add notes edge as allowed as some schemas use notes (#2459)

adelowo · web-flow · commit 5849e997025d · 2026-06-04T13:54:40.000-06:00
diff --git a/.task/checksum/generate-ent-smart b/.task/checksum/generate-ent-smart
@@ -1 +1 @@
-577c22317933c2aa9a19737b4817a7ec
+e4e3b3b75c00780d5391eb44d2df9ca4
diff --git a/common/go.mod b/common/go.mod
@@ -21,7 +21,7 @@ require (
 )
 
 require (
-	ariga.io/atlas v1.2.0 // indirect
+	ariga.io/atlas v1.2.1 // indirect
 	entgo.io/contrib v0.7.0 // indirect
 	github.com/99designs/gqlgen v0.17.90 // indirect
 	github.com/XSAM/otelsql v0.42.0 // indirect
diff --git a/common/go.sum b/common/go.sum
@@ -1,5 +1,4 @@
-ariga.io/atlas v1.2.0 h1:PJZzG1zTA8SzMR1giJ7XnQe4VjfDWEbJjHnIaK45BFg=
-ariga.io/atlas v1.2.0/go.mod h1:vg7qWSatkNqs04Y4Lheg7vR4bGX0wy51Wz4FIMFVr3U=
+ariga.io/atlas v1.2.1 h1:xLIs6vThJ2J9Bl8gXFZhXbNyMf4yFuBeJ7AYlZ+Tn6M=
 entgo.io/contrib v0.7.0 h1:4Ghx8O0rqSMmca3FIJ6QyZbQAoLvdzWqLMl1MbHFEEw=
 entgo.io/contrib v0.7.0/go.mod h1:zbPSUrbn+6dfyv8S9HWEvn1MyGpO95ik2lUNgaqWTt4=
 entgo.io/ent v0.14.6 h1:/f2696BpwuWAEEG6PVGWflg6+Inrpq4pRWuNlWz/Skk=
diff --git a/internal/ent/checksum/.history_schema_checksum b/internal/ent/checksum/.history_schema_checksum
@@ -1 +1 @@
-45600c6f235c5e04e8519a173f010254a5dfe3052d35b863798e3dedb8b799d2
+a0e067a977be32f33c47f1f2864c6096b04ce800c06be050047e3a61d7dd3493
diff --git a/internal/ent/checksum/.schema_checksum b/internal/ent/checksum/.schema_checksum
@@ -1 +1 @@
-6ed2de8707b26b2759c6d68d0e17c985fe458dfd4600078d276bcc9d47bdf043
+ecf9b08abb255b796fc8f8e372bc29105e6d6ef082991d7b597e6a39cc7dafba
diff --git a/internal/ent/privacy/rule/allow_comments.go b/internal/ent/privacy/rule/allow_comments.go
@@ -6,6 +6,7 @@ import (
 	"entgo.io/ent"
 
 	"github.com/samber/lo"
+
 	"github.com/theopenlane/core/internal/ent/generated"
 	"github.com/theopenlane/core/internal/ent/generated/privacy"
 	"github.com/theopenlane/core/pkg/slateparser"
@@ -25,7 +26,7 @@ func CheckIfCommentOnly() privacy.MutationRuleFunc {
 		addedFields := m.AddedFields() // get numeric fields
 
 		ignoreFields := []string{"updated_at", "updated_by", "owner_id"}
-		allowedEdges := []string{"comments"}
+		allowedEdges := []string{"comments", "notes"}
 
 		// remove ignored fields from the list of fields being set in the mutation
 		fields = lo.Without(fields, ignoreFields...)
diff --git a/internal/ent/schema/entity.go b/internal/ent/schema/entity.go
@@ -20,6 +20,7 @@ import (
 	"github.com/theopenlane/core/internal/ent/hooks"
 	"github.com/theopenlane/core/internal/ent/mixin"
 	"github.com/theopenlane/core/internal/ent/privacy/policy"
+	"github.com/theopenlane/core/internal/ent/privacy/rule"
 	"github.com/theopenlane/core/internal/ent/validator"
 )
 
@@ -424,6 +425,7 @@ func (e Entity) Policy() ent.Policy {
 	return policy.NewPolicy(
 		policy.WithMutationRules(
 			policy.CheckCreateAccess(),
+			rule.CheckIfCommentOnly(),
 			entfga.CheckEditAccess[*generated.EntityMutation](),
 		),
 	)

Original file line number	Diff line number	Diff line change
`@@ -1 +1 @@`
`1`		`-577c22317933c2aa9a19737b4817a7ec`
	`1`	`+e4e3b3b75c00780d5391eb44d2df9ca4`
Original file line number	Diff line number	Diff line change
`@@ -21,7 +21,7 @@ require (`
`21`	`21`	`)`
`22`	`22`
`23`	`23`	`require (`
`24`		`- ariga.io/atlas v1.2.0 // indirect`
	`24`	`+ ariga.io/atlas v1.2.1 // indirect`
`25`	`25`	`entgo.io/contrib v0.7.0 // indirect`
`26`	`26`	`github.com/99designs/gqlgen v0.17.90 // indirect`
`27`	`27`	`github.com/XSAM/otelsql v0.42.0 // indirect`
Original file line number	Diff line number	Diff line change
`@@ -1 +1 @@`
`1`		`-45600c6f235c5e04e8519a173f010254a5dfe3052d35b863798e3dedb8b799d2`
	`1`	`+a0e067a977be32f33c47f1f2864c6096b04ce800c06be050047e3a61d7dd3493`
Original file line number	Diff line number	Diff line change
`@@ -1 +1 @@`
`1`		`-6ed2de8707b26b2759c6d68d0e17c985fe458dfd4600078d276bcc9d47bdf043`
	`1`	`+ecf9b08abb255b796fc8f8e372bc29105e6d6ef082991d7b597e6a39cc7dafba`
Original file line number	Diff line number	Diff line change
`@@ -20,6 +20,7 @@ import (`
`20`	`20`	`"github.com/theopenlane/core/internal/ent/hooks"`
`21`	`21`	`"github.com/theopenlane/core/internal/ent/mixin"`
`22`	`22`	`"github.com/theopenlane/core/internal/ent/privacy/policy"`
	`23`	`+ "github.com/theopenlane/core/internal/ent/privacy/rule"`
`23`	`24`	`"github.com/theopenlane/core/internal/ent/validator"`
`24`	`25`	`)`
`25`	`26`
`@@ -424,6 +425,7 @@ func (e Entity) Policy() ent.Policy {`
`424`	`425`	`return policy.NewPolicy(`
`425`	`426`	`policy.WithMutationRules(`
`426`	`427`	`policy.CheckCreateAccess(),`
	`428`	`+ rule.CheckIfCommentOnly(),`
`427`	`429`	`entfga.CheckEditAccess[*generated.EntityMutation](),`
`428`	`430`	`),`
`429`	`431`	`)`