directives

var ErrReadOnlyField = errors.New("invalid input: attempted to set read only field")

var ExternalReadOnlyDirective = func(ctx context.Context, _ any, next graphql.Resolver, source *enums.ControlSource) (any, error) {
	if admin, err := rule.CheckIsSystemAdminWithContext(ctx); err == nil && admin {

		return next(ctx)
	}

	fieldSet := checkFieldSet(ctx, skipCreateOperations)
	allowed := checkSourceAllowed(ctx, source)

	if fieldSet && !allowed {
		return nil, ErrReadOnlyField
	}

	return next(ctx)
}

ExternalReadOnlyDirective is the implementation for the external read only directive that can be used to indicate a field cannot be set by users for objects that are system-owned because it is populated by an external source only system admins can change this field on system-owned objects, on objects that are not system-owned, the field can be set by anyone with permission to update the object

var ExternalReadOnlyDirectiveAnnotation = entgql.Directives(
	NewExternalReadyOnlyDirective(enums.ControlSourceFramework),
)

ExternalReadOnlyDirectiveAnnotation is an annotation that can be used to mark a field as read-only when the object is system-owned because the field is populated by an external source

var ExternalSourceDirective = func(ctx context.Context, _ any, next graphql.Resolver, _ *enums.ControlSource) (any, error) {

	return next(ctx)
}

ExternalSourceDirective is used to mark fields or objects that are populated by an external source that will prevent the ability to update the field if the object is framework sourced

var ExternalSourceDirectiveAnnotation = entgql.Directives(
	NewExternalSourceDirective(enums.ControlSourceFramework),
)

ExternalSourceDirectiveAnnotation is an annotation that can be used to mark a field as read-only when the object is system-owned because the field is populated by an external source

var HiddenDirective = func(ctx context.Context, _ any, next graphql.Resolver, isHidden *bool) (any, error) {
	if admin, err := rule.CheckIsSystemAdminWithContext(ctx); err == nil && admin {

		return next(ctx)
	}

	if isHidden != nil && *isHidden {

		return nil, nil
	}

	return next(ctx)
}

HiddenDirective is the implementation for the hidden directive that can be used to hide a field from non-system admin users if the user is a system admin, the field will be returned otherwise, the field will be returned as nil

var HiddenDirectiveAnnotation = entgql.Directives(
	NewHiddenDirective(true),
)

HiddenDirectiveAnnotation is an annotation that can be used to hide a field from the graphql schema this is added to the ent schema field annotations

var ReadOnlyDirective = func(ctx context.Context, _ any, next graphql.Resolver) (any, error) {

	if !graphql.HasOperationContext(ctx) {

		return next(ctx)
	}

	if admin, err := rule.CheckIsSystemAdminWithContext(ctx); err == nil && admin {

		return next(ctx)
	}

	if checkFieldSet(ctx, noSkip) {
		return nil, ErrReadOnlyField
	}

	return next(ctx)
}

ReadOnlyDirective is the implementation for the readOnly directive that can be used to mark input fields as read only this will prevent the field from being used in create and update mutations

var ReadOnlyDirectiveAnnotation = entgql.Directives(
	NewReadOnlyDirective(),
)

ReadOnlyDirectiveAnnotation is an annotation that can be used to mark a field as read only