feat: phase 3 - field-level permissions with plugin field definitions, service-layer filtering, 20 core field definitions

2026-07-15 23:02:30 +02:00
parent 08fd3ab72c
commit beaca24480
9 changed files with 106 additions and 4 deletions
@@ -37,6 +37,7 @@ async def list_companies(
        industry=industry,
        sort_by=sort_by,
        sort_order=sort_order,
+        resolved_perms=current_user,
    )
    return result

@@ -159,7 +160,7 @@ async def get_company(
            400, detail={"detail": "Invalid company_id", "code": "invalid_id"}
        ) from None

-    data = await company_service.get_company_detail(db, tenant_id, cid)
+    data = await company_service.get_company_detail(db, tenant_id, cid, resolved_perms=current_user)
    if data is None:
        raise HTTPException(404, detail={"detail": "Company not found", "code": "not_found"})
    return data