From 261ab1364aa40384b0315be60e78cd89ea7fe661 Mon Sep 17 00:00:00 2001
From: winter
Date: Sun, 23 Feb 2025 18:32:09 +0000
Subject: implement policies

---
 routes/actor_profile_fragment.php |  5 +++++
 routes/note_fragment.php          | 14 ++++++++++++++
 2 files changed, 19 insertions(+)

(limited to 'routes')

diff --git a/routes/actor_profile_fragment.php b/routes/actor_profile_fragment.php
index f2d0004..e5fe33f 100644
--- a/routes/actor_profile_fragment.php
+++ b/routes/actor_profile_fragment.php
@@ -1,8 +1,10 @@
 <?php
 
+use Digitigrade\HttpResponseStatus\PolicyRejected;
 use Digitigrade\Model\Actor;
 use Digitigrade\Model\StorageObject;
 use Digitigrade\Model\UserAccount;
+use Digitigrade\PolicyManager;
 use Digitigrade\Router;
 use Digitigrade\StorageProvider\FilesystemStorage;
 
@@ -78,6 +80,9 @@ Router::getInstance()->mount('/fragment/profile', function (array $args) {
             $actor->avatar = $obj->getUrl();
         }
 
+        if (!PolicyManager::getInstance()->check($actor)) {
+            throw new PolicyRejected();
+        }
         $actor->save();
         $actor->publish();
 
diff --git a/routes/note_fragment.php b/routes/note_fragment.php
index e9a7396..ac7927c 100644
--- a/routes/note_fragment.php
+++ b/routes/note_fragment.php
@@ -3,6 +3,7 @@
 use Digitigrade\FormattingProvider\CommonMark;
 use Digitigrade\HttpResponseStatus\BadRequest;
 use Digitigrade\HttpResponseStatus\Forbidden;
+use Digitigrade\HttpResponseStatus\PolicyRejected;
 use Digitigrade\Model\Actor;
 use Digitigrade\Model\Interaction;
 use Digitigrade\Model\InteractionKind;
@@ -11,6 +12,7 @@ use Digitigrade\Model\NoteAttachment;
 use Digitigrade\Model\NotePrivacyScope;
 use Digitigrade\Model\StorageObject;
 use Digitigrade\Model\UserAccount;
+use Digitigrade\PolicyManager;
 use Digitigrade\Router;
 use Digitigrade\StorageProvider;
 use Digitigrade\StorageProvider\FilesystemStorage;
@@ -47,6 +49,10 @@ Router::getInstance()->mount('/fragment/note/:id/:action', function (array $args
     if ($interaction == null) {
         // we are adding a new interaction
         $interaction = Interaction::create($user->actor, InteractionKind::from($action), $note);
+        if (!PolicyManager::getInstance()->check($interaction)) {
+            $interaction->remove();
+            throw new PolicyRejected();
+        }
         $interaction->publish();
         $interaction->processTimelineAdditions();
         $interaction->processNotifications();
@@ -90,6 +96,10 @@ Router::getInstance()->mount('/fragment/note/:id/reply', function (array $args)
             $reply->mentions[] = Actor::find($uid);
         }
         $reply->generateLinkPreviews();
+        if (!PolicyManager::getInstance()->check($reply)) {
+            $reply->remove();
+            throw new PolicyRejected();
+        }
         $reply->save();
         $reply->publish();
         $reply->processTimelineAdditions();
@@ -128,6 +138,10 @@ Router::getInstance()->mount('/fragment/note', function (array $args) {
             $note->attachments[] = NoteAttachment::fromStorageObject($obj, $index++, $altTexts[$i] ?: null);
         }
         $note->generateLinkPreviews();
+        if (!PolicyManager::getInstance()->check($note)) {
+            $note->remove();
+            throw new PolicyRejected();
+        }
         $note->save();
         $note->publish();
         $note->processTimelineAdditions();
-- 
cgit v1.3