refac: debt on role backend

internal/infrastructure/useCases/UpdateEntry.go

@@ -4,6 +4,7 @@ import (
 	"RenewCMS/internal/domain/contenttype"
 	"RenewCMS/internal/domain/entry"
 	"RenewCMS/internal/domain/image"
+	"RenewCMS/internal/domain/role"
 	"time"
 )
 
@@ -18,7 +19,7 @@ type UpdateEntryCommand struct {
 	ContentTypeKey string
 	ID             uint32
 	Data           map[string]any
-	UserID         uint32
+	Caller         ContentCaller
 }
 
 func NewUpdateEntryUseCase(contentTypes contenttype.Repository, entries entry.Repository, images image.Repository, now func() time.Time) *UpdateEntryUseCase {
@@ -26,6 +27,9 @@ func NewUpdateEntryUseCase(contentTypes contenttype.Repository, entries entry.Re
 }
 
 func (u *UpdateEntryUseCase) Update(command UpdateEntryCommand) (TypedEntry, error) {
+	if err := command.Caller.requireHolding(role.KeyContentUpdate, command.ContentTypeKey); err != nil {
+		return TypedEntry{}, err
+	}
 	owner, err := u.contentTypes.GetByKey(command.ContentTypeKey)
 	if err != nil {
 		return TypedEntry{}, err
@@ -34,6 +38,9 @@ func (u *UpdateEntryUseCase) Update(command UpdateEntryCommand) (TypedEntry, err
 	if err != nil {
 		return TypedEntry{}, err
 	}
+	if err := command.Caller.authorize(role.KeyContentUpdate, command.ContentTypeKey, current.CreatedBy); err != nil {
+		return TypedEntry{}, err
+	}
 	if err := entry.Validate(owner.Fields, command.Data); err != nil {
 		return TypedEntry{}, err
 	}
@@ -48,7 +55,7 @@ func (u *UpdateEntryUseCase) Update(command UpdateEntryCommand) (TypedEntry, err
 		return TypedEntry{}, err
 	}
 	current.Data = command.Data
-	current.UpdatedBy = command.UserID
+	current.UpdatedBy = command.Caller.UserID
 	current.UpdatedAt = u.now()
 	stored, err := u.entries.Update(current)
 	if err != nil {