feat: more role backend and admin/writer roles additions and adjustments

internal/infrastructure/useCases/UpdateAuthor.go

@@ -4,6 +4,7 @@ import (
 	"RenewCMS/internal/domain/audit"
 	"RenewCMS/internal/domain/author"
 	"RenewCMS/internal/domain/image"
+	"RenewCMS/internal/domain/role"
 	"RenewCMS/internal/domain/user"
 	"context"
 	"strings"
@@ -21,6 +22,9 @@ func NewUpdateAuthorUseCase(authors author.Repository, users user.Repository, im
 }
 
 func (u *UpdateAuthorUseCase) Update(ctx context.Context, id uint32, caller AuthorCaller, patch author.Patch) (author.Author, error) {
+	if !caller.Grants.Holds(role.KeyAuthorsEdit) {
+		return author.Author{}, role.MissingPermissionError{Key: role.KeyAuthorsEdit}
+	}
 	before, err := u.authors.Get(id)
 	if err != nil {
 		return author.Author{}, err
@@ -50,7 +54,7 @@ func (u *UpdateAuthorUseCase) Update(ctx context.Context, id uint32, caller Auth
 }
 
 func (u *UpdateAuthorUseCase) present(a author.Author, caller AuthorCaller) author.Author {
-	if caller.isAdmin() {
+	if caller.seesUserEmail() {
 		return withUserEmail(u.users, a)
 	}
 	a.UserEmail = nil
@@ -89,7 +93,7 @@ func (u *UpdateAuthorUseCase) prepare(before author.Author, caller AuthorCaller,
 }
 
 func authorizeEdit(before author.Author, caller AuthorCaller, patch author.Patch) error {
-	if caller.isAdmin() {
+	if caller.Grants.HoldsAll(role.KeyAuthorsEdit) {
 		return nil
 	}
 	if before.UserID == nil || *before.UserID != caller.UserID || patch.UserID.Set {