feat(cases): enforce purpose-bound case governance

2026-08-24 20:05:31 +02:00
parent 9435116299
commit 17415d8831
28 changed files with 786 additions and 142 deletions
@@ -255,6 +255,10 @@ class CasesDsarProviderTests(unittest.TestCase):
        self.assertEqual("cases_access_grant", account_records[0].resource_type)
        self.assertFalse(account_records[0].immutable_evidence)
        self.assertEqual("account-subject", account_records[0].data["subject_id"])
+        self.assertEqual(
+            ["cases.casework"],
+            account_records[0].data["allowed_purposes"],
+        )

        identity_records = self.provider.search_subject(
            self.session,
@@ -308,7 +312,11 @@ class CasesDsarProviderTests(unittest.TestCase):
        self.assertTrue(
            all(
                item.resource_type
-                in {"cases_operator_attribution", "cases_timeline_event"}
+                in {
+                    "cases_access_grant",
+                    "cases_operator_attribution",
+                    "cases_timeline_event",
+                }
                for item in records
            )
        )