shares start public

This commit is contained in:
Daniel Ponte 2025-02-04 09:25:07 -05:00
parent e073f40449
commit f3e8f7afd9
2 changed files with 9 additions and 6 deletions

View file

@ -112,13 +112,11 @@ var Policy = &restrict.PolicyDefinition{
Parents: []string{entities.RoleAdmin}, Parents: []string{entities.RoleAdmin},
}, },
entities.RolePublic: { entities.RolePublic: {
/* Grants: restrict.GrantsMap{
Grants: restrict.GrantsMap{ entities.ResourceShare: {
entities.ResourceShare: { &restrict.Permission{Action: entities.ActionRead},
&restrict.Permission{Action: entities.ActionRead},
},
}, },
*/ },
}, },
}, },
PermissionPresets: restrict.PermissionPresets{ PermissionPresets: restrict.PermissionPresets{

View file

@ -48,6 +48,11 @@ func recToShare(share database.Share) *Share {
} }
func (s *postgresStore) GetShare(ctx context.Context, id string) (*Share, error) { func (s *postgresStore) GetShare(ctx context.Context, id string) (*Share, error) {
_, err := rbac.Check(ctx, rbac.UseResource(entities.ResourceShare), rbac.WithActions(entities.ActionRead))
if err != nil {
return nil, err
}
db := database.FromCtx(ctx) db := database.FromCtx(ctx)
rec, err := db.GetShare(ctx, id) rec, err := db.GetShare(ctx, id)
switch err { switch err {