Maintainer should be able to see the visibility if it's an asset assigned to a cosplayer they maintain
Maintainer of a person should also get this value
Visibility field is missing?
Filtering by access level? As the other search query methods do? Maybe? Not sure.
Handled... where?
Maintainer OF that cosplayer can get all assets, otherwise it's like an user.
Yes they can, if they are a maintainer of the cosplayer related to the album.
Maintainer is missing here.
if we are just trying to access media, and we will have to check user being able to access the asset, this includes the user being a maintainer of the cosplayer the asset is assigned to... do we need the media repository to also get the visibility level?
This query needs a double check.
Should default to private
PageSize in search should default to PagedSearchDto.MaxPageSize.
1b444dab93
feat(auth): complete Maintainer role — add PersonMaintainer checks, update controller authz, pass uploadedBy search param
50bf0a2a78
feat(db): add migration for auth redesign — drop IsPubliclyShared/UserOwnerId/SharedWith, add Visibility, PersonMaintainer, rename OwnerId→UploadedBy
2335e8e23a
feat(repos,controllers): update repositories, interfaces, controllers for auth redesign — visibility filtering, UploadedBy/Uploader rename, Maintainer support
d02a010083
feat(infra): update DbContext and mappers for auth redesign — new relationships, PersonMaintainer, conditional Visibility
6676347353
feat(models): update models for auth redesign — rename Owner→UploadedBy, drop UserOwnerId/IsPubliclyShared, add EVisibility, PersonMaintainer
c9391d840b
feat(butter): update DTOs for visibility, renamed Owner→UploadedBy, removed IsPublic/Owner fields
this has nothing to be done as user content will stay on user deletion (unless requested and/or separate mechanism but that will be a separate issue)