| 30 | } |
| 31 | |
| 32 | func CanWrite(user *model.User, meta *model.Meta, path string) bool { |
| 33 | // nil user is treated as internal/system context and bypasses per-user write restrictions |
| 34 | if user == nil { |
| 35 | return true |
| 36 | } |
| 37 | if meta != nil && len(meta.WriteUsers) > 0 && !slices.Contains(meta.WriteUsers, user.ID) && MetaCoversPath(meta.Path, path, meta.WriteUsersSub) { |
| 38 | return false |
| 39 | } |
| 40 | return true |
| 41 | } |
| 42 | |
| 43 | func CanWriteContentBypassUserPerms(meta *model.Meta, path string) bool { |
| 44 | if meta == nil || !meta.Write { |