Expand through resources to have policies

Author: ken-kost

priv/test_repo/migrations/20260206120932_add_public_to_classrooms.exs

@@ -0,0 +1,19 @@
+defmodule AshPostgres.TestRepo.Migrations.AddPublicToClassrooms do
+  @moduledoc """
+  Adds public column to classrooms for through relationship policy testing.
+  """
+
+  use Ecto.Migration
+
+  def up do
+    alter table(:classrooms) do
+      add(:public, :boolean, default: true)
+    end
+  end
+
+  def down do
+    alter table(:classrooms) do
+      remove(:public)
+    end
+  end
+end

test/support/resources/through/classroom.ex

@@ -6,16 +6,30 @@ defmodule AshPostgres.Test.Through.Classroom do
   @moduledoc false
   use Ash.Resource,
     domain: AshPostgres.Test.Domain,
-    data_layer: AshPostgres.DataLayer
+    data_layer: AshPostgres.DataLayer,
+    authorizers: [Ash.Policy.Authorizer]
 
   postgres do
     table "classrooms"
     repo AshPostgres.TestRepo
   end
 
+  policies do
+    policy action_type(:read) do
+      authorize_if(expr(public == true))
+    end
+  end
+
+  field_policies do
+    field_policy :* do
+      authorize_if(always())
+    end
+  end
+
   attributes do
     uuid_primary_key(:id)
     attribute(:name, :string, public?: true)
+    attribute(:public, :boolean, public?: true, default: true)
   end
 
   actions do

test/support/resources/through/classroom_teacher.ex

@@ -6,10 +6,23 @@ defmodule AshPostgres.Test.Through.ClassroomTeacher do
   @moduledoc false
   use Ash.Resource,
     domain: AshPostgres.Test.Domain,
-    data_layer: AshPostgres.DataLayer
+    data_layer: AshPostgres.DataLayer,
+    authorizers: [Ash.Policy.Authorizer]
 
   require Ash.Query
 
+  policies do
+    policy action_type(:read) do
+      authorize_if(expr(is_nil(retired_at)))
+    end
+  end
+
+  field_policies do
+    field_policy :* do
+      authorize_if(always())
+    end
+  end
+
   postgres do
     table "classroom_teachers"
     repo AshPostgres.TestRepo

test/support/resources/through/school.ex

@@ -6,13 +6,26 @@ defmodule AshPostgres.Test.Through.School do
   @moduledoc false
   use Ash.Resource,
     domain: AshPostgres.Test.Domain,
-    data_layer: AshPostgres.DataLayer
+    data_layer: AshPostgres.DataLayer,
+    authorizers: [Ash.Policy.Authorizer]
 
   postgres do
     table "schools"
     repo AshPostgres.TestRepo
   end
 
+  policies do
+    policy action_type(:read) do
+      authorize_if(always())
+    end
+  end
+
+  field_policies do
+    field_policy :* do
+      authorize_if(always())
+    end
+  end
+
   attributes do
     uuid_primary_key(:id)
     attribute(:name, :string, public?: true)

test/support/resources/through/student.ex

@@ -6,7 +6,20 @@ defmodule AshPostgres.Test.Through.Student do
   @moduledoc false
   use Ash.Resource,
     domain: AshPostgres.Test.Domain,
-    data_layer: AshPostgres.DataLayer
+    data_layer: AshPostgres.DataLayer,
+    authorizers: [Ash.Policy.Authorizer]
+
+  policies do
+    policy action_type(:read) do
+      authorize_if(always())
+    end
+  end
+
+  field_policies do
+    field_policy :* do
+      authorize_if(always())
+    end
+  end
 
   postgres do
     table "students"

test/support/resources/through/teacher.ex

@@ -6,7 +6,20 @@ defmodule AshPostgres.Test.Through.Teacher do
   @moduledoc false
   use Ash.Resource,
     domain: AshPostgres.Test.Domain,
-    data_layer: AshPostgres.DataLayer
+    data_layer: AshPostgres.DataLayer,
+    authorizers: [Ash.Policy.Authorizer]
+
+  policies do
+    policy action_type(:read) do
+      authorize_if(always())
+    end
+  end
+
+  field_policies do
+    field_policy :* do
+      authorize_if(always())
+    end
+  end
 
   postgres do
     table "teachers"