test: 102 comprehensive RBAC tests + fix: filter soft-deleted groups in permission resolver

2026-07-16 01:58:22 +02:00
parent a4560344c9
commit 467f73113c
2 changed files with 1880 additions and 1 deletions
@@ -179,7 +179,10 @@ async def resolve_permissions(

    if user_groups:
        group_ids = [ug.group_id for ug in user_groups]
-        groups_q = select(Group).where(Group.id.in_(group_ids))
+        groups_q = select(Group).where(
+            Group.id.in_(group_ids),
+            Group.deleted_at.is_(None),
+        )
        groups_result = await db.execute(groups_q)
        groups = groups_result.scalars().all()