sendnrw/misskey
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: ロールによるコンテンツの操作の制限 (#120)

Browse Source
This commit is contained in:
まっちゃとーにゅ
2023-07-28 04:21:59 +09:00
committed by GitHub
parent 0bed053b7d
commit 46f8a0435c
91 changed files with 228 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
packages/backend/src/server/api/endpoints/admin/show-user.ts
View File

@@ -51,8 +51,10 @@ export default class extends Endpoint<typeof meta, typeof paramDef> {
throw new Error('user not found');
}
const policies = await this.roleService.getUserPolicies(user.id);
const isModerator = await this.roleService.isModerator(user);
const isSilenced = !(await this.roleService.getUserPolicies(user.id)).canPublicNote;
const isLimited = !(policies.canCreateContent && policies.canUpdateContent && policies.canDeleteContent);
const isSilenced = !policies.canPublicNote;
const _me = await this.usersRepository.findOneByOrFail({ id: me.id });
if (!await this.roleService.isAdministrator(_me) && await this.roleService.isAdministrator(user)) {
@@ -80,6 +82,7 @@ export default class extends Endpoint<typeof meta, typeof paramDef> {
mutingNotificationTypes: profile.mutingNotificationTypes,
isModerator: isModerator,
isSilenced: isSilenced,
isLimited: isLimited,
isSuspended: user.isSuspended,
lastActiveDate: user.lastActiveDate,
moderationNote: profile.moderationNote ?? '',

1
packages/backend/src/server/api/endpoints/antennas/create.ts
View File

@@ -12,6 +12,7 @@ export const meta = {
tags: ['antennas'],
requireCredential: true,
requireRolePolicy: 'canCreateContent',
prohibitMoved: true,

1
packages/backend/src/server/api/endpoints/antennas/delete.ts
View File

@@ -9,6 +9,7 @@ export const meta = {
tags: ['antennas'],
requireCredential: true,
requireRolePolicy: 'canDeleteContent',
kind: 'write:account',

1
packages/backend/src/server/api/endpoints/antennas/update.ts
View File

@@ -10,6 +10,7 @@ export const meta = {
tags: ['antennas'],
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
prohibitMoved: true,

1
packages/backend/src/server/api/endpoints/blocking/create.ts
View File

@@ -17,6 +17,7 @@ export const meta = {
},
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
kind: 'write:blocks',

1
packages/backend/src/server/api/endpoints/blocking/delete.ts
View File

@@ -17,6 +17,7 @@ export const meta = {
},
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
kind: 'write:blocks',

1
packages/backend/src/server/api/endpoints/channels/create.ts
View File

@@ -12,6 +12,7 @@ export const meta = {
tags: ['channels'],
requireCredential: true,
requireRolePolicy: 'canCreateContent',
prohibitMoved: true,

1
packages/backend/src/server/api/endpoints/channels/favorite.ts
View File

@@ -9,6 +9,7 @@ export const meta = {
tags: ['channels'],
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
prohibitMoved: true,

1
packages/backend/src/server/api/endpoints/channels/follow.ts
View File

@@ -10,6 +10,7 @@ export const meta = {
tags: ['channels'],
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
prohibitMoved: true,

1
packages/backend/src/server/api/endpoints/channels/unfavorite.ts
View File

@@ -8,6 +8,7 @@ export const meta = {
tags: ['channels'],
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
prohibitMoved: true,

1
packages/backend/src/server/api/endpoints/channels/unfollow.ts
View File

@@ -9,6 +9,7 @@ export const meta = {
tags: ['channels'],
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
prohibitMoved: true,

1
packages/backend/src/server/api/endpoints/channels/update.ts
View File

@@ -10,6 +10,7 @@ export const meta = {
tags: ['channels'],
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
kind: 'write:channels',

1
packages/backend/src/server/api/endpoints/clips/add-note.ts
View File

@@ -14,6 +14,7 @@ export const meta = {
requireCredential: true,
prohibitMoved: true,
requireRolePolicy: 'canUpdateContent',
kind: 'write:account',

1
packages/backend/src/server/api/endpoints/clips/create.ts
View File

@@ -11,6 +11,7 @@ export const meta = {
tags: ['clips'],
requireCredential: true,
requireRolePolicy: 'canCreateContent',
prohibitMoved: true,

1
packages/backend/src/server/api/endpoints/clips/delete.ts
View File

@@ -8,6 +8,7 @@ export const meta = {
tags: ['clips'],
requireCredential: true,
requireRolePolicy: 'canDeleteContent',
kind: 'write:account',

1
packages/backend/src/server/api/endpoints/clips/remove-note.ts
View File

@@ -9,6 +9,7 @@ export const meta = {
tags: ['account', 'notes', 'clips'],
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
prohibitMoved: true,

