Page MenuHomePhabricator

Clean up supplemental capabilitiy checks in transaction edits
ClosedPublic

Authored by epriestley on Oct 18 2013, 10:55 PM.
Tags
None
Referenced Files
Unknown Object (File)
Apr 7 2026, 4:33 PM
Unknown Object (File)
Apr 3 2026, 3:29 PM
Unknown Object (File)
Mar 5 2026, 7:49 PM
Unknown Object (File)
Feb 10 2026, 3:11 AM
Unknown Object (File)
Feb 4 2026, 10:57 AM
Unknown Object (File)
Jan 23 2026, 1:01 AM
Unknown Object (File)
Jan 11 2026, 8:46 AM
Unknown Object (File)
Dec 4 2025, 8:11 AM
Subscribers

Details

Summary

We have this commented-out chunk of code now which was originally buggy and is now just nonfunctional.

For now, the core edit types don't always require CAN_EDIT (e.g., subscribe, comment, add edges), except for editing the edit policy itself, which always does. Add a supplemental capability check there and let everything else go through with CAN_VIEW. We can buff the policy checks on application editors over time, they all require appropriate capabilities to get to in the first place anyway.

Test Plan

Created and edited some tasks without getting overwhelmed with policy exceptions.

Diff Detail

Lint
Lint Skipped
Unit
Tests Skipped