chore: use a better config name

This commit is contained in:
Zach Daniel 2024-09-03 22:24:24 -04:00
parent 06cd509e1f
commit a2cfaa5fe0
5 changed files with 10 additions and 9 deletions

View file

@ -29,7 +29,7 @@ if Mix.env() == :test do
Ash.Test.Support.PolicySimple.Domain
]
config :ash, :policy, forbid_static_forbidden_reads?: false
config :ash, :policy, no_filter_static_forbidden_reads?: false
config :ash, :custom_expressions, [Ash.Test.Expressions.JaroDistance]

View file

@ -258,7 +258,7 @@ config :ash,
default_page_type: :keyset
config :ash, :policies,
forbid_static_forbidden_reads?: false
no_filter_static_forbidden_reads?: false
```
### Try our first resource out

View file

@ -1557,14 +1557,15 @@ defmodule Ash.Policy.Authorizer do
end
defp forbidden_due_to_strict_policy?(authorizer) do
forbid_static_forbidden_reads? =
no_filter_static_forbidden_reads? =
Keyword.get(
Application.get_env(:ash, :policy, []),
:forbid_static_forbidden_reads?,
:no_filter_static_forbidden_reads?,
true
)
if forbid_static_forbidden_reads? || authorizer.for_fields || authorizer.action.type != :read do
if no_filter_static_forbidden_reads? || authorizer.for_fields ||
authorizer.action.type != :read do
true
else
authorizer.policies

View file

@ -83,14 +83,14 @@ defmodule Ash.Policy.FilterCheck do
|> filter(authorizer, opts)
|> Ash.Expr.fill_template(actor, Ash.Policy.FilterCheck.args(authorizer), context)
|> then(fn expr ->
forbid_static_forbidden_reads? =
no_filter_static_forbidden_reads? =
Keyword.get(
Application.get_env(:ash, :policy, []),
:forbid_static_forbidden_reads?,
:no_filter_static_forbidden_reads?,
true
)
if forbid_static_forbidden_reads? || authorizer.for_fields ||
if no_filter_static_forbidden_reads? || authorizer.for_fields ||
authorizer.action.type != :read ||
context[:private][:pre_flight_authorization?] do
try_eval(expr, authorizer)

View file

@ -68,7 +68,7 @@ defmodule Mix.Tasks.Ash.Install do
|> Igniter.Project.Config.configure(
"config.exs",
:ash,
[:policies, :forbid_static_forbidden_reads?],
[:policies, :no_filter_static_forbidden_reads?],
false
)
|> then(fn igniter ->