1
packages/backend/src/server/api/endpoints/clips/unfavorite.ts
View File

@@ -8,6 +8,7 @@ export const meta = {
tags: ['clip'],
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
prohibitMoved: true,

1
packages/backend/src/server/api/endpoints/clips/update.ts
View File

@@ -9,6 +9,7 @@ export const meta = {
tags: ['clips'],
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
prohibitMoved: true,

1
packages/backend/src/server/api/endpoints/drive/files/create.ts
View File

@@ -14,6 +14,7 @@ export const meta = {
tags: ['drive'],
requireCredential: true,
requireRolePolicy: 'canCreateContent',
prohibitMoved: true,

1
packages/backend/src/server/api/endpoints/drive/files/delete.ts
View File

@@ -11,6 +11,7 @@ export const meta = {
tags: ['drive'],
requireCredential: true,
requireRolePolicy: 'canDeleteContent',
kind: 'write:drive',

1
packages/backend/src/server/api/endpoints/drive/files/update.ts
View File

@@ -11,6 +11,7 @@ export const meta = {
tags: ['drive'],
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
kind: 'write:drive',

1
packages/backend/src/server/api/endpoints/drive/files/upload-from-url.ts
View File

@@ -18,6 +18,7 @@ export const meta = {
description: 'Request the server to download a new drive file from the specified URL.',
requireCredential: true,
requireRolePolicy: 'canCreateContent',
prohibitMoved: true,

1
packages/backend/src/server/api/endpoints/drive/folders/create.ts
View File

@@ -12,6 +12,7 @@ export const meta = {
tags: ['drive'],
requireCredential: true,
requireRolePolicy: 'canCreateContent',
kind: 'write:drive',

1
packages/backend/src/server/api/endpoints/drive/folders/delete.ts
View File

@@ -9,6 +9,7 @@ export const meta = {
tags: ['drive'],
requireCredential: true,
requireRolePolicy: 'canDeleteContent',
kind: 'write:drive',

1
packages/backend/src/server/api/endpoints/drive/folders/update.ts
View File

@@ -10,6 +10,7 @@ export const meta = {
tags: ['drive'],
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
kind: 'write:drive',

1
packages/backend/src/server/api/endpoints/flash/create.ts
View File

@@ -10,6 +10,7 @@ export const meta = {
tags: ['flash'],
requireCredential: true,
requireRolePolicy: 'canCreateContent',
prohibitMoved: true,

1
packages/backend/src/server/api/endpoints/flash/delete.ts
View File

@@ -8,6 +8,7 @@ export const meta = {
tags: ['flashs'],
requireCredential: true,
requireRolePolicy: 'canDeleteContent',
kind: 'write:flash',

1
packages/backend/src/server/api/endpoints/flash/like.ts
View File

@@ -9,6 +9,7 @@ export const meta = {
tags: ['flash'],
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
prohibitMoved: true,

1
packages/backend/src/server/api/endpoints/flash/unlike.ts
View File

@@ -8,6 +8,7 @@ export const meta = {
tags: ['flash'],
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
prohibitMoved: true,

1
packages/backend/src/server/api/endpoints/flash/update.ts
View File

@@ -9,6 +9,7 @@ export const meta = {
tags: ['flash'],
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
prohibitMoved: true,

1
packages/backend/src/server/api/endpoints/gallery/posts/create.ts
View File

@@ -12,6 +12,7 @@ export const meta = {
tags: ['gallery'],
requireCredential: true,
requireRolePolicy: 'canCreateContent',
prohibitMoved: true,

1
packages/backend/src/server/api/endpoints/gallery/posts/delete.ts
View File

@@ -8,6 +8,7 @@ export const meta = {
tags: ['gallery'],
requireCredential: true,
requireRolePolicy: 'canDeleteContent',
kind: 'write:gallery',

1
packages/backend/src/server/api/endpoints/gallery/posts/like.ts
View File

@@ -9,6 +9,7 @@ export const meta = {
tags: ['gallery'],
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
prohibitMoved: true,

1
packages/backend/src/server/api/endpoints/gallery/posts/unlike.ts
View File

@@ -8,6 +8,7 @@ export const meta = {
tags: ['gallery'],
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
prohibitMoved: true,

1
packages/backend/src/server/api/endpoints/gallery/posts/update.ts
View File

@@ -10,6 +10,7 @@ export const meta = {
tags: ['gallery'],
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
prohibitMoved: true,

1
packages/backend/src/server/api/endpoints/i/delete-account.ts
View File

@@ -7,6 +7,7 @@ import { DI } from '@/di-symbols.js';
export const meta = {
requireCredential: true,
requireRolePolicy: 'canDeleteContent',
secure: true,
} as const;

