sprint1: entity_permissions table + owned_mixin + universal permission service + API + migrations 0049+0050

2026-07-29 01:28:13 +02:00
parent cc021cda99
commit 5afa1fa927
24 changed files with 1384 additions and 1 deletions
@@ -0,0 +1,45 @@
+"""Schemas for universal entity permissions."""
+
+from __future__ import annotations
+
+from datetime import datetime
+
+from pydantic import BaseModel, Field
+
+
+class EntityPermissionCreate(BaseModel):
+    principal_type: str = Field(..., pattern="^(user|group|role|guest)$")
+    principal_id: str
+    permission_level: str = Field("read", pattern="^(none|read|write|admin|delete)$")
+    expires_at: datetime | None = None
+
+
+class EntityPermissionUpdate(BaseModel):
+    permission_level: str = Field(..., pattern="^(none|read|write|admin|delete)$")
+    expires_at: datetime | None = None
+
+
+class EntityPermissionResponse(BaseModel):
+    id: str
+    entity_type: str
+    entity_id: str
+    principal_type: str
+    principal_id: str
+    principal_name: str | None = None
+    permission_level: str
+    expires_at: str | None = None
+    created_by: str | None = None
+    created_at: str | None = None
+
+
+class EntityPermissionListResponse(BaseModel):
+    items: list[EntityPermissionResponse]
+    total: int
+
+
+class EntityAccessResponse(BaseModel):
+    entity_type: str
+    entity_id: str
+    access_level: str
+    is_owner: bool
+    is_shared: bool