Closed quasarchimaere closed 3 years ago
I think I'll solve this (and similar cases) in a more generic manner than we used to:
wx-schema:member
's auth:localAuth
grants an auth:SharedContextToken
to connected atomswx-schema:AssociatedArticleSocket
's auth:localAuth
grants listing connections for bearers of that token, issued by the atom itself; wx-schema:InverseAssociatedArticleSocket
's auth:localAuth
grants reading the atom to bearers of the token, issued by the target atom of an wx-schema:InverseAssociatedArticleSocket
connectionThis way, we can get the same behaviour for articles in similar situations in which a different socket (not the member socket) is used to define the shared context.
Members of an Organization do not see any linked news articles, unless they are the owner of the organization. The socket-acl for these sockets are missing.
It is possible that other socket acls in our key usecases are missing as well, please check for missing acls and define/implement them.
The key UseCases are Persona, Project, Organization, Event