feat: ロールによるコンテンツの操作の制限 (#120)

packages/backend/src/server/api/endpoints/i/delete-account.ts

@@ -7,6 +7,7 @@ import { DI } from '@/di-symbols.js';
 
 export const meta = {
 	requireCredential: true,
+	requireRolePolicy: 'canDeleteContent',
 
 	secure: true,
 } as const;

packages/backend/src/server/api/endpoints/i/import-antennas.ts

@@ -11,6 +11,8 @@ import { ApiError } from '../../error.js';
 export const meta = {
 	secure: true,
 	requireCredential: true,
+	requireRolePolicy: 'canCreateContent',
+
 	prohibitMoved: true,
 
 	limit: {

packages/backend/src/server/api/endpoints/i/import-blocking.ts

@@ -10,6 +10,8 @@ import { ApiError } from '../../error.js';
 export const meta = {
 	secure: true,
 	requireCredential: true,
+	requireRolePolicy: 'canUpdateContent',
+
 	prohibitMoved: true,
 
 	limit: {

packages/backend/src/server/api/endpoints/i/import-muting.ts

@@ -10,6 +10,8 @@ import { ApiError } from '../../error.js';
 export const meta = {
 	secure: true,
 	requireCredential: true,
+	requireRolePolicy: 'canUpdateContent',
+
 	prohibitMoved: true,
 
 	limit: {

packages/backend/src/server/api/endpoints/i/import-user-lists.ts

@@ -10,7 +10,10 @@ import { ApiError } from '../../error.js';
 export const meta = {
 	secure: true,
 	requireCredential: true,
+	requireRolePolicy: 'canCreateContent',
+
 	prohibitMoved: true,
+
 	limit: {
 		duration: ms('1hour'),
 		max: 1,

packages/backend/src/server/api/endpoints/i/move.ts

@@ -23,7 +23,10 @@ export const meta = {
 
 	secure: true,
 	requireCredential: true,
+	requireRolePolicy: 'canUpdateContent',
+
 	prohibitMoved: true,
+
 	limit: {
 		duration: ms('1day'),
 		max: 5,

packages/backend/src/server/api/endpoints/i/pin.ts

@@ -8,6 +8,8 @@ export const meta = {
 	tags: ['account', 'notes'],
 
 	requireCredential: true,
+	requireRolePolicy: 'canUpdateContent',
+
 	prohibitMoved: true,
 
 	kind: 'write:account',

packages/backend/src/server/api/endpoints/i/unpin.ts

@@ -8,6 +8,7 @@ export const meta = {
 	tags: ['account', 'notes'],
 
 	requireCredential: true,
+	requireRolePolicy: 'canUpdateContent',
 
 	kind: 'write:account',
 

packages/backend/src/server/api/endpoints/i/update-email.ts

@@ -12,10 +12,11 @@ import { L_CHARS, secureRndstr } from '@/misc/secure-rndstr.js';
 import { ApiError } from '../../error.js';
 
 export const meta = {
-	requireCredential: true,
-
 	secure: true,
 
+	requireCredential: true,
+	requireRolePolicy: 'canUpdateContent',
+
 	limit: {
 		duration: ms('1hour'),
 		max: 3,

packages/backend/src/server/api/endpoints/i/update.ts

@@ -30,6 +30,7 @@ export const meta = {
 	tags: ['account'],
 
 	requireCredential: true,
+	requireRolePolicy: 'canUpdateContent',
 
 	kind: 'write:account',
 

packages/backend/src/server/api/endpoints/i/webhooks/create.ts

@@ -12,6 +12,7 @@ export const meta = {
 	tags: ['webhooks'],
 
 	requireCredential: true,
+	requireRolePolicy: 'canCreateContent',
 
 	kind: 'write:account',
 

packages/backend/src/server/api/endpoints/i/webhooks/delete.ts

@@ -9,6 +9,7 @@ export const meta = {
 	tags: ['webhooks'],
 
 	requireCredential: true,
+	requireRolePolicy: 'canDeleteContent',
 
 	kind: 'write:account',
 

packages/backend/src/server/api/endpoints/i/webhooks/update.ts

@@ -10,6 +10,7 @@ export const meta = {
 	tags: ['webhooks'],
 
 	requireCredential: true,
+	requireRolePolicy: 'canUpdateContent',
 
 	kind: 'write:account',