datasette-libfec 0.0.1a5__tar.gz → 0.0.1a6__tar.gz

{datasette_libfec-0.0.1a5 → datasette_libfec-0.0.1a6}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: datasette-libfec
-Version: 0.0.1a5
+Version: 0.0.1a6
 Author: Alex Garcia
 License-Expression: Apache-2.0
 Project-URL: Homepage, https://github.com/datasette/datasette-libfec

{datasette_libfec-0.0.1a5 → datasette_libfec-0.0.1a6}/datasette_libfec/__init__.py

@@ -1,5 +1,6 @@
 from pydantic import BaseModel
 from datasette import hookimpl
+from datasette.permissions import Action
 from pathlib import Path
 from textwrap import dedent
 from typing import Optional
@@ -9,7 +10,7 @@ import os
 # Import route modules to trigger route registration on the shared router
 # pylint: disable=unused-import
 from . import routes_rss, routes_export, routes_search, routes_exports, routes_pages
-from .router import router
+from .router import router, LIBFEC_ACCESS_NAME
 _ = routes_rss, routes_export, routes_search, routes_exports, routes_pages
 
 # https://vite.dev/guide/backend-integration.html
@@ -81,4 +82,15 @@ def extra_template_vars(datasette):
             return "\n".join(parts)
 
 
-    return {"datasette_libfec_vite_entry": datasette_libfec_vite_entry}
+    return {"datasette_libfec_vite_entry": datasette_libfec_vite_entry}
+
+@hookimpl
+def register_actions(datasette):
+    return [
+        Action(
+            name=LIBFEC_ACCESS_NAME,
+            description=(
+                "Can access libfec pages, features"
+            ),
+        ),
+    ]

datasette_libfec-0.0.1a6/datasette_libfec/router.py

@@ -0,0 +1,24 @@
+from datasette import Forbidden
+from datasette_plugin_router import Router
+from functools import wraps
+
+router = Router()
+
+LIBFEC_ACCESS_NAME = "datasette_libfec_access"
+
+# decorator for routes, to ensure the proper permissions are checked
+def check_permission():
+    def decorator(func):
+        @wraps(func)
+        async def wrapper(datasette, request, **kwargs):
+            result = await datasette.allowed(
+                action=LIBFEC_ACCESS_NAME, actor=request.actor
+            )
+            if not result:
+                raise Forbidden("Permission denied for datasette-libfec access")
+            return await func(datasette=datasette, request=request, **kwargs)
+
+        return wrapper
+
+    return decorator
+

{datasette_libfec-0.0.1a5 → datasette_libfec-0.0.1a6}/datasette_libfec/routes_export.py

@@ -5,7 +5,7 @@ from typing import Optional, List
 import asyncio
 import uuid
 
-from .router import router
+from .router import router, check_permission
 from .state import libfec_client, export_state
 
 
@@ -24,7 +24,8 @@ class ExportResponse(BaseModel):
 
 
 @router.POST("/-/api/libfec/export/start", output=ExportResponse)
-async def export_start(datasette, params: Body[ExportStartParams]):
+@check_permission()
+async def export_start(datasette, request, params: Body[ExportStartParams]):
     if export_state.running:
         return Response.json({
             "status": "error",
@@ -72,7 +73,8 @@ async def export_start(datasette, params: Body[ExportStartParams]):
 
 
 @router.GET("/-/api/libfec/export/status", output=ExportResponse)
-async def export_status(datasette):
+@check_permission()
+async def export_status(datasette, request):
     response_data = {
         "status": "success",
         "message": "Export status",
@@ -101,7 +103,8 @@ async def export_status(datasette):
 
 
 @router.POST("/-/api/libfec/export/cancel", output=ExportResponse)
-async def export_cancel(datasette):
+@check_permission()
+async def export_cancel(datasette, request):
     if not export_state.running:
         return Response.json({
             "status": "error",

{datasette_libfec-0.0.1a5 → datasette_libfec-0.0.1a6}/datasette_libfec/routes_exports.py

@@ -2,7 +2,7 @@ from pydantic import BaseModel
 from datasette import Response
 from typing import Optional, List, Literal
 
-from .router import router
+from .router import router, check_permission
 
 
 class ExportRecord(BaseModel):
@@ -44,7 +44,8 @@ class ApiExportsListResponse(BaseModel):
     message: Optional[str] = None
 
 @router.GET("/-/api/libfec/exports$", output=ApiExportsListResponse)
-async def list_exports(datasette):
+@check_permission()
+async def list_exports(datasette, request):
     """List all export operations from the metadata tables"""
     db = datasette.get_database()
 
@@ -103,7 +104,8 @@ async def list_exports(datasette):
 
 
 @router.GET("/-/api/libfec/exports/(?P<export_id>\\d+)")
-async def get_export_detail(datasette, export_id: str):
+@check_permission()
+async def get_export_detail(datasette, request, export_id: str):
     """Get detailed information about a specific export"""
     db = datasette.get_database()
     export_id_int = int(export_id)

{datasette_libfec-0.0.1a5 → datasette_libfec-0.0.1a6}/datasette_libfec/routes_pages.py

@@ -3,7 +3,7 @@ Routes for contest, candidate, and committee pages.
 """
 from datasette import Response
 
-from .router import router
+from .router import router, check_permission
 from .page_data import (
     Candidate,
     CandidatePageData,
@@ -15,7 +15,8 @@ from .page_data import (
 
