Everyone can read & create comments

SeedCompany · Oct 18, 2024 · 0c1ff27 · 0c1ff27
1 parent 608c399
commit 0c1ff27
Show file tree

Hide file tree

Showing 3 changed files with 37 additions and 0 deletions.
diff --git a/dbschema/migrations/00009-m17teec.edgeql b/dbschema/migrations/00009-m17teec.edgeql
diff --git a/src/components/authorization/policies/by-feature/everyone-can-comment.policy.ts b/src/components/authorization/policies/by-feature/everyone-can-comment.policy.ts
@@ -0,0 +1,10 @@
+import { Policy } from '../util';
+
+@Policy('all', (r) => [
+  // Technically, we want only when the Commentable is readable.
+  // I think this is sufficient for practical use at this point in time.
+  ...[r.CommentThread, r.Comment].flatMap((it) => it.read.create),
+  // This shouldn't be needed, but it is. children() needs rewrite.
+  r.Commentable.children((c) => c.commentThreads.read.create),
+])
+export class EveryoneCanCommentPolicy {}
diff --git a/src/components/authorization/policies/index.ts b/src/components/authorization/policies/index.ts
@@ -23,5 +23,6 @@ export * from './by-feature/progress-report-media-owner.policy';
 export * from './by-feature/project-change-requests-beta.policy';
 export * from './by-feature/read-util-objects.policy';
 export * from './by-feature/user-can-edit-self.policy';
+export * from './by-feature/everyone-can-comment.policy';
 export * from './by-feature/user-can-manage-own-comments.policy';
 export * from './by-feature/new-progress-reports-beta.policy';