saeloun · abinashpa · Jun 1, 2022 · May 10, 2022 · May 12, 2022 · May 12, 2022
diff --git a/app/controllers/internal_api/v1/companies/purge_logo_controller.rb b/app/controllers/internal_api/v1/companies/purge_logo_controller.rb
@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+
+class InternalApi::V1::Companies::PurgeLogoController < InternalApi::V1::ApplicationController
+  def destroy
+    authorize current_company, :purge_logo?
+    current_company.logo.destroy
+    render json: { notice: I18n.t("companies.purge_logo.destroy.success") }, status: :ok
+  end
+end
diff --git a/app/javascript/src/apis/companies.ts b/app/javascript/src/apis/companies.ts
@@ -6,12 +6,18 @@ const index = () => axios.get(path);
 
 const create = payload => axios.post(path, payload);
 
-const update = payload => axios.put(path, payload);
+const update = (id, payload) => axios.put(`${path}/${id}`, payload);
+
+const destroy = id => axios.delete(`${path}/${id}`);
+
+const removeLogo = id => axios.delete(`${path}/${id}/purge_logo`);
 
 const companiesApi = {
   index,
   create,
-  update
+  update,
+  destroy,
+  removeLogo
 };
 
 export default companiesApi;
diff --git a/app/policies/company_policy.rb b/app/policies/company_policy.rb
@@ -40,4 +40,8 @@ def permitted_attributes
     [:name, :address, :business_phone, :country, :timezone, :base_currency, :standard_price, :fiscal_year_end,
      :date_format, :logo]
   end
+
+  def purge_logo?
+    user_owner_or_admin?
+  end
 end
diff --git a/config/locales/en.yml b/config/locales/en.yml
@@ -74,6 +74,9 @@ en:
       success: "Company created successfully"
     update:
       success: "Changes saved successfully"
+    purge_logo:
+      destroy:
+        success: "Company Logo successfully removed"
   client:
     name:
       label: Name

diff --git a/config/routes/internal_api.rb b/config/routes/internal_api.rb
@@ -25,7 +25,9 @@
     resources :project_members, only: [:update]
     resources :company_users, only: [:index]
     resources :timezones, only: [:index]
-    resources :companies, only: [:index, :create, :update]
+    resources :companies, only: [:index, :create, :update] do
+      resource :purge_logo, only: [:destroy], controller: "companies/purge_logo"
+    end
 
     # Non-Resourceful Routes
     get "payments/settings", to: "payment_settings#index"

diff --git a/spec/requests/internal_api/v1/companies/purge_logo/destroy_spec.rb b/spec/requests/internal_api/v1/companies/purge_logo/destroy_spec.rb
@@ -0,0 +1,41 @@
+# frozen_string_literal: true
+
+require "rails_helper"
+
+RSpec.describe "InternalApi::V1::Companies::PurgeLogo#destroy", type: :request do
+  let(:company) { create(:company, :with_logo) }
+  let(:user1) { create(:user, current_workspace: company) }
+  let(:company_user) { create(:company_user, company:, user: user1) }
+  let(:user2) { create(:user) }
+
+  context "when user is not admin" do
+    before do
+      sign_in user2
+      send_request(:delete, "/internal_api/v1/companies/#{company.id}/purge_logo")
+    end
+
+    it "response should be forbidded" do
+      expect(response).to have_http_status(:forbidden)
+    end
+
+    it "returns error json response" do
+      expect(json_response["errors"]).to match("You are not authorized to perform this action")
+    end
+  end
+
+  context "when user is admin" do
+    before do
+      user1.add_role :admin, company
+      sign_in user1
+      send_request(:delete, "/internal_api/v1/companies/#{company.id}/purge_logo")
+    end
+
+    it "successful status" do
+      expect(response).to be_successful
+    end
+
+    it "successful notice" do
+      expect(json_response["notice"]).to eq(I18n.t("companies.purge_logo.destroy.success"))
+    end
+  end
+end