datasette-libfec 0.0.1a5__py3-none-any.whl → 0.0.1a6__py3-none-any.whl

datasette_libfec/__init__.py

@@ -1,5 +1,6 @@
 from pydantic import BaseModel
 from datasette import hookimpl
+from datasette.permissions import Action
 from pathlib import Path
 from textwrap import dedent
 from typing import Optional
@@ -9,7 +10,7 @@ import os
 # Import route modules to trigger route registration on the shared router
 # pylint: disable=unused-import
 from . import routes_rss, routes_export, routes_search, routes_exports, routes_pages
-from .router import router
+from .router import router, LIBFEC_ACCESS_NAME
 _ = routes_rss, routes_export, routes_search, routes_exports, routes_pages
 
 # https://vite.dev/guide/backend-integration.html
@@ -81,4 +82,15 @@ def extra_template_vars(datasette):
             return "\n".join(parts)
 
 
-    return {"datasette_libfec_vite_entry": datasette_libfec_vite_entry}
+    return {"datasette_libfec_vite_entry": datasette_libfec_vite_entry}
+
+@hookimpl
+def register_actions(datasette):
+    return [
+        Action(
+            name=LIBFEC_ACCESS_NAME,
+            description=(
+                "Can access libfec pages, features"
+            ),
+        ),
+    ]

datasette_libfec/router.py

@@ -1,3 +1,24 @@
+from datasette import Forbidden
 from datasette_plugin_router import Router
+from functools import wraps
 
 router = Router()
+
+LIBFEC_ACCESS_NAME = "datasette_libfec_access"
+
+# decorator for routes, to ensure the proper permissions are checked
+def check_permission():
+    def decorator(func):
+        @wraps(func)
+        async def wrapper(datasette, request, **kwargs):
+            result = await datasette.allowed(
+                action=LIBFEC_ACCESS_NAME, actor=request.actor
+            )
+            if not result:
+                raise Forbidden("Permission denied for datasette-libfec access")
+            return await func(datasette=datasette, request=request, **kwargs)
+
+        return wrapper
+
+    return decorator
+

datasette_libfec/routes_export.py

@@ -5,7 +5,7 @@ from typing import Optional, List
 import asyncio
 import uuid
 
-from .router import router
+from .router import router, check_permission
 from .state import libfec_client, export_state
 
 
@@ -24,7 +24,8 @@ class ExportResponse(BaseModel):
 
 
 @router.POST("/-/api/libfec/export/start", output=ExportResponse)
-async def export_start(datasette, params: Body[ExportStartParams]):
+@check_permission()
+async def export_start(datasette, request, params: Body[ExportStartParams]):
     if export_state.running:
         return Response.json({
             "status": "error",
@@ -72,7 +73,8 @@ async def export_start(datasette, params: Body[ExportStartParams]):
 
 
 @router.GET("/-/api/libfec/export/status", output=ExportResponse)
-async def export_status(datasette):
+@check_permission()
+async def export_status(datasette, request):
     response_data = {
         "status": "success",
         "message": "Export status",
@@ -101,7 +103,8 @@ async def export_status(datasette):
 
 
 @router.POST("/-/api/libfec/export/cancel", output=ExportResponse)
-async def export_cancel(datasette):
+@check_permission()
+async def export_cancel(datasette, request):
     if not export_state.running:
         return Response.json({
             "status": "error",

datasette_libfec/routes_exports.py

@@ -2,7 +2,7 @@ from pydantic import BaseModel
 from datasette import Response
 from typing import Optional, List, Literal
 
-from .router import router
+from .router import router, check_permission
 
 
 class ExportRecord(BaseModel):
@@ -44,7 +44,8 @@ class ApiExportsListResponse(BaseModel):
     message: Optional[str] = None
 
 @router.GET("/-/api/libfec/exports$", output=ApiExportsListResponse)
-async def list_exports(datasette):
+@check_permission()
+async def list_exports(datasette, request):
     """List all export operations from the metadata tables"""
     db = datasette.get_database()
 
@@ -103,7 +104,8 @@ async def list_exports(datasette):
 
