sr2/cloud-api
6
0
Fork 1
Code Issues 8 Pull requests 2 Projects Releases Packages Wiki Activity Actions

fix: permission search changed to post

Browse source 
Get requests cannot have bodies.
This commit is contained in:
Chris Milne 2026-06-02 15:13:00 +01:00
parent 511480dffe
commit 5d1606aa9d
2 changed files with 11 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

16
src/iam/router.py
View file

@ -190,18 +190,18 @@ async def delete_permission(db: db_dependency, su: super_admin_dependency, perm_
db.commit()
@router.get("/permissions/search", response_model=IAMGetPermissionsSearchResponse)
async def get_permissions(db: db_dependency, org_model: org_model_root_claim_body_dependency, search: IAMGetPermissionsSearchRequest):
@router.post("/permissions/search", response_model=IAMGetPermissionsSearchResponse)
async def get_permissions(db: db_dependency, org_model: org_model_root_claim_body_dependency, request_model: IAMGetPermissionsSearchRequest):
permission_query = db.query(Perm)
if search.service_id is not None:
permission_query = permission_query.filter(Perm.service_id == search.service_id)
if request_model.service_id is not None:
permission_query = permission_query.filter(Perm.service_id == request_model.service_id)
if search.resource is not None:
permission_query = permission_query.filter(Perm.resource == search.resource)
if request_model.resource is not None:
permission_query = permission_query.filter(Perm.resource == request_model.resource)
if search.action is not None:
permission_query = permission_query.filter(Perm.action == search. action)
if request_model.action is not None:
permission_query = permission_query.filter(Perm.action == request_model. action)
permission_models = permission_query.all()

6
src/iam/schemas.py
View file

@ -17,7 +17,7 @@ from user.schemas import UserIDMixin
class UserSchema(CustomBaseModel):
model_config = ConfigDict(from_attributes=True, extra="ignore")
id: int
first_name: str
last_name: str
@ -94,8 +94,8 @@ class IAMPostPermissionResponse(CustomBaseModel):
class IAMDeletePermissionRequest(PermIDMixin):
pass
class IAMGetPermissionsSearchRequest(CustomBaseModel):
service_id: Optional[int] = None
class IAMGetPermissionsSearchRequest(OrgIDMixin):
service_id: Optional[int] = Field(gt=0)
resource: Optional[str] = None
action: Optional[str] = None