Agent Zero
abbe7a18fc
- P0: hooks.py 3-tuple fix, trigger_dispatcher Contract, contacts/plugin unregister_actions_by_owner - P0: 5 test files — check_permission mocks removed, hardcoded DB credential → env var - P1: attachment_service DmsFile via Contract helper, restore_registry/history_hooks dedup - P1: mail/plugin restore unregister, mcp_client datetime.now(UTC), saved_views/filters patterns - P1: ProtectedRoute fail-closed, 13 test assertion fixes (bcrypt, DB-URLs, SECRET_KEYs) - P2: deprecated notifications → post_system_message (3 files), forgejo Base, report_generator lazy import - P2: webhooks permissions, deps.py/roles.py plugin perms removed, import_export default - P2: address/tags/entity_links patterns removed, worker.py Contract-Umgehungen fixed - P2: 28 frontend TODOs (hardcoded constants, deprecated notification API) - P3: dead code, duplicates, deprecated imports, private attr, __import__ inline - P3: 8 frontend TODOs (LucideIcons, inline styles, XSS, i18n) - ruff: 838 → 0 (612 auto-fix + 246 manual + 27 F821 regression fix) - F821: 30 → 0 (AutomationDefinition, DmsFile, user_id, Path, Any, String) - Contract-Umgehungen: 2 neue gefunden (worker.py:169, worker.py:280) und gefixt
44 lines
1.2 KiB
Python
44 lines
1.2 KiB
Python
"""Schemas for ABAC entity policies."""
|
|
|
|
from __future__ import annotations
|
|
|
|
from typing import Any
|
|
|
|
from pydantic import BaseModel, Field
|
|
|
|
|
|
class PolicyCreate(BaseModel):
|
|
name: str = Field(..., min_length=1, max_length=200)
|
|
entity_type: str = Field(..., min_length=1, max_length=50)
|
|
principal_type: str = Field(..., pattern="^(user|group|role)$")
|
|
principal_id: str
|
|
effect: str = Field("allow", pattern="^(allow|deny)$")
|
|
conditions: dict[str, Any] | None = None
|
|
priority: int = 0
|
|
|
|
|
|
class PolicyUpdate(BaseModel):
|
|
name: str | None = Field(None, min_length=1, max_length=200)
|
|
entity_type: str | None = Field(None, min_length=1, max_length=50)
|
|
principal_type: str | None = Field(None, pattern="^(user|group|role)$")
|
|
principal_id: str | None = None
|
|
effect: str | None = Field(None, pattern="^(allow|deny)$")
|
|
conditions: dict[str, Any] | None = None
|
|
priority: int | None = None
|
|
enabled: bool | None = None
|
|
|
|
|
|
class PolicyResponse(BaseModel):
|
|
id: str
|
|
name: str
|
|
entity_type: str
|
|
principal_type: str
|
|
principal_id: str
|
|
effect: str
|
|
conditions: dict[str, Any] | None = None
|
|
priority: int
|
|
tenant_id: str
|
|
enabled: bool
|
|
created_at: str | None = None
|
|
updated_at: str | None = None
|