 
 @router.GET("/-/api/libfec/exports/(?P<export_id>\\d+)")
-async def get_export_detail(datasette, export_id: str):
+@check_permission()
+async def get_export_detail(datasette, request, export_id: str):
     """Get detailed information about a specific export"""
     db = datasette.get_database()
     export_id_int = int(export_id)

datasette_libfec/routes_pages.py

@@ -3,7 +3,7 @@ Routes for contest, candidate, and committee pages.
 """
 from datasette import Response
 
-from .router import router
+from .router import router, check_permission
 from .page_data import (
     Candidate,
     CandidatePageData,
@@ -15,7 +15,8 @@ from .page_data import (
 
 
 @router.GET("/-/libfec$")
-async def libfec_page(datasette):
+@check_permission()
+async def libfec_page(datasette, request):
     db = datasette.get_database()
     page_data = IndexPageData(database_name=db.name)
     return Response.html(
@@ -31,7 +32,8 @@ async def libfec_page(datasette):
 
 
 @router.GET("/-/libfec/filing/(?P<filing_id>[^/]+)")
-async def filing_detail_page(datasette, filing_id: str):
+@check_permission()
+async def filing_detail_page(datasette, request, filing_id: str):
     db = datasette.get_database()
     filing = None
     form_data = None
@@ -98,6 +100,7 @@ async def filing_detail_page(datasette, filing_id: str):
 
 
 @router.GET("/-/libfec/contest$")
+@check_permission()
 async def contest_page(datasette, request):
     """
     Contest page showing candidates for a specific race.
@@ -179,6 +182,7 @@ async def contest_page(datasette, request):
 
 
 @router.GET("/-/libfec/candidate/(?P<candidate_id>[^/]+)$")
+@check_permission()
 async def candidate_page(datasette, request, candidate_id: str):
     """
     Candidate detail page.
@@ -258,6 +262,7 @@ async def candidate_page(datasette, request, candidate_id: str):
 
 
 @router.GET("/-/libfec/committee/(?P<committee_id>[^/]+)$")
+@check_permission()
 async def committee_page(datasette, request, committee_id: str):
     """
     Committee detail page.

datasette_libfec/routes_rss.py

@@ -4,7 +4,7 @@ from datasette_plugin_router import Body
 from typing import Optional, List, Literal
 import asyncio
 
-from .router import router
+from .router import router, check_permission
 from .state import libfec_client, rss_watcher_state
 
 
@@ -95,7 +95,8 @@ async def rss_watch_loop(
 
 
 @router.POST("/-/api/libfec/rss/start", output=RssResponse)
-async def rss_start(datasette, params: Body[RssStartParams]):
+@check_permission()
+async def rss_start(datasette, request, params: Body[RssStartParams]):
     if rss_watcher_state.running:
         return Response.json({
             "status": "error",
@@ -157,7 +158,8 @@ async def rss_start(datasette, params: Body[RssStartParams]):
 
 
 @router.POST("/-/api/libfec/rss/stop", output=RssResponse)
-async def rss_stop(datasette):
+@check_permission()
+async def rss_stop(datasette, request):
     if not rss_watcher_state.running:
         return Response.json({
             "status": "error",
@@ -192,7 +194,8 @@ async def rss_stop(datasette):
 
 
 @router.GET("/-/api/libfec/rss/status", output=RssResponse)
-async def rss_status(datasette):
+@check_permission()
+async def rss_status(datasette, request):
     config = None
     if rss_watcher_state.running:
         config = {
@@ -226,7 +229,8 @@ async def rss_status(datasette):
 
 
 @router.GET("/-/api/libfec/rss/syncs$", output=ApiRssSyncsListResponse)
-async def list_rss_syncs(datasette):
+@check_permission()
+async def list_rss_syncs(datasette, request):
     """List all RSS sync operations from the metadata tables"""
     db = datasette.get_database()
 
@@ -304,7 +308,8 @@ async def list_rss_syncs(datasette):
 
 
 @router.GET("/-/api/libfec/rss/syncs/(?P<sync_id>\\d+)")
-async def get_rss_sync_detail(datasette, sync_id: str):
+@check_permission()
+async def get_rss_sync_detail(datasette, request, sync_id: str):
     """Get detailed information about a specific RSS sync"""
     db = datasette.get_database()
     sync_id_int = int(sync_id)

datasette_libfec/routes_search.py

@@ -3,7 +3,7 @@ from datasette import Response
 from datasette_plugin_router import Body
 from typing import Optional, List
 
