jul 2023 09:57:42 +0200
Subject: [PATCH 4/4] fix validation of admins

---
 api/courses.go | 31 +++++++++++++++++--------------
 1 file changed, 17 insertions(+), 14 deletions(-)

diff --git a/api/courses.go b/api/courses.go
index cf8e5b246..f5e577e46 100644
--- a/api/courses.go
+++ b/api/courses.go
@@ -1530,20 +1530,23 @@ func (r coursesRoutes) copyStream(c *gin.Context) {
 	}
 	tlctx := c.MustGet("TUMLiveContext").(tools.TUMLiveContext)
 
-	targetCourseAdmins, err := r.DaoWrapper.CoursesDao.GetCourseAdmins(request.TargetCourse)
-	if err != nil {
-		log.WithError(err).Error("Error getting course admins")
-		_ = c.Error(tools.RequestError{
-			Status:        http.StatusInternalServerError,
-			CustomMessage: "can't determine admins of target course",
-			Err:           err,
-		})
-	}
-	isAdmin := false
-	for _, admin := range targetCourseAdmins {
-		if admin.ID == tlctx.User.ID {
-			isAdmin = true
-			break
+	isAdmin := tlctx.User.Role == model.AdminType
+
+	if !isAdmin {
+		targetCourseAdmins, err := r.DaoWrapper.CoursesDao.GetCourseAdmins(request.TargetCourse)
+		if err != nil {
+			log.WithError(err).Error("Error getting course admins")
+			_ = c.Error(tools.RequestError{
+				Status:        http.StatusInternalServerError,
+				CustomMessage: "can't determine admins of target course",
+				Err:           err,
+			})
+		}
+		for _, admin := range targetCourseAdmins {
+			if admin.ID == tlctx.User.ID {
+				isAdmin = true
+				break
+			}
 		}
 	}
 	if !isAdmin {