Well with this:
policy action_type(:read) do
authorize_if(IsOwnerCheck)
end
and this:
defmodule IsOwnerCheck do
use Ash.Policy.SimpleCheck
def match?(actor, context, opts) do
What.To.Do.here?
end
def describe(x) do
x |> IO.inspect(label: ~S/x/)
"hello"
end
end
I am not sure what I should do in the simple check. The context contains a query but If I run the query I get an infinite loop. I cannot use MyApi.can? because that would be an infinite loop as well.
I am not sure if I want the JSON API extension right now. I’all have two or three resources only but with some complicated logic in the backend, I do not feel like a REST API would be good for this. But I might try.
