Everyone can read & create comments (#3314)

Author: CarsonF

dbschema/migrations/00009-m17teec.edgeql

@@ -0,0 +1,10 @@
+import { Policy } from '../util';
+
+@Policy('all', (r) => [
+  // Technically, we want only when the Commentable is readable.
+  // I think this is sufficient for practical use at this point in time.
+  ...[r.CommentThread, r.Comment].flatMap((it) => it.read.create),
+  // This shouldn't be needed, but it is. children() needs rewrite.
+  r.Commentable.children((c) => c.commentThreads.read.create),
+])
+export class EveryoneCanCommentPolicy {}

src/components/authorization/policies/by-feature/everyone-can-comment.policy.ts

@@ -23,5 +23,6 @@ export * from './by-feature/progress-report-media-owner.policy';
 export * from './by-feature/project-change-requests-beta.policy';
 export * from './by-feature/read-util-objects.policy';
 export * from './by-feature/user-can-edit-self.policy';
+export * from './by-feature/everyone-can-comment.policy';
 export * from './by-feature/user-can-manage-own-comments.policy';
 export * from './by-feature/new-progress-reports-beta.policy';