2
packages/backend/src/server/api/endpoints/i/import-antennas.ts
View File

@@ -11,6 +11,8 @@ import { ApiError } from '../../error.js';
export const meta = {
secure: true,
requireCredential: true,
requireRolePolicy: 'canCreateContent',
prohibitMoved: true,
limit: {

2
packages/backend/src/server/api/endpoints/i/import-blocking.ts
View File

@@ -10,6 +10,8 @@ import { ApiError } from '../../error.js';
export const meta = {
secure: true,
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
prohibitMoved: true,
limit: {

2
packages/backend/src/server/api/endpoints/i/import-muting.ts
View File

@@ -10,6 +10,8 @@ import { ApiError } from '../../error.js';
export const meta = {
secure: true,
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
prohibitMoved: true,
limit: {

3
packages/backend/src/server/api/endpoints/i/import-user-lists.ts
View File

@@ -10,7 +10,10 @@ import { ApiError } from '../../error.js';
export const meta = {
secure: true,
requireCredential: true,
requireRolePolicy: 'canCreateContent',
prohibitMoved: true,
limit: {
duration: ms('1hour'),
max: 1,

3
packages/backend/src/server/api/endpoints/i/move.ts
View File

@@ -23,7 +23,10 @@ export const meta = {
secure: true,
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
prohibitMoved: true,
limit: {
duration: ms('1day'),
max: 5,

2
packages/backend/src/server/api/endpoints/i/pin.ts
View File

@@ -8,6 +8,8 @@ export const meta = {
tags: ['account', 'notes'],
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
prohibitMoved: true,
kind: 'write:account',

1
packages/backend/src/server/api/endpoints/i/unpin.ts
View File

@@ -8,6 +8,7 @@ export const meta = {
tags: ['account', 'notes'],
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
kind: 'write:account',

5
packages/backend/src/server/api/endpoints/i/update-email.ts
View File

@@ -12,10 +12,11 @@ import { L_CHARS, secureRndstr } from '@/misc/secure-rndstr.js';
import { ApiError } from '../../error.js';
export const meta = {
requireCredential: true,
secure: true,
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
limit: {
duration: ms('1hour'),
max: 3,

1
packages/backend/src/server/api/endpoints/i/update.ts
View File

@@ -30,6 +30,7 @@ export const meta = {
tags: ['account'],
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
kind: 'write:account',

1
packages/backend/src/server/api/endpoints/i/webhooks/create.ts
View File

@@ -12,6 +12,7 @@ export const meta = {
tags: ['webhooks'],
requireCredential: true,
requireRolePolicy: 'canCreateContent',
kind: 'write:account',

1
packages/backend/src/server/api/endpoints/i/webhooks/delete.ts
View File

@@ -9,6 +9,7 @@ export const meta = {
tags: ['webhooks'],
requireCredential: true,
requireRolePolicy: 'canDeleteContent',
kind: 'write:account',

1
packages/backend/src/server/api/endpoints/i/webhooks/update.ts
View File

@@ -10,6 +10,7 @@ export const meta = {
tags: ['webhooks'],
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
kind: 'write:account',

2
packages/backend/src/server/api/endpoints/mute/create.ts
View File

@@ -11,6 +11,8 @@ export const meta = {
tags: ['account'],
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
prohibitMoved: true,
kind: 'write:mutes',

1
packages/backend/src/server/api/endpoints/mute/delete.ts
View File

@@ -10,6 +10,7 @@ export const meta = {
tags: ['account'],
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
kind: 'write:mutes',

1
packages/backend/src/server/api/endpoints/notes/create.ts
View File

@@ -17,6 +17,7 @@ export const meta = {
tags: ['notes'],
requireCredential: true,
requireRolePolicy: 'canCreateContent',
prohibitMoved: true,

1
packages/backend/src/server/api/endpoints/notes/delete.ts
View File

@@ -12,6 +12,7 @@ export const meta = {
tags: ['notes'],
requireCredential: true,
requireRolePolicy: 'canDeleteContent',
kind: 'write:notes',

2
packages/backend/src/server/api/endpoints/notes/favorites/create.ts
View File

@@ -12,6 +12,8 @@ export const meta = {
tags: ['notes', 'favorites'],
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
prohibitMoved: true,
kind: 'write:favorites',

1
packages/backend/src/server/api/endpoints/notes/favorites/delete.ts
View File

@@ -9,6 +9,7 @@ export const meta = {
tags: ['notes', 'favorites'],
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
kind: 'write:favorites',

1
packages/backend/src/server/api/endpoints/notes/polls/vote.ts
View File

@@ -16,6 +16,7 @@ export const meta = {
tags: ['notes'],
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
prohibitMoved: true,

1
packages/backend/src/server/api/endpoints/notes/reactions/create.ts
View File

@@ -8,6 +8,7 @@ export const meta = {
tags: ['reactions', 'notes'],
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
prohibitMoved: true,

