pas.security
============

.. py:module:: pas.security


Functions
---------

.. autoapisummary::

   pas.security.get_roles_setting
   pas.security.has_permission_logged_in
   pas.security.restrict_attendence_collection_access
   pas.security.restrict_attendence_access
   pas.security.restrict_parliamentarian_access
   pas.security.restrict_organisation_access
   pas.security.restrict_files_collection_access
   pas.security.has_private_access_to_commission


Module Contents
---------------

.. py:function:: get_roles_setting() -> dict[str, set[type[onegov.core.security.roles.Intent]]]

.. py:function:: has_permission_logged_in(app: onegov.pas.PasApp, identity: morepath.Identity, model: Any, permission: onegov.core.security.roles.Intent) -> bool

.. py:function:: restrict_attendence_collection_access(app: onegov.pas.PasApp, identity: morepath.Identity, model: onegov.pas.collections.AttendenceCollection, permission: onegov.core.security.roles.Intent) -> bool

.. py:function:: restrict_attendence_access(app: onegov.pas.PasApp, identity: morepath.Identity, model: onegov.pas.models.attendence.Attendence, permission: onegov.core.security.roles.Intent) -> bool

.. py:function:: restrict_parliamentarian_access(app: onegov.pas.PasApp, identity: morepath.Identity, model: onegov.pas.models.parliamentarian.PASParliamentarian, permission: onegov.core.security.roles.Intent) -> bool

.. py:function:: restrict_organisation_access(app: onegov.pas.PasApp, identity: morepath.Identity, model: onegov.org.models.Organisation, permission: onegov.core.security.roles.Intent) -> bool

.. py:function:: restrict_files_collection_access(app: onegov.pas.PasApp, identity: morepath.Identity, model: onegov.org.models.GeneralFileCollection, permission: onegov.core.security.roles.Intent) -> bool

   Grant parliamentarians and commission presidents access to files 


.. py:function:: has_private_access_to_commission(app: onegov.pas.PasApp, identity: morepath.Identity, model: onegov.pas.models.commission.Commission, permission: onegov.core.security.roles.Intent) -> bool

   -Looks up the User from database by username
   - Verifies they're actually a parliamentarian
   - Checks their commission memberships to see if they're the
   - president of THIS specific commission
   If yes → grants access