-from .router import router
+from .router import router, check_permission
 from .state import libfec_client
 
 # Cache for search RPC clients (keyed by cycle)
@@ -27,7 +27,8 @@ class SearchResponse(BaseModel):
 
 
 @router.POST("/-/api/libfec/search", output=SearchResponse)
-async def search(datasette, params: Body[SearchParams]):
+@check_permission()
+async def search(datasette, request, params: Body[SearchParams]):
     """Search for candidates and committees using libfec search --rpc"""
     from .libfec_search_rpc_client import LibfecSearchRpcClient, RpcError
 

{datasette_libfec-0.0.1a5.dist-info → datasette_libfec-0.0.1a6.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: datasette-libfec
-Version: 0.0.1a5
+Version: 0.0.1a6
 Author: Alex Garcia
 License-Expression: Apache-2.0
 Project-URL: Homepage, https://github.com/datasette/datasette-libfec

{datasette_libfec-0.0.1a5.dist-info → datasette_libfec-0.0.1a6.dist-info}/RECORD

@@ -1,16 +1,16 @@
-datasette_libfec/__init__.py,sha256=U1eMuOU6Yw2XYmwtdG49AN9IWia9rkB9J3yCO61AysM,3297
+datasette_libfec/__init__.py,sha256=PgNmktBdrcVZsGuTjWUl4IT-bW3UrfhB1U_VtdmyZhA,3579
 datasette_libfec/libfec_client.py,sha256=ksQslHi7U-l6sUJWoBh_jnrM0s-xkThUh3AqEcR0vCA,10392
 datasette_libfec/libfec_export_rpc_client.py,sha256=k0i7CZygs2gL4oqp2Gv9lyNTNNSqcg7TzLZrhAOiLMw,13469
 datasette_libfec/libfec_rpc_client.py,sha256=czot8aKWNMSZQ7O7fYqIuGNwpBXczLd5PRzolFxEA9M,12351
 datasette_libfec/libfec_search_rpc_client.py,sha256=O0vIFfNYdDz62rFcM7xt3awNJVFvGxwIbPCO1LxqECI,10232
 datasette_libfec/manifest.json,sha256=7o6f8DV46mzmgZoopganu6RKNnjzZiIKMQ4DcJatan0,2124
 datasette_libfec/page_data.py,sha256=Ihl3OFmuM2zz9SdyC9XY3abheBJRP6_UqxJlhYnzKyY,2303
-datasette_libfec/router.py,sha256=LHjeDfUW9YElbj7o9B7HYwV6E0NWB0LDiP_qMIZeBjg,62
-datasette_libfec/routes_export.py,sha256=1FZlVJlHDtmLpxxhvoUdkUJVu5yliWpcWFVohmheHsM,3810
-datasette_libfec/routes_exports.py,sha256=Icao_pLUJZ5dUt82bd1lkldqM6ddd4aeOnUYV11jFSE,6366
-datasette_libfec/routes_pages.py,sha256=mv9pS6Q-RxiQMLOCZMKdf4dzcea9xTfEGwbLHVuC9yk,10096
-datasette_libfec/routes_rss.py,sha256=lt7me5-CPXgdypZuD58p5FGaPjM1YDH4cInWjP6i8G8,13132
-datasette_libfec/routes_search.py,sha256=EM9WglDnpjR0qjM6Y-SP_GZF7oiMGpuLog4fDIUjupY,2222
+datasette_libfec/router.py,sha256=t3X7mps4IOp20wHPkMygznVEdZ9bLUyYUpzclot7ah8,723
+datasette_libfec/routes_export.py,sha256=wr5qoT9bDipLnkJr3QFC64TriLVv2CJlLSnJpajYIA8,3915
