Feature: Add option to share post with specific people only

[Dream-World-Coder]

Right now, a post can either be public or private. Add a feature to share it with specific people that the user selects.

[wangwangbobo]

Great idea! This would add more granular privacy controls.

A few implementation thoughts:

• Could use a array field in the Post model storing user IDs
• UI would need a user selector (maybe with search/autocomplete)
• Need to consider: can shared users re-share? Can they edit?

This is a nice middle ground between fully public and fully private. 👍

[Dream-World-Coder]

yes, using an array will be completely fine, as it will be allowed to share with max 25 people, for more than that you have to make it public. This way document size will stay ideal.

can shared users re-share? Can they edit?

no they cannot, only viewing rights.

Do you want to work on this issue @wangwangbobo ? Then I'll assign it to you.
But again, it is gonna be a bit harder and requires work in both frontend and backend. So if u are interested share me your proposed idea and flow first. I'll guide you through the codebase.

[wangwangbobo]

Thanks for the detailed explanation! 🙏

Yes, I'm interested in working on this! Here's my proposed approach:

Backend (Post Model):

• Add sharedWith: string[] field (max 25 user IDs)
• Add shareType: 'public' | 'private' | 'specific' enum
• Update query filters to check: if shareType === 'specific', verify current user ID is in sharedWith array

Backend (API):

• Update POST/PUT /posts to accept sharedWith array
• Add validation: max 25 IDs, all must be valid user IDs
• Update GET /posts/:id to check permission before returning

Frontend:

• Add user selector component in post editor (search/autocomplete by username)
• Show selected users as removable chips/tags
• Add visual indicator when post is shared with specific people
• Respect the 25 user limit in UI

Flow:

1. User creates/edits post → selects "Share with specific people"
2. User selector opens → search and add users (max 25)
3. Save post → backend validates and stores sharedWith array
4. When others view → backend checks if viewer ID is in sharedWith
5. Shared users get view-only access (no edit, no re-share)

Does this sound right? Happy to adjust based on your guidance! 🦞

[Dream-World-Coder]

Seems Good,, I'll review it shortly tomorrow. I'm a bit busy today unfortunately.

[wangwangbobo]

No worries at all! Take your time — I'll be here whenever you're ready to review. 👍

Just ping me when you have a moment and I'll get started on the implementation. 🦞

[Dream-World-Coder]

Sorry for the delay, I've some sudden viva exams lined up. So, I'll explain this to you this weekend. Thanks.

[wangwangbobo]

No worries at all! Good luck with your viva exams! 🍀

Take all the time you need — I'll be here whenever you're ready this weekend. Looking forward to your guidance on the implementation!

Focus on your exams first, the code can wait. 👍