Do policies have something like a boolean "not" operator

I think nobody has felt enough pain to implement one yet. There is a negate for validations.

https://github.com/ash-project/ash/blob/v2.17.3/lib/ash/resource/validation/builtins.ex#L71

I think building something similar for policies should be doable.

But Zach will hopefully correct me if I forgot to think about something here

Mostly, this can be done by switching between authorize_if/forbid_unless and so on. But that doesn’t work for the conditions.

Unfortunately the docs don’t reflect it yet. But action_type also takes a list of action_types so you could do:

policies do
  policy action_type(:create) do
    authorize_if always()
  end

  policy action_type([:read, :update, :destroy]) do
    authorize_if relates_to_actor_via(:partner)
  end
end

Yeah, would be great to add a negate check. Checks are more complex than validations, but it could be done. It should be done in core regardless.

For my purpose this works perfectly. Thanks for sharing!