 
 @router.GET("/-/libfec$")
-async def libfec_page(datasette):
+@check_permission()
+async def libfec_page(datasette, request):
     db = datasette.get_database()
     page_data = IndexPageData(database_name=db.name)
     return Response.html(
@@ -31,7 +32,8 @@ async def libfec_page(datasette):
 
 
 @router.GET("/-/libfec/filing/(?P<filing_id>[^/]+)")
-async def filing_detail_page(datasette, filing_id: str):
+@check_permission()
+async def filing_detail_page(datasette, request, filing_id: str):
     db = datasette.get_database()
     filing = None
     form_data = None
@@ -98,6 +100,7 @@ async def filing_detail_page(datasette, filing_id: str):
 
 
 @router.GET("/-/libfec/contest$")
+@check_permission()
 async def contest_page(datasette, request):
     """
     Contest page showing candidates for a specific race.
@@ -179,6 +182,7 @@ async def contest_page(datasette, request):
 
 
 @router.GET("/-/libfec/candidate/(?P<candidate_id>[^/]+)$")
+@check_permission()
 async def candidate_page(datasette, request, candidate_id: str):
     """
     Candidate detail page.
@@ -258,6 +262,7 @@ async def candidate_page(datasette, request, candidate_id: str):
 
 
 @router.GET("/-/libfec/committee/(?P<committee_id>[^/]+)$")
+@check_permission()
 async def committee_page(datasette, request, committee_id: str):
     """
     Committee detail page.

{datasette_libfec-0.0.1a5 → datasette_libfec-0.0.1a6}/datasette_libfec/routes_rss.py

@@ -4,7 +4,7 @@ from datasette_plugin_router import Body
 from typing import Optional, List, Literal
 import asyncio
 
-from .router import router
+from .router import router, check_permission
 from .state import libfec_client, rss_watcher_state
 
 
@@ -95,7 +95,8 @@ async def rss_watch_loop(
 
 
 @router.POST("/-/api/libfec/rss/start", output=RssResponse)
-async def rss_start(datasette, params: Body[RssStartParams]):
+@check_permission()
+async def rss_start(datasette, request, params: Body[RssStartParams]):
     if rss_watcher_state.running:
         return Response.json({
             "status": "error",
@@ -157,7 +158,8 @@ async def rss_start(datasette, params: Body[RssStartParams]):
 
 
 @router.POST("/-/api/libfec/rss/stop", output=RssResponse)
-async def rss_stop(datasette):
+@check_permission()
+async def rss_stop(datasette, request):
     if not rss_watcher_state.running:
         return Response.json({
             "status": "error",
@@ -192,7 +194,8 @@ async def rss_stop(datasette):
 
 
 @router.GET("/-/api/libfec/rss/status", output=RssResponse)
-async def rss_status(datasette):
+@check_permission()
+async def rss_status(datasette, request):
     config = None
     if rss_watcher_state.running:
         config = {
@@ -226,7 +229,8 @@ async def rss_status(datasette):
 
 
 @router.GET("/-/api/libfec/rss/syncs$", output=ApiRssSyncsListResponse)
-async def list_rss_syncs(datasette):
+@check_permission()
+async def list_rss_syncs(datasette, request):
     """List all RSS sync operations from the metadata tables"""
     db = datasette.get_database()
 
@@ -304,7 +308,8 @@ async def list_rss_syncs(datasette):
 
 
 @router.GET("/-/api/libfec/rss/syncs/(?P<sync_id>\\d+)")
-async def get_rss_sync_detail(datasette, sync_id: str):
+@check_permission()
+async def get_rss_sync_detail(datasette, request, sync_id: str):
     """Get detailed information about a specific RSS sync"""
     db = datasette.get_database()
     sync_id_int = int(sync_id)

{datasette_libfec-0.0.1a5 → datasette_libfec-0.0.1a6}/datasette_libfec/routes_search.py

@@ -3,7 +3,7 @@ from datasette import Response
 from datasette_plugin_router import Body
 from typing import Optional, List
 
-from .router import router
+from .router import router, check_permission
 from .state import libfec_client
 
 # Cache for search RPC clients (keyed by cycle)
@@ -27,7 +27,8 @@ class SearchResponse(BaseModel):
 
 
 @router.POST("/-/api/libfec/search", output=SearchResponse)
-async def search(datasette, params: Body[SearchParams]):
+@check_permission()
+async def search(datasette, request, params: Body[SearchParams]):
     """Search for candidates and committees using libfec search --rpc"""
     from .libfec_search_rpc_client import LibfecSearchRpcClient, RpcError
 

{datasette_libfec-0.0.1a5 → datasette_libfec-0.0.1a6}/datasette_libfec.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: datasette-libfec
-Version: 0.0.1a5
+Version: 0.0.1a6
 Author: Alex Garcia
 License-Expression: Apache-2.0
 Project-URL: Homepage, https://github.com/datasette/datasette-libfec

{datasette_libfec-0.0.1a5 → datasette_libfec-0.0.1a6}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "datasette-libfec"
-version = "0.0.1a5"
+version = "0.0.1a6"
 description = ""
 readme = "README.md"
 authors = [{name = "Alex Garcia"}]

datasette_libfec-0.0.1a5/datasette_libfec/router.py

@@ -1,3 +0,0 @@
-from datasette_plugin_router import Router
-
-router = Router()