feat: enforce friend add and curfew policies

server/store/store.go

@@ -173,6 +173,7 @@ type AdminInternalConfigProvider interface {
 	ModerationProvider() (*types.ModerationProviderConfig, error)
 	ModerationPolicy(tenantCode string) (*types.ModerationPolicy, error)
 	SensitiveWords(tenantCode string) (*types.SensitiveWordSet, error)
+	SecurityPolicy(tenantCode string) (*types.SecurityPolicy, error)
 }
 
 var adminInternalConfigProvider AdminInternalConfigProvider
@@ -185,6 +186,7 @@ type ModerationConfigPersistenceInterface interface {
 	Provider() (*types.ModerationProviderConfig, error)
 	Policy(tenantCode string) (*types.ModerationPolicy, error)
 	Words(tenantCode string) (*types.SensitiveWordSet, error)
+	SecurityPolicy(tenantCode string) (*types.SecurityPolicy, error)
 }
 
 type moderationConfigMapper struct{}
@@ -235,6 +237,21 @@ func (moderationConfigMapper) Words(tenantCode string) (*types.SensitiveWordSet,
 	return value, err
 }
 
+func (moderationConfigMapper) SecurityPolicy(tenantCode string) (*types.SecurityPolicy, error) {
+	tenantCode = strings.TrimSpace(tenantCode)
+	if value, ok := securityPolicyCache.get(tenantCode); ok {
+		return value, nil
+	}
+	if adminInternalConfigProvider == nil {
+		return nil, types.ErrUnsupported
+	}
+	value, err := adminInternalConfigProvider.SecurityPolicy(tenantCode)
+	if err == nil && value != nil {
+		securityPolicyCache.set(tenantCode, value)
+	}
+	return value, err
+}
+
 // RegistrationConfigPersistenceInterface exposes global registration policy.
 type RegistrationConfigPersistenceInterface interface {
 	SMSEnabled() (bool, error)