1
packages/backend/src/server/api/endpoints/notes/reactions/delete.ts
View File

@@ -9,6 +9,7 @@ export const meta = {
tags: ['reactions', 'notes'],
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
kind: 'write:reactions',

1
packages/backend/src/server/api/endpoints/notes/thread-muting/create.ts
View File

@@ -12,6 +12,7 @@ export const meta = {
tags: ['notes'],
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
kind: 'write:account',

1
packages/backend/src/server/api/endpoints/notes/thread-muting/delete.ts
View File

@@ -9,6 +9,7 @@ export const meta = {
tags: ['notes'],
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
kind: 'write:account',

1
packages/backend/src/server/api/endpoints/notes/unrenote.ts
View File

@@ -11,6 +11,7 @@ export const meta = {
tags: ['notes'],
requireCredential: true,
requireRolePolicy: 'canDeleteContent',
kind: 'write:notes',

1
packages/backend/src/server/api/endpoints/pages/create.ts
View File

@@ -12,6 +12,7 @@ export const meta = {
tags: ['pages'],
requireCredential: true,
requireRolePolicy: 'canCreateContent',
prohibitMoved: true,

1
packages/backend/src/server/api/endpoints/pages/delete.ts
View File

@@ -8,6 +8,7 @@ export const meta = {
tags: ['pages'],
requireCredential: true,
requireRolePolicy: 'canDeleteContent',
kind: 'write:pages',

1
packages/backend/src/server/api/endpoints/pages/like.ts
View File

@@ -9,6 +9,7 @@ export const meta = {
tags: ['pages'],
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
prohibitMoved: true,

1
packages/backend/src/server/api/endpoints/pages/unlike.ts
View File

@@ -8,6 +8,7 @@ export const meta = {
tags: ['pages'],
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
prohibitMoved: true,

1
packages/backend/src/server/api/endpoints/pages/update.ts
View File

@@ -10,6 +10,7 @@ export const meta = {
tags: ['pages'],
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
prohibitMoved: true,

2
packages/backend/src/server/api/endpoints/renote-mute/create.ts
View File

@@ -13,6 +13,8 @@ export const meta = {
tags: ['account'],
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
prohibitMoved: true,
kind: 'write:mutes',

1
packages/backend/src/server/api/endpoints/renote-mute/delete.ts
View File

@@ -10,6 +10,7 @@ export const meta = {
tags: ['account'],
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
kind: 'write:mutes',

3
packages/backend/src/server/api/endpoints/users/lists/create-from-public.ts
View File

@@ -12,7 +12,10 @@ import { UserListService } from '@/core/UserListService.js';
export const meta = {
requireCredential: true,
requireRolePolicy: 'canCreateContent',
prohibitMoved: true,
res: {
type: 'object',
optional: false, nullable: false,

1
packages/backend/src/server/api/endpoints/users/lists/create.ts
View File

@@ -12,6 +12,7 @@ export const meta = {
tags: ['lists'],
requireCredential: true,
requireRolePolicy: 'canCreateContent',
prohibitMoved: true,

1
packages/backend/src/server/api/endpoints/users/lists/delete.ts
View File

@@ -8,6 +8,7 @@ export const meta = {
tags: ['lists'],
requireCredential: true,
requireRolePolicy: 'canDeleteContent',
kind: 'write:account',

2
packages/backend/src/server/api/endpoints/users/lists/favorite.ts
View File

@@ -7,6 +7,8 @@ import { DI } from '@/di-symbols.js';
export const meta = {
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
errors: {
noSuchList: {
message: 'No such user list.',

1
packages/backend/src/server/api/endpoints/users/lists/pull.ts
View File

@@ -11,6 +11,7 @@ export const meta = {
tags: ['lists', 'users'],
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
prohibitMoved: true,

1
packages/backend/src/server/api/endpoints/users/lists/push.ts
View File

@@ -11,6 +11,7 @@ export const meta = {
tags: ['lists', 'users'],
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
prohibitMoved: true,

2
packages/backend/src/server/api/endpoints/users/lists/unfavorite.ts
View File

@@ -6,6 +6,8 @@ import { DI } from '@/di-symbols.js';
export const meta = {
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
errors: {
noSuchList: {
message: 'No such user list.',

1
packages/backend/src/server/api/endpoints/users/lists/update.ts
View File

@@ -9,6 +9,7 @@ export const meta = {
tags: ['lists'],
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
kind: 'write:account',

1
packages/backend/src/server/api/endpoints/users/update-memo.ts
View File

@@ -10,6 +10,7 @@ export const meta = {
tags: ['account'],
requireCredential: true,
requireRolePolicy: 'canUpdateContent',
kind: 'write:account',