(feat): enforce view permission flag

src/app/modules/blogs/view/infinite.ts

@@ -10,6 +10,9 @@ import { AnalyticsService } from '../../../services/analytics';
 
 import { MindsBlogResponse } from '../../../interfaces/responses';
 import { MindsBlogEntity } from '../../../interfaces/entities';
+import { Flags } from '../../../common/services/permissions/flags';
+import { FeaturesService } from '../../../services/features.service';
+import { PermissionsService } from '../../../common/services/permissions/permissions.service';
 
 @Component({
   moduleId: module.id,
@@ -37,7 +40,9 @@ export class BlogViewInfinite {
     public title: MindsTitle,
     private applicationRef: ApplicationRef,
     private cd: ChangeDetectorRef,
-    private analytics: AnalyticsService
+    private analytics: AnalyticsService,
+    private featuresService: FeaturesService,
+    private permissionsService: PermissionsService
   ) {}
 
   ngOnInit() {
@@ -96,7 +101,12 @@ export class BlogViewInfinite {
             },
             response.blog.guid
           );
-        } else if (this.blogs.length === 0) {
+        } else if (
+          this.blogs.length === 0 ||
+          (this.featuresService.has('permissions') &&
+            !this.permissionsService.canInteract(this.blogs[0], Flags.VIEW))
+        ) {
+          this.blogs = [];
           this.error = "Sorry, we couldn't load the blog";
         }
         //hack: ios rerun on low memory

src/app/modules/media/view/view.component.ts

 import {
   ChangeDetectorRef,
   Component,
-  OnInit,
+  Injector,
   OnDestroy,
+  OnInit,
   SkipSelf,
-  Injector,
 } from '@angular/core';
 import { ActivatedRoute, Router } from '@angular/router';
 
@@ -18,8 +18,10 @@ import { AttachmentService } from '../../../services/attachment';
 import { ContextService } from '../../../services/context.service';
 import { MindsTitle } from '../../../services/ux/title';
 import { ActivityService } from '../../../common/services/activity.service';
-import { AnalyticsService } from '../../../services/analytics';
 import { ClientMetaService } from '../../../common/services/client-meta.service';
+import { FeaturesService } from '../../../services/features.service';
+import { PermissionsService } from '../../../common/services/permissions/permissions.service';
+import { Flags } from '../../../common/services/permissions/flags';
 
 @Component({
   moduleId: module.id,
@@ -75,6 +77,8 @@ export class MediaViewComponent implements OnInit, OnDestroy {
     private cd: ChangeDetectorRef,
     protected activityService: ActivityService,
     private clientMetaService: ClientMetaService,
+    private featuresService: FeaturesService,
+    private permissionsService: PermissionsService,
     @SkipSelf() injector: Injector
   ) {
     this.clientMetaService
@@ -122,6 +126,12 @@ export class MediaViewComponent implements OnInit, OnDestroy {
           return;
         }
         if (response.entity) {
+          if (
+            this.featuresService.has('permissions') &&
+            !this.permissionsService.canInteract(response.entity, Flags.VIEW)
+          ) {
+            throw new Error('Insufficient permissions');
+          }
           this.entity = response.entity;
           this.allowComments = this.entity['allow_comments'];
           switch (this.entity.subtype) {

src/app/modules/newsfeed/single/single.component.ts

@@ -10,6 +10,8 @@ import { EntitiesService } from '../../../common/services/entities.service';
 import { Client } from '../../../services/api/client';
 import { FeaturesService } from '../../../services/features.service';
 import { ClientMetaService } from '../../../common/services/client-meta.service';
+import { PermissionsService } from '../../../common/services/permissions/permissions.service';
+import { Flags } from '../../../common/services/permissions/flags';
 
 @Component({
   selector: 'm-newsfeed--single',
@@ -33,6 +35,7 @@ export class NewsfeedSingleComponent {
     public entitiesService: EntitiesService,
     protected client: Client,
     protected featuresService: FeaturesService,
+    protected permissionsService: PermissionsService,
     protected clientMetaService: ClientMetaService,
     @SkipSelf() injector: Injector
   ) {
@@ -80,6 +83,13 @@ export class NewsfeedSingleComponent {
         if (activity === null) {
           return; // Not yet loaded
         }
+        if (
+          this.featuresService.has('permissions') &&
+          !this.permissionsService.canInteract(activity, Flags.VIEW)
+        ) {
+          this.error = "Sorry, we couldn't load the activity";
+          return;
+        }
 
         this.activity = activity;