feat: more role backend and admin/writer roles additions and adjustments

internal/infrastructure/useCases/activityQuery.go

@@ -2,6 +2,7 @@ package useCases
 
 import (
 	"RenewCMS/internal/domain/audit"
+	"RenewCMS/internal/domain/role"
 	"time"
 )
 
@@ -32,6 +33,22 @@ type ActivityQuery struct {
 	Size     int
 }
 
+func scopeFilterToViewer(filter *audit.Filter, viewerID uint32, grants role.GrantSet) error {
+	switch grants.Scope(role.KeyActivityView) {
+	case role.ScopeAll:
+		return nil
+	case role.ScopeOwn:
+		own := audit.ActorRef{Type: audit.ActorUser, ID: &viewerID}
+		if filter.Actor != nil && !sameActor(*filter.Actor, own) {
+			return audit.ErrActorNotAllowed
+		}
+		filter.Actor = &own
+		return nil
+	default:
+		return role.MissingPermissionError{Key: role.KeyActivityView}
+	}
+}
+
 type activityWindow struct {
 	from     time.Time
 	to       time.Time