leocrm/app/plugins/builtins/permissions/plugin.py

"""Permissions plugin — file/folder permissions, share links, public access."""

from __future__ import annotations

from app.plugins.base import BasePlugin
from app.plugins.manifest import FrontendSettingsPage, PluginManifest, PluginRouteDef


class PermissionsPlugin(BasePlugin):
    """Permissions plugin for managing file/folder access and public share links."""

    manifest = PluginManifest(
        name="permissions",
        version="1.0.0",
        display_name="Permissions",
        description="File/folder permissions, share links with password+expiry, public access.",
        dependencies=[],
        routes=[
            PluginRouteDef(
                path="/api/v1/permissions",
                module="app.plugins.builtins.permissions.routes",
                router_attr="router",
            ),
            PluginRouteDef(
                path="/api/v1/public/share",
                module="app.plugins.builtins.permissions.public_routes",
                router_attr="router",
                is_public=True,
            ),
        ],
        events=[],
        migrations=["0001_initial.sql"],
        # Audit P1 (permission catalog): routes and settings pages use
        # permissions:admin / permissions:read — they must be grantable.
        permissions=[
            "permissions:read",
            "permissions:admin",
        ],
        is_core=True,
        settings_pages=[
            FrontendSettingsPage(path='roles', label_key='settings.roles', label='Roles', component='@/pages/SettingsRoles', icon='Shield', order=10, permission='permissions:read'),
            FrontendSettingsPage(path='users', label_key='settings.users', label='Users', component='@/pages/SettingsUsers', icon='Users', order=11, permission='permissions:read'),
            FrontendSettingsPage(path='groups', label_key='settings.groups', label='Groups', component='@/pages/SettingsGroups', icon='UsersRound', order=12, permission='permissions:read'),
        ],
        author="LeoCRM Team",
        min_app_version="1.0.0",
        contract_version="1.0.0",
    )

    def get_entity_models(self) -> dict[str, type]:
        from app.plugins.builtins.permissions.models import ShareLink
        return {"share_link": ShareLink}

    async def on_deactivate(
        self, db, service_container, event_bus
    ) -> None:
        """Deactivate plugin: unregister contract and event listeners."""
        # Contract abmelden
        from app.plugins.builtins.contracts import get_contract_registry
        get_contract_registry().unregister(self.manifest.name)
        await super().on_deactivate(db, service_container, event_bus)