- Authorizer and policies: bypass for read (member_id == actor.member_id), CustomFieldValueCreateScope for create, HasPermission for read/update/destroy. - HasPermission: pass authorizer into strict_check helper; document that create must use a dedicated check (no filter). |
||
|---|---|---|
| .. | ||
| checks | ||
| actor.ex | ||
| authorization.ex | ||
| permission_sets.ex | ||
| role.ex | ||