- Authorizer and policies: bypass for read (member_id == actor.member_id), CustomFieldValueCreateScope for create, HasPermission for read/update/destroy. - HasPermission: pass authorizer into strict_check helper; document that create must use a dedicated check (no filter). |
||
|---|---|---|
| .. | ||
| custom_field_value_create_scope.ex | ||
| has_permission.ex | ||