refactored resolvers, cleaned

graph/resolvers/comment.js

@@ -1,4 +1,6 @@
-const { decorateWithTags } = require('./util');
+const { property } = require('lodash');
+const { SEARCH_ACTIONS } = require('../../perms/constants');
+const { decorateWithTags, decorateWithPermissionCheck } = require('./util');
 
 const Comment = {
   hasParent({ parent_id }) {
@@ -29,15 +31,8 @@ const Comment = {
 
     return Comments.getByQuery(query);
   },
-  replyCount({ reply_count }) {
-    // A simple remap from the underlying database model to the graph model.
-    return reply_count;
-  },
-  actions({ id }, _, { user, loaders: { Actions } }) {
-    if (!user || !user.can('SEARCH_ACTIONS')) {
-      return null;
-    }
-
+  replyCount: property('reply_count'),
+  actions({ id }, _, { loaders: { Actions } }) {
     return Actions.getByID.load(id);
   },
   action_summaries({ id, action_summaries }, _, { loaders: { Actions } }) {
@@ -65,4 +60,9 @@ const Comment = {
 // Decorate the Comment type resolver with a tags field.
 decorateWithTags(Comment);
 
+// Protect direct action access.
+decorateWithPermissionCheck(Comment, {
+  actions: [SEARCH_ACTIONS],
+});
+
 module.exports = Comment;