GeneralManager 0.68.1__tar.gz → 0.68.2__tar.gz

{generalmanager-0.68.1/src/GeneralManager.egg-info → generalmanager-0.68.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: GeneralManager
-Version: 0.68.1
+Version: 0.68.2
 Summary: Modular Django-based data management framework with ORM, GraphQL, fine-grained permissions, rule validation, calculations and caching.
 Author-email: Tim Kleindick <tkleindick@yahoo.de>
 License: MIT License

{generalmanager-0.68.1 → generalmanager-0.68.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "GeneralManager"
-version = "0.68.1"
+version = "0.68.2"
 description = "Modular Django-based data management framework with ORM, GraphQL, fine-grained permissions, rule validation, calculations and caching."
 readme = "README.md"
 authors = [{ name = "Tim Kleindick", email = "tkleindick@yahoo.de" }]

{generalmanager-0.68.1 → generalmanager-0.68.2/src/GeneralManager.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: GeneralManager
-Version: 0.68.1
+Version: 0.68.2
 Summary: Modular Django-based data management framework with ORM, GraphQL, fine-grained permissions, rule validation, calculations and caching.
 Author-email: Tim Kleindick <tkleindick@yahoo.de>
 License: MIT License

{generalmanager-0.68.1 → generalmanager-0.68.2}/src/general_manager/api/graphql.py

@@ -95,7 +95,7 @@ from general_manager.api.graphql_resolvers import (
     apply_pagination as _apply_pagination_fn,
     apply_grouping as _apply_grouping_fn,
     check_read_permission as _check_read_permission_fn,
-    can_read_instance as _can_read_instance_fn,
+    can_read_instance_for_user as _can_read_instance_for_user_fn,
     create_measurement_resolver as _create_measurement_resolver_fn,
     create_normal_resolver as _create_normal_resolver_fn,
     create_list_resolver as _create_list_resolver_fn,
@@ -1432,6 +1432,29 @@ class GraphQL:
             property_names=property_names,
         )
 
+    @classmethod
+    def _instantiate_readable_manager(
+        cls,
+        manager_class: type[GeneralManager],
+        identification: GraphQLIdentification,
+        user: object,
+        action: str,
+    ) -> GeneralManager | None:
+        try:
+            item, _ = cls._instantiate_manager(manager_class, identification)
+        except SUBSCRIPTION_HYDRATION_ERRORS:
+            return None
+        try:
+            readable = _can_read_instance_for_user_fn(item, user)
+        except Exception as exc:  # noqa: BLE001, RUF100
+            logger.error(  # noqa: TRY400
+                "class subscription permission check failed",
+                context={"manager": manager_class.__name__, "action": action},
+                exc_info=exc,
+            )
+            raise
+        return item if readable else None
+
     @classmethod
     def _add_subscription_field(
         cls,
@@ -1623,6 +1646,7 @@ class GraphQL:
                 cls._class_group_name(generalManagerClass),
                 cls._refresh_group_name(generalManagerClass),
             }
+            subscription_user = info.context.user
 
             async def event_stream() -> AsyncIterator[SubscriptionEvent]:
                 channel_name = cast(str, await channel_layer.new_channel())
@@ -1656,15 +1680,14 @@ class GraphQL:
                         if not isinstance(identification, dict):
                             continue
                         identification_copy = deepcopy(identification)
-                        try:
-                            item, _ = await asyncio.to_thread(
-                                cls._instantiate_manager,
-                                generalManagerClass,
-                                identification_copy,
-                            )
-                        except SUBSCRIPTION_HYDRATION_ERRORS:
-                            continue
-                        if not _can_read_instance_fn(item, info):
+                        item = await asyncio.to_thread(
+                            cls._instantiate_readable_manager,
+                            generalManagerClass,
+                            identification_copy,
+                            subscription_user,
+                            action,
+                        )
+                        if item is None:
                             continue
                         clear_capability_context(info)
                         yield SubscriptionEvent(item=item, action=action)

{generalmanager-0.68.1 → generalmanager-0.68.2}/src/general_manager/api/graphql_resolvers.py

@@ -564,12 +564,12 @@ def check_read_permission(
     return True
 
 
-def can_read_instance(
+def can_read_instance_for_user(
     instance: GeneralManager,
-    info: GraphQLResolveInfo,
+    user: object,
 ) -> bool:
     """
-    Return whether the request user may see that *instance* exists.
+    Return whether *user* may see that *instance* exists.
 
     When the manager defines a Permission class, this calls
     ``Permission(instance, user).can_read_instance()``. Managers without a
@@ -577,10 +577,18 @@ def can_read_instance(
     """
     PermissionClass: type[BasePermission] | None = getattr(instance, "Permission", None)
     if PermissionClass:
-        return PermissionClass(instance, info.context.user).can_read_instance()
+        return PermissionClass(instance, user).can_read_instance()
     return True
 
 
+def can_read_instance(
+    instance: GeneralManager,
+    info: GraphQLResolveInfo,
+) -> bool:
+    """Return whether the request user may see that *instance* exists."""
+    return can_read_instance_for_user(instance, info.context.user)
+
+
 # ---------------------------------------------------------------------------
 # Resolver factories
 # ---------------------------------------------------------------------------