feat(authz): check permission on read handlers + check create permission on folder

2026-05-21 11:07:04 +02:00
parent cba9be8c21
commit 3362e277ab
21 changed files with 428 additions and 180 deletions
@@ -179,9 +179,9 @@ impl ShareBrowseService {
    ) -> Result<FolderListingDto, DomainError> {
        let (folders_res, files_res) = tokio::join!(
            self.folder_service
-                .list_folders_for_owner(Some(parent_folder_id), owner_id),
+                .list_folders_with_perms(Some(parent_folder_id), owner_id),
            self.file_retrieval
-                .list_files_owned(Some(parent_folder_id), owner_id),
+                .list_files_with_perms(Some(parent_folder_id), owner_id),
        );
        Ok(FolderListingDto {
            folders: folders_res?,