gitlab-org--gitlab-foss/app/services/users/update_service.rb

module Users
  # Service for updating a user.
  class UpdateService < BaseService
    def initialize(current_user, user, params = {})
      @current_user = current_user
      @user = user
      @params = params.dup
    end

    def execute(skip_authorization: false, validate: true, &block)
      assign_attributes(skip_authorization, &block)

      if @user.save(validate: validate)
        success
      else
        error(@user.errors.full_messages.uniq.join('. '))
      end
    end

    def execute!(*args, &block)
      result = execute(*args, &block)

      raise ActiveRecord::RecordInvalid(result[:message]) unless result[:status] == :success

      true
    end

    private

    def assign_attributes(skip_authorization, &block)
      raise Gitlab::Access::AccessDeniedError unless skip_authorization || can_update_user?

      yield(@user) if block_given?

      @user.assign_attributes(params) if params.any?
    end

    def can_update_user?
      current_user == @user || current_user&.admin?
    end
  end
end