feat: phase 3 - field-level permissions with plugin field definitions, service-layer filtering, 20 core field definitions

2026-07-15 23:02:30 +02:00
parent 08fd3ab72c
commit beaca24480
9 changed files with 106 additions and 4 deletions
@@ -43,6 +43,7 @@ async def list_contacts(
        search=search,
        sort_by=sort_by,
        sort_order=sort_order,
+        resolved_perms=current_user,
    )
    return result

@@ -173,7 +174,7 @@ async def get_contact(
            400, detail={"detail": "Invalid contact_id", "code": "invalid_id"}
        ) from None

-    data = await contact_service.get_contact_detail(db, tenant_id, cid)
+    data = await contact_service.get_contact_detail(db, tenant_id, cid, resolved_perms=current_user)
    if data is None:
        raise HTTPException(404, detail={"detail": "Contact not found", "code": "not_found"})
    return data