Apply permissions system to comments

[andreslucena]

Ref: OM23 / DECOM-27

Is your feature request related to a problem? Please describe.

As a participatory space administrator, I would like to be able to define who is allowed to leave a comment in a given component.

Describe the solution you'd like

To have a Comment action in the components permissions.

Describe alternatives you've considered

To have another way of configuring permissions, but that'd be against consistency.

Initially, we thought about configuring these permissions at the space level, but we don't have general Permissions for a given space and that could be too much of a hassle. As @verarojman said:

Note: Only works for comments linked to components, not participatory spaces (meaning that this does not apply to questions in consultations as a question is treated as a participatory space). This is because the whole system of dealing with permissions in modals and other checks requires a component (current_component) available. This should be refactored in another PR. See note in

decidim/decidim-comments/app/cells/decidim/comments/comment_cell.rb

Lines 161 to 163 in ec48813

	# actions are linked to objects belonging to a component
	# In consultations, a question belong to a participatory_space but it has comments
	# To apply :comment permission, the modal authorizer should be refactored to allow participatory spaces-level comments

Additional context

There's a first draft iteration of this in #6916 that we could start from. Thanks @verarojman 🚀 🚀

Does this issue could impact users' private data?

No, it's about adding permissions to comments.

Acceptance criteria

• Given that I'm a space administrator
  When I configure that only the "Organization's census" can comment in a proposal component
  Then only participants verified with the "Organization's census" can comment in this proposal
  And
  Then other participants see an error "You don't have permissions to comment"

[entantoencuanto]

I'm not sure what I have to do with the 2 commentable models not related with components (Decidim::Initiative and Decidim::Consultations::Question) Should I adapt the permissions system for these models also?

cc/ @decidim/product

[furilo]

Ping @decidim/product

[carolromero]

@entantoencuanto yes, they should be adapted as well. Thank you!

[entantoencuanto]

Hi, @decidim/product, this issue is ready for QA testing. There is a previous bug preventing accessing to permissions on budgets projects, there is a problem with the routes generation, but for the rest of resources the issue can be reviewed.