Expose resource access explanation API

src/govoplan_access/backend/explanation.py

@@ -26,7 +26,7 @@ from govoplan_access.backend.semantic import (
     active_function_delegations_for_account,
     identity_id_for_account,
 )
-from govoplan_core.core.access import AccessDecisionProvenance, AccessExplanationService, PrincipalRef
+from govoplan_core.core.access import AccessDecisionProvenance, AccessExplanationService, PrincipalRef, ResourceAccessExplanationProvider
 from govoplan_core.core.idm import IdmDirectory, OrganizationFunctionAssignmentRef
 from govoplan_core.core.organizations import OrganizationDirectory
 from govoplan_core.db.session import get_database
@@ -161,9 +161,11 @@ class SqlAccessExplanationService(AccessExplanationService):
         *,
         idm_directory: IdmDirectory | None = None,
         organization_directory: OrganizationDirectory | None = None,
+        resource_explanation_providers: Iterable[ResourceAccessExplanationProvider] = (),
     ) -> None:
         self._idm_directory = idm_directory
         self._organization_directory = organization_directory
+        self._resource_explanation_providers = tuple(resource_explanation_providers)
 
     def explain_scope_provenance(
         self,
@@ -189,8 +191,28 @@ class SqlAccessExplanationService(AccessExplanationService):
         resource_id: str,
         action: str,
     ) -> tuple[AccessDecisionProvenance, ...]:
-        del resource_type, resource_id
-        return self.explain_scope_provenance(principal, action)
+        with get_database().session() as session:
+            items = _scope_provenance(
+                session,
+                principal,
+                action,
+                idm_directory=self._idm_directory,
+                organization_directory=self._organization_directory,
+            )
+            for provider in self._resource_explanation_providers:
+                provider_items = tuple(
+                    provider.explain_resource_provenance(
+                        session,
+                        principal,
+                        resource_type=resource_type,
+                        resource_id=resource_id,
+                        action=action,
+                    )
+                )
+                if provider_items:
+                    items.extend(provider_items)
+                    break
+            return tuple(_dedupe_provenance(items))
 
 
 def build_user_access_explanation(