Skip to content

feat: 🎸 setup logic to be able to update and delete comment - #340

Open
royshunhung wants to merge 1 commit into
mainfrom
feature_2382
Open

feat: 🎸 setup logic to be able to update and delete comment#340
royshunhung wants to merge 1 commit into
mainfrom
feature_2382

Conversation

@royshunhung

@royshunhung royshunhung commented Jul 26, 2026

Copy link
Copy Markdown
Contributor
  • Update comment.js to setup security policy to ensure users can only modify or delete comments from them
  • Setup comment-owner-filter.js to check if the currently logged-in user the owner of this specific comment?
  • Update lifecycles.js hook prevents users from tampering with key relationships—like reassigning who owns the comment or moving the comment to a different parent post/idea card—during an update operation.

✅ Closes: 2383

image image

update comment.js to setup security policy to ensure users can only
modify or delete comments from them

✅ Closes: 2383
Copilot AI review requested due to automatic review settings July 26, 2026 19:00

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

@github-actions

Copy link
Copy Markdown

Code Coverage

Package Line Rate Branch Rate Health
src 65% 50%
src.api.applicant.content-types.applicant 25% 0%
src.api.applicant.controllers 100% 100%
src.api.applicant.routes 100% 100%
src.api.applicant.services 100% 100%
src.api.comment.content-types.comment 69% 50%
src.api.comment.controllers 100% 100%
src.api.comment.policies 12% 0%
src.api.comment.routes 100% 100%
src.api.comment.services 100% 100%
src.api.department.controllers 100% 100%
src.api.department.routes 100% 100%
src.api.department.services 100% 100%
src.api.discord.services 50% 17%
src.api.dl-tal-community.controllers 100% 100%
src.api.dl-tal-community.routes 100% 100%
src.api.dl-tal-community.services 100% 100%
src.api.event.content-types.event 88% 100%
src.api.event.controllers 100% 71%
src.api.event.routes 100% 100%
src.api.event.services 100% 100%
src.api.github-repo.controllers 20% 100%
src.api.github-repo.routes 100% 100%
src.api.github-repo.services 31% 17%
src.api.google-meet.content-types.google-meet 33% 100%
src.api.google-meet.controllers 100% 100%
src.api.google-meet.routes 100% 100%
src.api.google-meet.services 100% 100%
src.api.idea-card.content-types.idea-card 87% 58%
src.api.idea-card.controllers 100% 100%
src.api.idea-card.routes 100% 100%
src.api.idea-card.services 100% 100%
src.api.image-keyword-mapping.controllers 100% 100%
src.api.image-keyword-mapping.routes 100% 100%
src.api.image-keyword-mapping.services 100% 100%
src.api.image.controllers 36% 38%
src.api.image.routes 100% 100%
src.api.image.services 6% 0%
src.api.interest.content-types.interest 17% 0%
src.api.interest.controllers 100% 100%
src.api.interest.routes 100% 100%
src.api.interest.services 100% 100%
src.api.like.controllers 100% 100%
src.api.like.routes 100% 100%
src.api.like.services 100% 100%
src.api.member.content-types.member 8% 0%
src.api.member.controllers 100% 100%
src.api.member.routes 100% 100%
src.api.member.services 100% 100%
src.api.newsletter.controllers 100% 100%
src.api.newsletter.routes 100% 100%
src.api.newsletter.services 100% 100%
src.api.notification.controllers 100% 100%
src.api.notification.policies 100% 88%
src.api.notification.routes 100% 100%
src.api.notification.services 100% 100%
src.api.onboarding-applicant.content-types.onboarding-applicant 74% 60%
src.api.onboarding-applicant.controllers 100% 100%
src.api.onboarding-applicant.routes 100% 100%
src.api.onboarding-applicant.services 100% 100%
src.api.opportunity.controllers 100% 100%
src.api.opportunity.routes 100% 100%
src.api.opportunity.services 100% 100%
src.api.profile.content-types.profile 12% 0%
src.api.profile.controllers 100% 100%
src.api.profile.routes 100% 100%
src.api.profile.services 100% 100%
src.api.project.controllers 100% 100%
src.api.project.routes 100% 100%
src.api.project.services 100% 100%
src.api.save-idea.controllers 100% 100%
src.api.save-idea.routes 100% 100%
src.api.save-idea.services 100% 100%
src.api.sendmail.controllers 100% 100%
src.api.sendmail.routes 100% 100%
src.api.sendmail.services 67% 100%
src.api.subscription.controllers 100% 100%
src.api.subscription.routes 100% 100%
src.api.subscription.services 100% 100%
src.api.team-membership.controllers 100% 100%
src.api.team-membership.routes 100% 100%
src.api.team-membership.services 100% 100%
src.api.user-recommendations.controllers 10% 0%
src.api.user-recommendations.routes 100% 100%
src.extensions.users-permissions 100% 100%
src.extensions.users-permissions.controllers 33% 100%
src.extensions.users-permissions.routes.content-api 100% 100%
src.extensions.users-permissions.server.bootstrap 100% 62%
src.extensions.users-permissions.server.middlewares 70% 59%
src.extensions.users-permissions.server.services 10% 0%
src.migrators 60% 50%
Summary 49% (391 / 797) 29% (81 / 277)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants