feat: ロールによるコンテンツの操作の制限 (#120)

packages/backend/src/server/api/endpoints/users/lists/create-from-public.ts

@@ -12,7 +12,10 @@ import { UserListService } from '@/core/UserListService.js';
 
 export const meta = {
 	requireCredential: true,
+	requireRolePolicy: 'canCreateContent',
+
 	prohibitMoved: true,
+
 	res: {
 		type: 'object',
 		optional: false, nullable: false,

packages/backend/src/server/api/endpoints/users/lists/create.ts

@@ -12,6 +12,7 @@ export const meta = {
 	tags: ['lists'],
 
 	requireCredential: true,
+	requireRolePolicy: 'canCreateContent',
 
 	prohibitMoved: true,
 

packages/backend/src/server/api/endpoints/users/lists/delete.ts

@@ -8,6 +8,7 @@ export const meta = {
 	tags: ['lists'],
 
 	requireCredential: true,
+	requireRolePolicy: 'canDeleteContent',
 
 	kind: 'write:account',
 

packages/backend/src/server/api/endpoints/users/lists/favorite.ts

@@ -7,6 +7,8 @@ import { DI } from '@/di-symbols.js';
 
 export const meta = {
 	requireCredential: true,
+	requireRolePolicy: 'canUpdateContent',
+
 	errors: {
 		noSuchList: {
 			message: 'No such user list.',

packages/backend/src/server/api/endpoints/users/lists/pull.ts

@@ -11,6 +11,7 @@ export const meta = {
 	tags: ['lists', 'users'],
 
 	requireCredential: true,
+	requireRolePolicy: 'canUpdateContent',
 
 	prohibitMoved: true,
 

packages/backend/src/server/api/endpoints/users/lists/push.ts

@@ -11,6 +11,7 @@ export const meta = {
 	tags: ['lists', 'users'],
 
 	requireCredential: true,
+	requireRolePolicy: 'canUpdateContent',
 
 	prohibitMoved: true,
 

packages/backend/src/server/api/endpoints/users/lists/unfavorite.ts

@@ -6,6 +6,8 @@ import { DI } from '@/di-symbols.js';
 
 export const meta = {
 	requireCredential: true,
+	requireRolePolicy: 'canUpdateContent',
+
 	errors: {
 		noSuchList: {
 			message: 'No such user list.',

packages/backend/src/server/api/endpoints/users/lists/update.ts

@@ -9,6 +9,7 @@ export const meta = {
 	tags: ['lists'],
 
 	requireCredential: true,
+	requireRolePolicy: 'canUpdateContent',
 
 	kind: 'write:account',
 

packages/backend/src/server/api/endpoints/users/update-memo.ts

@@ -10,6 +10,7 @@ export const meta = {
 	tags: ['account'],
 
 	requireCredential: true,
+	requireRolePolicy: 'canUpdateContent',
 
 	kind: 'write:account',