snapshot of https://github.com/ent/ent.git (master, 2026-09-15; blobs > 131072B omitted)

entc/integration/privacy/ent/schema/base.go

@@ -0,0 +1,31 @@
+// Copyright 2019-present Facebook Inc. All rights reserved.
+// This source code is licensed under the Apache 2.0 license found
+// in the LICENSE file in the root directory of this source tree.
+
+package schema
+
+import (
+	"entgo.io/ent"
+	"entgo.io/ent/entc/integration/privacy/ent/privacy"
+	"entgo.io/ent/entc/integration/privacy/rule"
+	"entgo.io/ent/schema/mixin"
+)
+
+// BaseMixin for all schemas.
+type BaseMixin struct {
+	mixin.Schema
+}
+
+// Policy defines shared policy for all schemas.
+func (BaseMixin) Policy() ent.Policy {
+	return privacy.Policy{
+		Mutation: privacy.MutationPolicy{
+			rule.DenyIfNoViewer(),
+			rule.AllowIfAdmin(),
+		},
+		Query: privacy.QueryPolicy{
+			rule.DenyIfNoViewer(),
+			rule.AllowIfAdmin(),
+		},
+	}
+}

entc/integration/privacy/ent/schema/task.go

@@ -0,0 +1,73 @@
+// Copyright 2019-present Facebook Inc. All rights reserved.
+// This source code is licensed under the Apache 2.0 license found
+// in the LICENSE file in the root directory of this source tree.
+
+package schema
+
+import (
+	"entgo.io/ent"
+	"entgo.io/ent/entc/integration/privacy/ent/privacy"
+	"entgo.io/ent/entc/integration/privacy/rule"
+	"entgo.io/ent/schema/edge"
+	"entgo.io/ent/schema/field"
+	"github.com/google/uuid"
+)
+
+// Task defines the schema of a task.
+type Task struct {
+	ent.Schema
+}
+
+// Mixin list of schemas to the task.
+func (Task) Mixin() []ent.Mixin {
+	return []ent.Mixin{
+		BaseMixin{},
+		TeamMixin{},
+	}
+}
+
+// Fields of the task.
+func (Task) Fields() []ent.Field {
+	return []ent.Field{
+		field.String("title").
+			NotEmpty(),
+		field.String("description").
+			Optional(),
+		field.Enum("status").
+			Values("planned", "in_progress", "closed").
+			Default("planned"),
+		field.UUID("uuid", uuid.UUID{}).
+			Optional(),
+	}
+}
+
+// Edges of the task.
+func (Task) Edges() []ent.Edge {
+	return []ent.Edge{
+		edge.From("owner", User.Type).
+			Ref("tasks").
+			Unique(),
+	}
+}
+
+// Hooks for the task.
+func (Task) Hooks() []ent.Hook {
+	return []ent.Hook{
+		rule.LogTaskMutationHook(),
+	}
+}
+
+// Policy of the task.
+func (Task) Policy() ent.Policy {
+	return privacy.Policy{
+		Mutation: privacy.MutationPolicy{
+			rule.AllowTaskCreateIfOwner(),
+			rule.DenyIfStatusChangedByOther(),
+			rule.AllowIfViewerInTheSameTeam(),
+			privacy.AlwaysDenyRule(),
+		},
+		Query: privacy.QueryPolicy{
+			privacy.AlwaysAllowRule(),
+		},
+	}
+}

entc/integration/privacy/ent/schema/team.go

@@ -0,0 +1,75 @@
+// Copyright 2019-present Facebook Inc. All rights reserved.
+// This source code is licensed under the Apache 2.0 license found
+// in the LICENSE file in the root directory of this source tree.
+
+package schema
+
+import (
+	"entgo.io/ent"
+	"entgo.io/ent/entc/integration/privacy/ent/privacy"
+	"entgo.io/ent/entc/integration/privacy/rule"
+	"entgo.io/ent/schema/edge"
+	"entgo.io/ent/schema/field"
+	"entgo.io/ent/schema/mixin"
+)
+
+// Team defines the schema of a team.
+type Team struct {
+	ent.Schema
+}
+
+// Mixin list of schemas to the team.
+func (Team) Mixin() []ent.Mixin {
+	return []ent.Mixin{
+		BaseMixin{},
+	}
+}
+
+// Fields of the team.
+func (Team) Fields() []ent.Field {
+	return []ent.Field{
+		field.String("name").
+			NotEmpty(),
+	}
+}
+
+// Edges of the team.
+func (Team) Edges() []ent.Edge {
+	return []ent.Edge{
+		edge.From("tasks", Task.Type).
+			Ref("teams"),
+		edge.From("users", User.Type).
+			Ref("teams"),
+	}
+}
+
+// Policy of the team.
+func (Team) Policy() ent.Policy {
+	return privacy.Policy{
+		Mutation: privacy.MutationPolicy{
+			rule.DenyIfNotAdmin(),
+			rule.DenyUpdateRule(),
+		},
+	}
+}
+
+// TeamMixin shared between task and user.
+type TeamMixin struct {
+	mixin.Schema
+}
+
+// Edges of the team-mixin.
+func (TeamMixin) Edges() []ent.Edge {
+	return []ent.Edge{
+		edge.To("teams", Team.Type),
+	}
+}
+
+// Policy of the team-mixin.
+func (TeamMixin) Policy() ent.Policy {
+	return privacy.Policy{
+		Query: privacy.QueryPolicy{
+			rule.FilterTeamRule(),
+		},
+	}
+}

entc/integration/privacy/ent/schema/user.go

@@ -0,0 +1,69 @@
+// Copyright 2019-present Facebook Inc. All rights reserved.
+// This source code is licensed under the Apache 2.0 license found
+// in the LICENSE file in the root directory of this source tree.
+
+package schema
+
+import (
+	"entgo.io/ent"
+	"entgo.io/ent/dialect/entsql"
+	"entgo.io/ent/entc/integration/privacy/ent/privacy"
+	"entgo.io/ent/entc/integration/privacy/rule"
+	"entgo.io/ent/schema"
+	"entgo.io/ent/schema/edge"
+	"entgo.io/ent/schema/field"
+)
+
+// User defines the schema of a user.
+type User struct {
+	ent.Schema
+}
+
+// Mixin list of schemas to the user.
+func (User) Mixin() []ent.Mixin {
+	return []ent.Mixin{
+		BaseMixin{},
+		TeamMixin{},
+	}
+}
+
+// Fields of the user.
+func (User) Fields() []ent.Field {
+	return []ent.Field{
+		field.String("name").
+			Immutable().
+			NotEmpty().
+			Unique(),
+		field.Uint("age").
+			Optional(),
+	}
+}
+
+// Edges of the user.
+func (User) Edges() []ent.Edge {
+	return []ent.Edge{
+		edge.To("tasks", Task.Type),
+	}
+}
+
+// Policy of the user.
+func (User) Policy() ent.Policy {
+	return privacy.Policy{
+		Mutation: privacy.MutationPolicy{
+			rule.AllowUserCreateIfAdmin(),
+			privacy.AlwaysDenyRule(),
+		},
+		Query: privacy.QueryPolicy{
+			privacy.AlwaysAllowRule(),
+		},
+	}
+}
+
+// Annotations of the user.
+func (User) Annotations() []schema.Annotation {
+	return []schema.Annotation{
+		entsql.Checks(map[string]string{
+			"backticks": "`name` IS NOT NULL",
+		}),
+	}
+}