refactor(authorization): unify own_data read check across linked resources

2026-06-16 14:56:07 +02:00 · 2026-06-16 14:56:07 +02:00 · 070d9d1fc3
commit 070d9d1fc3
parent 7d712f6ce2
5 changed files with 76 additions and 127 deletions
--- a/lib/membership_fees/membership_fee_cycle.ex
+++ b/lib/membership_fees/membership_fee_cycle.ex
@ -88,7 +88,7 @@ defmodule Mv.MembershipFees.MembershipFeeCycle do
  policies do
    bypass action_type(:read) do
      description "own_data: read only cycles where member_id == actor.member_id"
-      authorize_if Mv.Authorization.Checks.MembershipFeeCycleReadLinkedForOwnData
+      authorize_if {Mv.Authorization.Checks.ReadLinkedForOwnData, member_id_field: :member_id}
    end

    policy action_type([:read, :create, :update, :destroy]) do