+datasette_libfec/routes_exports.py,sha256=58pbEp-4nr9JP3BGFf1oPjf1LmAgmkGKa6aZfpK1vRs,6442
+datasette_libfec/routes_pages.py,sha256=NvpkgNM5VFTj_oDI28-IgYgaPtJI_vsnnIojtEMRlpw,10232
+datasette_libfec/routes_rss.py,sha256=m1oSzNjEka5opecW6qud7LRGEiKRB4hKHfb_JlaIn28,13295
+datasette_libfec/routes_search.py,sha256=byNlYOwnL5GWj-4IYl5DZGba1VEJ6vQK223yYCtZji4,2269
 datasette_libfec/state.py,sha256=K6cihx7jX3L2F12Hrrgv1hQ5mmQ15obvtZX_5CL2Lcs,206
 datasette_libfec/static/gen/candidate-BEqDafKu.css,sha256=712NuY9_SD-8GFUaye6dCB5GRx7m6uiuJ48MXVlIxrY,2706
 datasette_libfec/static/gen/candidate-tqxa29G-.js,sha256=fYF4yP-bLRS1qvOQ7U7v6b0dBVCaoUw25XyJESFI9mE,7483
@@ -27,11 +27,11 @@ datasette_libfec/static/gen/index-client-CDwZ_Ixa.js,sha256=cjpR7ee1-TP3ZaJ-yVSi
 datasette_libfec/static/gen/index-jv9_YIKt.css,sha256=KIhhjpufP-cjb50w679eXk8-S_BccONp7ruIAWzU8rI,18180
 datasette_libfec/static/gen/load-AXKAVXVj.js,sha256=fr3cnCcVvgsXBEVK-6oOddG_0a5WEC3UMAFNIeVKzbU,28394
 datasette_libfec/templates/libfec_base.html,sha256=RJOA7qBuR1fPfWj48lfT9Gj3pS3gMGpUT4URWa-L43g,309
-datasette_libfec-0.0.1a5.dist-info/licenses/LICENSE,sha256=xx0jnfkXJvxRnG63LTGOxlggYnIysveWIZ6H3PNdCrQ,11357
+datasette_libfec-0.0.1a6.dist-info/licenses/LICENSE,sha256=xx0jnfkXJvxRnG63LTGOxlggYnIysveWIZ6H3PNdCrQ,11357
 scripts/typegen-pagedata.py,sha256=QoBJ6QPmOCoNxe8nUe44lanfkP-HYsb4f_Dld9ljuQg,253
 tests/test_libfec.py,sha256=-4t7DjTrBFaWiO93qSvXN4RBGPlKYslLAcPVqY-Wp_o,362
-datasette_libfec-0.0.1a5.dist-info/METADATA,sha256=saRuP6ZBIMTc1XtROWBdPp3x8H-2ZqTOJhFLfBFUlvE,1679
-datasette_libfec-0.0.1a5.dist-info/WHEEL,sha256=wUyA8OaulRlbfwMtmQsvNngGrxQHAvkKcvRmdizlJi0,92
-datasette_libfec-0.0.1a5.dist-info/entry_points.txt,sha256=FCShfzjkN9mcO5oLaFz72dS-zwmRip3jhm9Pj0DJhEY,38
-datasette_libfec-0.0.1a5.dist-info/top_level.txt,sha256=r5vRGN9jFvSIklVSeMy0LJKhjvVEhVvguvuQ-vXVv7k,31
-datasette_libfec-0.0.1a5.dist-info/RECORD,,
+datasette_libfec-0.0.1a6.dist-info/METADATA,sha256=0Tvzw5NPe_ZHd8OfrRHcqpmXmzPUsFqKw-M2xlf9JPg,1679
+datasette_libfec-0.0.1a6.dist-info/WHEEL,sha256=wUyA8OaulRlbfwMtmQsvNngGrxQHAvkKcvRmdizlJi0,92
+datasette_libfec-0.0.1a6.dist-info/entry_points.txt,sha256=FCShfzjkN9mcO5oLaFz72dS-zwmRip3jhm9Pj0DJhEY,38
+datasette_libfec-0.0.1a6.dist-info/top_level.txt,sha256=r5vRGN9jFvSIklVSeMy0LJKhjvVEhVvguvuQ-vXVv7k,31
+datasette_libfec-0.0.1a6.dist-info/RECORD,,