Skip generating access policies for Actor

Author: CarsonF

src/common/resource.dto.ts

@@ -85,6 +85,8 @@ export type ResourceRelationsShape = ResourceShape<any>['Relations'];
 export class EnhancedResource<T extends ResourceShape<any>> {
   /** @internal */
   static readonly dbTypes = new WeakMap<ResourceShape<any>, $.$expr_PathNode>();
+  /** @internal */
+  static readonly dbSkipAccessPolicies = new Set<string>();
 
   private constructor(readonly type: T) {}
   private static readonly refs = new WeakMap<
@@ -255,6 +257,10 @@ export class EnhancedResource<T extends ResourceShape<any>> {
     return type as any;
   }
 
+  get generateAccessPolicies() {
+    return this.hasDB && !EnhancedResource.dbSkipAccessPolicies.has(this.dbFQN);
+  }
+
   get dbFQN(): ResourceShape<any> extends T ? string : DBName<DBType<T>> {
     return this.db.__element__.__name__ as any;
   }

src/components/authorization/policy/edgedb-access-policy.generator.ts

@@ -17,6 +17,11 @@ export class EdgeDBAccessPolicyGenerator {
 
   makeSdl(params: AsEdgeQLParams<any>) {
     const { resource } = params;
+
+    if (!resource.generateAccessPolicies) {
+      return undefined;
+    }
+
     const actions = {
       select: 'read',
       'update read': 'read',

src/components/user/dto/actor.dto.ts

@@ -13,7 +13,10 @@ import {
 import { RegisterResource } from '~/core';
 import { e } from '~/core/edgedb';
 
-@RegisterResource({ db: e.Actor })
+@RegisterResource({
+  db: e.Actor,
+  skipAccessPolicies: true,
+})
 @InterfaceType({
   resolveType: resolveByTypename(Actor.name),
 })

src/core/resources/resource.decorator.ts

@@ -7,10 +7,21 @@ import { __privateDontUseThis } from './resource-map-holder';
  * Be sure to add the type to the type map as well.
  * See {@link import('./map').ResourceMap} for details on that.
  */
-export const RegisterResource = ({ db }: { db?: $.$expr_PathNode } = {}) => {
+export const RegisterResource = ({
+  db,
+  skipAccessPolicies,
+}: {
+  db?: $.$expr_PathNode;
+  skipAccessPolicies?: boolean;
+} = {}) => {
   return <T extends ResourceShape<any>>(target: T) => {
     __privateDontUseThis[target.name] = target;
-    db && EnhancedResource.dbTypes.set(target, db);
+    if (db) {
+      EnhancedResource.dbTypes.set(target, db);
+      if (skipAccessPolicies) {
+        EnhancedResource.dbSkipAccessPolicies.add(db.__element__.__name__);
+      }
+    }
     return target;
   };
 };