From 7053edae279ad03eed5f8180d0983039365afebb Mon Sep 17 00:00:00 2001
From: Johnny <johnnyjoygg@gmail.com>
Date: Sun, 11 Jan 2026 22:35:12 +0800
Subject: [PATCH] fix: allow guests to view public memo comments

Add ListMemoComments to public endpoints whitelist so unauthenticated
users can see public comments. The service layer already filters
comments by visibility (only PUBLIC for guests).

Fixes #5471
---
 server/router/api/v1/acl_config.go | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/server/router/api/v1/acl_config.go b/server/router/api/v1/acl_config.go
index 4045a7f5c..9958900b2 100644
--- a/server/router/api/v1/acl_config.go
+++ b/server/router/api/v1/acl_config.go
@@ -29,8 +29,9 @@ var PublicMethods = map[string]struct{}{
 	"/memos.api.v1.IdentityProviderService/ListIdentityProviders": {},
 
 	// Memo Service - public memos (visibility filtering done in service layer)
-	"/memos.api.v1.MemoService/GetMemo":   {},
-	"/memos.api.v1.MemoService/ListMemos": {},
+	"/memos.api.v1.MemoService/GetMemo":          {},
+	"/memos.api.v1.MemoService/ListMemos":        {},
+	"/memos.api.v1.MemoService/ListMemoComments": {},
 }
 
 // IsPublicMethod checks if a procedure path is public (no authentication required).