refac: debt on role backend

internal/infrastructure/useCases/GetEntry.go

@@ -4,6 +4,7 @@ import (
 	"RenewCMS/internal/domain/contenttype"
 	"RenewCMS/internal/domain/entry"
 	"RenewCMS/internal/domain/image"
+	"RenewCMS/internal/domain/role"
 )
 
 type GetEntryUseCase struct {
@@ -16,7 +17,10 @@ func NewGetEntryUseCase(contentTypes contenttype.Repository, entries entry.Repos
 	return &GetEntryUseCase{contentTypes, entries, images}
 }
 
-func (u *GetEntryUseCase) Get(contentTypeKey string, id uint32) (TypedEntry, error) {
+func (u *GetEntryUseCase) Get(contentTypeKey string, id uint32, caller ContentCaller) (TypedEntry, error) {
+	if err := caller.requireHolding(role.KeyContentRead, contentTypeKey); err != nil {
+		return TypedEntry{}, err
+	}
 	owner, err := u.contentTypes.GetByKey(contentTypeKey)
 	if err != nil {
 		return TypedEntry{}, err
@@ -25,5 +29,8 @@ func (u *GetEntryUseCase) Get(contentTypeKey string, id uint32) (TypedEntry, err
 	if err != nil {
 		return TypedEntry{}, err
 	}
+	if !caller.reads(contentTypeKey, found.CreatedBy) {
+		return TypedEntry{}, entry.ErrEntryNotFound
+	}
 	return typedEntry(owner, found, newEntryResolvers(u.images, u.contentTypes, u.entries))
 }