forest_admin_agent 1.44.3 → 1.44.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e6e42775611ac580273132cc25bbeb548d6f07e68ca97d6afe2dd29b8e7b5775
-  data.tar.gz: 8ad17bac9407f295c8a1f1bbe36e4cc1231d0a0e0bbf8711a296d180805800c8
+  metadata.gz: 82246fa1590f7e734cedc309c456c3dca128ea82b325c3842ad6fa291a7051cf
+  data.tar.gz: 7943c129e8985805327acb63b8f49448ef6fa0a323c501cb420c5030eed514be
 SHA512:
-  metadata.gz: 07c2aea4e7244ed5b06106aea85a9fccf53cc47a153d0c4de9b270b2b1c5798375184058e2dd54cbf24deda31e89a2098649ac36069302c2d9b6714b1e07b809
-  data.tar.gz: e2c0e5d77378def4cf54253f5912307ee99b748ad736f45077a54cdf984c3d800a5af6a6dfea95ce07362890cf46cd1f04b9d5194a970dc7205ff472a002077e
+  metadata.gz: fa96c5af1acbbaca154093885dcc4336c7e1b699de8854200655e9f10ce62564e09232bdffc71d468f08a61d7169dcb1ad08b2389ae518f32cf1432e716ecfee
+  data.tar.gz: 83bfa0a61d14812a660dafdfe2fc8ae8b07856dd7fb58caa6da56215d36e458a69efbc7eaf707bf1fc559416f5decb649b72301673bfbdabea00b4f878a806e7

data/lib/forest_admin_agent/services/permissions.rb

@@ -9,6 +9,10 @@ module ForestAdminAgent
       include ForestAdminDatasourceToolkit::Exceptions
       include ForestAdminDatasourceToolkit::Components::Query::ConditionTree
 
+      USERS_RELOAD_INTERVAL_IN_SECONDS = 60
+
+      @users_reload_mutex = Mutex.new
+
       attr_reader :caller, :forest_api, :cache
 
       def initialize(caller)
@@ -28,13 +32,26 @@ module ForestAdminAgent
           Facades::Container.config_from_cache[:permission_expiration]
         )
 
-        cache.clear if id_cache.nil?
+        if id_cache.nil?
+          cache.clear
+          @users_reload_mutex.synchronize { @users_reloaded_at = nil }
+        end
 
         cache.delete(id_cache) unless cache.get(id_cache).nil?
 
         ForestAdminAgent::Facades::Container.logger.log('Info', "Invalidating #{id_cache} cache..")
       end
 
+      def self.users_reload_allowed?
+        @users_reload_mutex.synchronize do
+          now = Process.clock_gettime(Process::CLOCK_MONOTONIC)
+          return false if @users_reloaded_at && now - @users_reloaded_at < USERS_RELOAD_INTERVAL_IN_SECONDS
+
+          @users_reloaded_at = now
+          true
+        end
+      end
+
       def can?(action, collection, allow_fetch: false)
         return true unless permission_system?
 
@@ -45,6 +62,7 @@ module ForestAdminAgent
 
         unless is_allowed
           collections_data = get_collections_permissions_data(force_fetch: true)
+          user_data = get_user_data(caller.id, reload: true)
           is_allowed = permission_allowed?(collections_data, collection, action, user_data)
         end
 
@@ -246,7 +264,22 @@ module ForestAdminAgent
         permissions[:segments][collection.name.to_sym]
       end
 
-      def get_user_data(user_id)
+      def get_user_data(user_id, reload: false)
+        users = cached_users
+        return users[user_id.to_s] if users.key?(user_id.to_s) && !reload
+
+        reload_users[user_id.to_s]
+      end
+
+      def get_team(rendering_id)
+        permissions = get_rendering_data(rendering_id)
+
+        permissions[:team]
+      end
+
+      private
+
+      def cached_users
         cache.get_or_set('forest.users') do
           response = fetch('/liana/v4/permissions/users')
           users = {}
@@ -258,17 +291,16 @@ module ForestAdminAgent
           ForestAdminAgent::Facades::Container.logger.log('Debug', 'Refreshing user permissions cache')
 
           users
-        end[user_id.to_s]
+        end
       end
 
-      def get_team(rendering_id)
-        permissions = get_rendering_data(rendering_id)
+      def reload_users
+        return cached_users unless self.class.users_reload_allowed?
 
-        permissions[:team]
+        self.class.invalidate_cache('forest.users')
+        cached_users
       end
 
-      private
-
       # An empty list of leaves resolves to no collection at all — a polymorphic relation declaring
       # no `foreign_collections`. `[].all?` would allow it unconditionally, which is the one answer
       # this guard must never give by default, so it counts as denied.
@@ -293,6 +325,7 @@ module ForestAdminAgent
 
         @read_permissions_refetched = true
         refetched = get_collections_permissions_data(force_fetch: true)
+        user_data = get_user_data(caller.id, reload: true)
 
         names.to_h { |name| [name, read_allowed?(refetched, name, user_data)] }
       end

data/lib/forest_admin_agent/utils/schema/schema_emitter.rb

@@ -6,7 +6,7 @@ module ForestAdminAgent
     module Schema
       class SchemaEmitter
         LIANA_NAME = "agent-ruby"
-        LIANA_VERSION = "1.44.3"
+        LIANA_VERSION = "1.44.4"
 
         def self.generate(datasource)
           datasource.collections

data/lib/forest_admin_agent/version.rb

@@ -1,3 +1,3 @@
 module ForestAdminAgent
-  VERSION = "1.44.3"
+  VERSION = "1.44.4"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: forest_admin_agent
 version: !ruby/object:Gem::Version
-  version: 1.44.3
+  version: 1.44.4
 platform: ruby
 authors:
 - Matthieu
@@ -9,7 +9,7 @@ authors:
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2026-09-29 00:00:00.000000000 Z
+date: 2026-10-01 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport