From b0220292a706c8256c0c61c6a8d506f37cd97ff8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Matej=20Ba=C4=8Do?= <matejbaco2000@gmail.com>
Date: Tue, 5 May 2026 12:58:06 +0200
Subject: [PATCH] Rename policies to prevent double scope usease

---
 app/config/roles.php                               |  4 ++--
 app/config/scopes/project.php                      | 14 +++++++++++++-
 .../Modules/Project/Http/Project/Policies/Get.php  |  2 +-
 .../Project/Http/Project/Policies/XList.php        |  2 +-
 src/Appwrite/Platform/Workers/Migrations.php       |  4 ++--
 tests/e2e/Scopes/ProjectCustom.php                 |  4 ++--
 6 files changed, 21 insertions(+), 9 deletions(-)

diff --git a/app/config/roles.php b/app/config/roles.php
index 8fba27e503..04175ac1d5 100644
--- a/app/config/roles.php
+++ b/app/config/roles.php
@@ -59,8 +59,8 @@ $admins = [
     'oauth2.write',
     'mocks.read',
     'mocks.write',
-    'policies.read',
-    'policies.write',
+    'project.policies.read',
+    'project.policies.write',
     'templates.read',
     'templates.write',
     'projects.write',
diff --git a/app/config/scopes/project.php b/app/config/scopes/project.php
index a048920de9..6e019e7b93 100644
--- a/app/config/scopes/project.php
+++ b/app/config/scopes/project.php
@@ -44,11 +44,23 @@ return [
         "category" => "Project",
     ],
     "policies.read" => [
+        "description" =>
+            "Access to read project\'s policies. Replaced by \'project.policies.read\' for more granular control.",
+        "category" => "Project",
+        'deprecated' => true,
+    ],
+    "policies.write" => [
+        "description" =>
+            "Access to update project\'s policies. Replaces by \'project.policies.read\' for more granular control.",
+        "category" => "Project",
+        'deprecated' => true,
+    ],
+    "project.policies.read" => [
         "description" =>
             "Access to read project\'s policies",
         "category" => "Project",
     ],
-    "policies.write" => [
+    "project.policies.write" => [
         "description" =>
             "Access to update project\'s policies",
         "category" => "Project",
diff --git a/src/Appwrite/Platform/Modules/Project/Http/Project/Policies/Get.php b/src/Appwrite/Platform/Modules/Project/Http/Project/Policies/Get.php
index 3ffe30f1fa..21342332d9 100644
--- a/src/Appwrite/Platform/Modules/Project/Http/Project/Policies/Get.php
+++ b/src/Appwrite/Platform/Modules/Project/Http/Project/Policies/Get.php
@@ -27,7 +27,7 @@ class Get extends Action
             ->setHttpPath('/v1/project/policies/:policyId')
             ->desc('Get project policy')
             ->groups(['api', 'project'])
-            ->label('scope', 'policies.read')
+            ->label('scope', ['policies.read', 'project.policies.read'])
             ->label('sdk', new Method(
                 namespace: 'project',
                 group: 'policies',
diff --git a/src/Appwrite/Platform/Modules/Project/Http/Project/Policies/XList.php b/src/Appwrite/Platform/Modules/Project/Http/Project/Policies/XList.php
index 893b28fef2..3020fa79dd 100644
--- a/src/Appwrite/Platform/Modules/Project/Http/Project/Policies/XList.php
+++ b/src/Appwrite/Platform/Modules/Project/Http/Project/Policies/XList.php
@@ -33,7 +33,7 @@ class XList extends Action
             ->setHttpPath('/v1/project/policies')
             ->desc('List project policies')
             ->groups(['api', 'project'])
-            ->label('scope', 'policies.read')
+            ->label('scope', ['policies.read', 'project.policies.read'])
             ->label('sdk', new Method(
                 namespace: 'project',
                 group: 'policies',
diff --git a/src/Appwrite/Platform/Workers/Migrations.php b/src/Appwrite/Platform/Workers/Migrations.php
index c25a83c231..3fd86baea9 100644
--- a/src/Appwrite/Platform/Workers/Migrations.php
+++ b/src/Appwrite/Platform/Workers/Migrations.php
@@ -380,8 +380,8 @@ class Migrations extends Action
             'oauth2.write',
             'mocks.read',
             'mocks.write',
-            'policies.read',
-            'policies.write',
+            'project.policies.read',
+            'project.policies.write',
             'templates.read',
             'templates.write',
         ];
diff --git a/tests/e2e/Scopes/ProjectCustom.php b/tests/e2e/Scopes/ProjectCustom.php
index 3071ddfa2a..99219ebf99 100644
--- a/tests/e2e/Scopes/ProjectCustom.php
+++ b/tests/e2e/Scopes/ProjectCustom.php
@@ -173,8 +173,8 @@ trait ProjectCustom
                     'oauth2.write',
                     'mocks.read',
                     'mocks.write',
-                    'policies.read',
-                    'policies.write',
+                    'project.policies.read',
+                    'project.policies.write',
                     'templates.read',
                     'templates.write',
                 ],