shares start public

pkg/rbac/policy/policy.go

@@ -112,13 +112,11 @@ var Policy = &restrict.PolicyDefinition{
 			Parents:     []string{entities.RoleAdmin},
 		},
 		entities.RolePublic: {
-			/*
 			Grants: restrict.GrantsMap{
 				entities.ResourceShare: {
 					&restrict.Permission{Action: entities.ActionRead},
 				},
 			},
-			*/
 		},
 	},
 	PermissionPresets: restrict.PermissionPresets{

pkg/shares/store.go

@@ -48,6 +48,11 @@ func recToShare(share database.Share) *Share {
 }
 
 func (s *postgresStore) GetShare(ctx context.Context, id string) (*Share, error) {
+	_, err := rbac.Check(ctx, rbac.UseResource(entities.ResourceShare), rbac.WithActions(entities.ActionRead))
+	if err != nil {
+		return nil, err
+	}
+
 	db := database.FromCtx(ctx)
 	rec, err := db.GetShare(ctx, id)
 	switch err {