Drop Privileges.forUser calls

Author: CarsonF

src/components/authentication/login.resolver.ts

@@ -61,7 +61,7 @@ export class LoginResolver {
   }
 
   @ResolveField(() => [Power])
-  async powers(@AnonSession() session: Session): Promise<Power[]> {
-    return [...this.privileges.forUser(session).powers];
+  async powers(): Promise<Power[]> {
+    return [...this.privileges.powers];
   }
 }

src/components/authentication/register.resolver.ts

@@ -51,7 +51,7 @@ export class RegisterResolver {
   }
 
   @ResolveField(() => [Power])
-  async powers(@AnonSession() session: Session): Promise<Power[]> {
-    return [...this.privileges.forUser(session).powers];
+  async powers(): Promise<Power[]> {
+    return [...this.privileges.powers];
   }
 }

src/components/authentication/session.resolver.ts

@@ -129,7 +129,7 @@ export class SessionResolver {
   }
 
   @ResolveField(() => [Power], { nullable: true })
-  async powers(@Parent() output: SessionOutput): Promise<Power[]> {
-    return [...this.privileges.forUser(output.session).powers];
+  async powers(): Promise<Power[]> {
+    return [...this.privileges.powers];
   }
 }

src/components/authorization/authorization.resolver.ts

@@ -1,5 +1,4 @@
 import { Query, Resolver } from '@nestjs/graphql';
-import { AnonSession, type Session } from '~/common';
 import { Power } from './dto';
 import { Privileges } from './policy';
 
@@ -8,7 +7,7 @@ export class AuthorizationResolver {
   constructor(private readonly privileges: Privileges) {}
 
   @Query(() => [Power])
-  async powers(@AnonSession() session: Session): Promise<Power[]> {
-    return [...this.privileges.forUser(session).powers];
+  async powers(): Promise<Power[]> {
+    return [...this.privileges.powers];
   }
 }

src/components/authorization/policy/executor/edge-privileges.ts

@@ -35,11 +35,6 @@ export class EdgePrivileges<
     return this.policyExecutor.sessionHost.current;
   }
 
-  /** @deprecated Use {@link forContext} instead */
-  forUser(_session: unknown, object?: ResourceObjectContext<TResourceStatic>) {
-    return object ? this.forContext(object) : this;
-  }
-
   get context() {
     return this.object;
   }

src/components/authorization/policy/executor/privileges.ts

@@ -27,11 +27,6 @@ export class Privileges {
     private readonly sessionHost: SessionHost,
   ) {}
 
-  /** @deprecated */
-  forUser(_session: unknown) {
-    return this;
-  }
-
   forResource<TResourceStatic extends ResourceShape<any>>(
     resource: TResourceStatic | EnhancedResource<TResourceStatic>,
   ) {

src/components/authorization/policy/executor/resource-privileges.ts

@@ -42,11 +42,6 @@ export class ResourcePrivileges<TResourceStatic extends ResourceShape<any>> {
     this.resource = EnhancedResource.of(resource);
   }
 
-  /** @deprecated Use {@link forContext} instead */
-  forUser(_session: unknown, object?: ResourceObjectContext<TResourceStatic>) {
-    return object ? this.forContext(object) : this;
-  }
-
   get context() {
     return this.object;
   }

src/components/budget/budget.repository.ts

@@ -110,7 +110,7 @@ export class BudgetRepository extends DtoRepository<
         node('project', 'Project', pickBy({ id: filter?.projectId })),
       ])
       .apply(
-        this.privileges.forUser(session).filterToReadable({
+        this.privileges.filterToReadable({
           wrapContext: oncePerProject,
         }),
       )

src/components/ceremony/ceremony.repository.ts

@@ -84,7 +84,7 @@ export class CeremonyRepository extends DtoRepository<
           : []),
       ])
       .apply(
-        this.privileges.forUser(session).filterToReadable({
+        this.privileges.filterToReadable({
           wrapContext: oncePerProject,
         }),
       )

src/components/field-region/field-region.repository.ts

@@ -105,7 +105,7 @@ export class FieldRegionRepository extends DtoRepository(FieldRegion) {
   }
 
   async list({ filter, ...input }: FieldRegionListInput, session: Session) {
-    if (!this.privileges.forUser(session).can('read')) {
+    if (!this.privileges.can('read')) {
       return SecuredList.Redacted;
     }
     const result = await this.db