local-it/mitgliederverwaltung
2
3
Fork 0
Code Issues 67 Pull requests 7 Projects 3 Releases Packages 1 Activity Actions

Doc: Actor maybe_load_role comment; ActorIsAdmin system user = admin

Browse source
This commit is contained in:
Moritz 2026-02-03 15:00:24 +01:00
parent 60a4181255
commit 47b6a16177
Signed by: moritz
GPG key ID: 1020A035E5DD0824
2 changed files with 5 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
lib/mv/authorization/checks/actor_is_admin.ex
View file

@ -1,9 +1,10 @@
defmodule Mv.Authorization.Checks.ActorIsAdmin do
@moduledoc """
Policy check: true when the actor's role has permission_set_name "admin".
Policy check: true when the actor is the system user or has permission_set_name "admin".
Used to restrict actions (e.g. User.update_user for member link/unlink) to admins only.
Delegates to `Mv.Authorization.Actor.admin?/1` for consistency.
Delegates to `Mv.Authorization.Actor.admin?/1`, which returns true for the system actor
or for a user whose role has permission_set_name "admin".
"""
use Ash.Policy.SimpleCheck