Validate SystemNotification creation with policies

Author: CarsonF

src/components/notification-system/system-notification.resolver.ts

@@ -6,9 +6,8 @@ import {
   ObjectType,
   Resolver,
 } from '@nestjs/graphql';
-import { LoggedInSession, type Session, UnauthorizedException } from '~/common';
 import { MarkdownScalar } from '~/common/markdown.scalar';
-import { isAdmin } from '~/common/session';
+import { Privileges } from '../authorization';
 import { NotificationService } from '../notifications';
 import { SystemNotification } from './system-notification.dto';
 
@@ -23,17 +22,16 @@ export class SystemNotificationCreationOutput {
 
 @Resolver(SystemNotification)
 export class SystemNotificationResolver {
-  constructor(private readonly notifications: NotificationService) {}
+  constructor(
+    private readonly notifications: NotificationService,
+    private readonly privileges: Privileges,
+  ) {}
 
   @Mutation(() => SystemNotificationCreationOutput)
   async createSystemNotification(
     @Args({ name: 'message', type: () => MarkdownScalar }) message: string,
-    @LoggedInSession() session: Session,
   ): Promise<SystemNotificationCreationOutput> {
-    if (!isAdmin(session)) {
-      throw new UnauthorizedException();
-    }
-
+    this.privileges.for(SystemNotification).verifyCan('create');
     return await this.notifications.create(SystemNotification, null, {
       message,
     });