gitlab-org--gitlab-foss/app/services/ci/play_build_service.rb

# frozen_string_literal: true

module Ci
  class PlayBuildService < ::BaseService
    def execute(build, job_variables_attributes = nil)
      check_access!(build, job_variables_attributes)

      # Try to enqueue the build, otherwise create a duplicate.
      #
      if build.enqueue
        build.tap do |build|
          build.update!(user: current_user, job_variables_attributes: job_variables_attributes || [])

          AfterRequeueJobService.new(project, current_user).execute(build)
        end
      else
        Ci::RetryJobService.new(project, current_user).execute(build)[:job]
      end
    end

    private

    def check_access!(build, job_variables_attributes)
      raise Gitlab::Access::AccessDeniedError unless can?(current_user, :play_job, build)

      if job_variables_attributes.present? && !can?(current_user, :set_pipeline_variables, project)
        raise Gitlab::Access::AccessDeniedError
      end
    end
  end
end

Ci::PlayBuildService.prepend_mod_with('Ci::PlayBuildService')