debian-mirror-gitlab/app/services/ci/play_build_service.rb

# frozen_string_literal: true

module Ci
  class PlayBuildService < ::BaseService
    def execute(build, job_variables_attributes = nil)
      check_access!(build, job_variables_attributes)

      # Try to enqueue the build, otherwise create a duplicate.
      #
      if build.enqueue
        build.tap do |build|
          build.update!(user: current_user, job_variables_attributes: job_variables_attributes || [])

          AfterRequeueJobService.new(project, current_user).execute(build)
        end
      else
        # Retrying in Ci::PlayBuildService is a legacy process that should be removed.
        # Instead, callers should explicitly execute Ci::RetryBuildService.
        # See https://gitlab.com/gitlab-org/gitlab/-/issues/347493.
        build.retryable? ? Ci::Build.retry(build, current_user) : build
      end
    end

    private

    def check_access!(build, job_variables_attributes)
      raise Gitlab::Access::AccessDeniedError unless can?(current_user, :play_job, build)

      if job_variables_attributes.present? && !can?(current_user, :set_pipeline_variables, project)
        raise Gitlab::Access::AccessDeniedError
      end
    end
  end
end

Ci::PlayBuildService.prepend_mod_with('Ci::PlayBuildService')