- Authorizer and policies: bypass for read (member_id == actor.member_id), CustomFieldValueCreateScope for create, HasPermission for read/update/destroy. - HasPermission: pass authorizer into strict_check helper; document that create must use a dedicated check (no filter). |
||
|---|---|---|
| .. | ||
| accounts | ||
| membership | ||
| membership_fees | ||
| mv | ||
| mv_web | ||
| mv.ex | ||
| mv_web.ex | ||