Page MenuHomePhabricator

Remove Join Policy from Phame
ClosedPublic

Authored by chad on Nov 9 2015, 4:16 AM.
Tags
None
Referenced Files
F13085318: D14444.diff
Wed, Apr 24, 11:47 PM
Unknown Object (File)
Tue, Apr 16, 8:05 AM
Unknown Object (File)
Fri, Apr 12, 12:09 AM
Unknown Object (File)
Fri, Apr 5, 5:44 AM
Unknown Object (File)
Tue, Apr 2, 10:37 AM
Unknown Object (File)
Mar 5 2024, 2:18 AM
Unknown Object (File)
Mar 5 2024, 2:18 AM
Unknown Object (File)
Mar 5 2024, 2:18 AM
Subscribers

Details

Summary

Drops Join Policy, uses Edit Policy where needed. Allows anyone with Blog Edit permissions to post and edit any post on that blog. Fixes T5371

Test Plan

Draft Post as chad, see post, log in with notchad, edit that post and publish it.

Diff Detail

Repository
rP Phabricator
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

chad retitled this revision from to Remove Join Policy from Phame.
chad updated this object.
chad edited the test plan for this revision. (Show Details)
chad added a reviewer: epriestley.
epriestley edited edge metadata.

Cool, I think this is a good simplification. It's also easy for us to add a separate policy back later if we need it, but harder to remove this policy once we unprototype.

src/applications/phame/conduit/PhameCreatePostConduitAPIMethod.php
75–78

You should also require CAN_VIEW here.

src/applications/phame/storage/PhamePost.php
197–212

At some point in the future we should make sure getBlog() always exists (I think this is an artifact of an earlier time when a post could belong to multiple blogs) and clean this up, but it's fine for now.

This revision is now accepted and ready to land.Nov 9 2015, 3:12 PM
This revision was automatically updated to reflect the committed changes.
chad marked 2 inline comments as done.