refactor(authorization): unify own_data read check across linked resources

2026-06-16 14:56:07 +02:00 · 2026-06-16 14:56:07 +02:00 · 070d9d1fc3
commit 070d9d1fc3
parent 7d712f6ce2
5 changed files with 76 additions and 127 deletions
--- a/lib/membership/member_group.ex
+++ b/lib/membership/member_group.ex
@ -63,7 +63,7 @@ defmodule Mv.Membership.MemberGroup do
  policies do
    bypass action_type(:read) do
      description "own_data: read only member_groups where member_id == actor.member_id"
-      authorize_if Mv.Authorization.Checks.MemberGroupReadLinkedForOwnData
+      authorize_if {Mv.Authorization.Checks.ReadLinkedForOwnData, member_id_field: :member_id}
    end

    policy action_type(:read) do