From da76b4636e22753a16d651db2a39db21586d038e Mon Sep 17 00:00:00 2001 From: Agent Zero Date: Wed, 29 Jul 2026 08:05:56 +0200 Subject: [PATCH] =?UTF-8?q?fix:=20require=5Fpermission=20decorator=20?= =?UTF-8?q?=E2=86=92=20Depends()=20in=20entity=5Fpermissions.py?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- app/routes/entity_permissions.py | 12 ++++-------- 1 file changed, 4 insertions(+), 8 deletions(-) diff --git a/app/routes/entity_permissions.py b/app/routes/entity_permissions.py index 8745a2e..413f9bb 100644 --- a/app/routes/entity_permissions.py +++ b/app/routes/entity_permissions.py @@ -151,10 +151,9 @@ async def get_entity_access( @router.get("/all") -@require_permission("settings:read") async def list_all_permissions( db: AsyncSession = Depends(get_db), - current_user: dict = Depends(get_current_user), + current_user: dict = Depends(require_permission("settings:read")), ): """List ALL permission entries for the current tenant.""" tenant_id = uuid.UUID(current_user["tenant_id"]) @@ -187,11 +186,10 @@ async def list_entity_registry( @router.post("/bulk", status_code=status.HTTP_201_CREATED) -@require_permission("settings:write") async def bulk_share_permissions( body: dict, db: AsyncSession = Depends(get_db), - current_user: dict = Depends(get_current_user), + current_user: dict = Depends(require_permission("settings:write")), ): """Bulk share multiple entities with a principal.""" tenant_id = uuid.UUID(current_user["tenant_id"]) @@ -213,11 +211,10 @@ async def bulk_share_permissions( @router.post("/bulk/unshare", status_code=status.HTTP_200_OK) -@require_permission("settings:write") async def bulk_unshare_permissions( body: dict, db: AsyncSession = Depends(get_db), - current_user: dict = Depends(get_current_user), + current_user: dict = Depends(require_permission("settings:write")), ): """Bulk remove permissions for a principal from multiple entities.""" tenant_id = uuid.UUID(current_user["tenant_id"]) @@ -236,10 +233,9 @@ async def bulk_unshare_permissions( @router.get("/analytics") -@require_permission("settings:read") async def get_permission_analytics( db: AsyncSession = Depends(get_db), - current_user: dict = Depends(get_current_user), + current_user: dict = Depends(require_permission("settings:read")), ): """Get permission analytics for the current tenant.""" tenant_id = uuid.UUID(current_user["tenant_id"])