discourse/app/jobs/regular/sync_acls_for_uploads.rb

# frozen_string_literal: true

module Jobs
  # Sometimes we need to update a _lot_ of ACLs on S3 (such as when secure media
  # is enabled), and since it takes ~1s per upload to update the ACL, this is
  # best spread out over many jobs instead of having to do the whole thing serially.
  class SyncAclsForUploads < ::Jobs::Base
    def execute(args)
      return if !Discourse.store.external?
      return if !args.key?(:upload_ids)

      # TODO (martin) Change the logging here to debug after acl_stale implemented.
      #
      # Note...these log messages are set to warn to ensure this is working
      # as intended in initial production trials, this will be set to debug
      # after an acl_stale column is added to uploads.
      time = Benchmark.measure do
        Rails.logger.warn("Syncing ACL for upload ids: #{args[:upload_ids].join(", ")}")
        Upload.includes(:optimized_images).where(id: args[:upload_ids]).find_in_batches do |uploads|
          uploads.each do |upload|
            begin
              Discourse.store.update_upload_ACL(upload, optimized_images_preloaded: true)
            rescue => err
              Discourse.warn_exception(
                err,
                message: "Failed to update upload ACL",
                env: {
                  upload_id: upload.id,
                  filename: upload.original_filename
                }
              )
            end
          end
        end
        Rails.logger.warn("Completed syncing ACL for upload ids in #{time.to_s}. IDs: #{args[:upload_ids].join(", ")}")
      end
    end
  end
end