Release v0.1.5

src/govoplan_policy/backend/api/v1/routes.py

@@ -0,0 +1,168 @@
+from __future__ import annotations
+
+from fastapi import APIRouter, Depends, HTTPException, Query, status
+from sqlalchemy.orm import Session
+
+from govoplan_access.backend.auth.dependencies import ApiPrincipal, get_api_principal, has_scope, require_scope
+from govoplan_core.audit.logging import audit_from_principal
+from govoplan_core.db.session import get_session
+from govoplan_core.privacy.retention import (
+    PrivacyPolicyError,
+    apply_retention_policy,
+    effective_privacy_policy,
+    effective_privacy_policy_sources,
+    get_privacy_policy_for_scope,
+    parent_privacy_policy,
+    parent_privacy_policy_sources,
+    set_privacy_policy_for_scope,
+)
+
+from .schemas import (
+    PrivacyRetentionPolicyItem,
+    PrivacyRetentionPolicyScopeRequest,
+    PrivacyRetentionPolicyScopeResponse,
+    RetentionRunRequest,
+    RetentionRunResponse,
+)
+
+router = APIRouter(prefix="/admin", tags=["admin"])
+
+
+def _require_permission(principal: ApiPrincipal, scope: str) -> None:
+    if not has_scope(principal, scope):
+        raise HTTPException(status_code=status.HTTP_403_FORBIDDEN, detail=f"Missing scope: {scope}")
+
+
+def _require_privacy_policy_read(principal: ApiPrincipal, scope_type: str) -> None:
+    if scope_type == "system":
+        _require_permission(principal, "system:settings:read")
+    else:
+        _require_permission(principal, "admin:policies:read")
+
+
+def _require_privacy_policy_write(principal: ApiPrincipal, scope_type: str) -> None:
+    if scope_type == "system":
+        _require_permission(principal, "system:settings:write")
+    else:
+        _require_permission(principal, "admin:policies:write")
+
+
+@router.get("/privacy-retention/policies/{scope_type}", response_model=PrivacyRetentionPolicyScopeResponse)
+def read_privacy_retention_policy(
+    scope_type: str,
+    scope_id: str | None = Query(default=None),
+    session: Session = Depends(get_session),
+    principal: ApiPrincipal = Depends(get_api_principal),
+):
+    clean_scope = scope_type.strip().casefold()
+    _require_privacy_policy_read(principal, clean_scope)
+    try:
+        policy = get_privacy_policy_for_scope(session, tenant_id=principal.tenant_id, scope_type=clean_scope, scope_id=scope_id)
+        effective = _effective_privacy_policy_for_response(session, tenant_id=principal.tenant_id, scope_type=clean_scope, scope_id=scope_id)
+        parent = _parent_privacy_policy_for_response(session, tenant_id=principal.tenant_id, scope_type=clean_scope, scope_id=scope_id)
+        return PrivacyRetentionPolicyScopeResponse(
+            scope_type=clean_scope,
+            scope_id=scope_id,
+            policy=policy,
+            effective_policy=PrivacyRetentionPolicyItem.model_validate(effective.model_dump(mode="json")),
+            parent_policy=PrivacyRetentionPolicyItem.model_validate(parent.model_dump(mode="json")) if parent else None,
+            effective_policy_sources=_effective_privacy_policy_sources_for_response(session, tenant_id=principal.tenant_id, scope_type=clean_scope, scope_id=scope_id),
+            parent_policy_sources=_parent_privacy_policy_sources_for_response(session, tenant_id=principal.tenant_id, scope_type=clean_scope, scope_id=scope_id),
+        )
+    except PrivacyPolicyError as exc:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail=str(exc)) from exc
+
+
+@router.put("/privacy-retention/policies/{scope_type}", response_model=PrivacyRetentionPolicyScopeResponse)
+def write_privacy_retention_policy(
+    scope_type: str,
+    payload: PrivacyRetentionPolicyScopeRequest,
+    scope_id: str | None = Query(default=None),
+    session: Session = Depends(get_session),
+    principal: ApiPrincipal = Depends(get_api_principal),
+):
+    clean_scope = scope_type.strip().casefold()
+    _require_privacy_policy_write(principal, clean_scope)
+    try:
+        policy = set_privacy_policy_for_scope(
+            session,
+            tenant_id=principal.tenant_id,
+            scope_type=clean_scope,
+            scope_id=scope_id,
+            policy=payload.policy.model_dump(mode="json", exclude_none=True),
+        )
+        session.commit()
+        effective = _effective_privacy_policy_for_response(session, tenant_id=principal.tenant_id, scope_type=clean_scope, scope_id=scope_id)
+        parent = _parent_privacy_policy_for_response(session, tenant_id=principal.tenant_id, scope_type=clean_scope, scope_id=scope_id)
+        return PrivacyRetentionPolicyScopeResponse(
+            scope_type=clean_scope,
+            scope_id=scope_id,
+            policy=policy,
+            effective_policy=PrivacyRetentionPolicyItem.model_validate(effective.model_dump(mode="json")),
+            parent_policy=PrivacyRetentionPolicyItem.model_validate(parent.model_dump(mode="json")) if parent else None,
+            effective_policy_sources=_effective_privacy_policy_sources_for_response(session, tenant_id=principal.tenant_id, scope_type=clean_scope, scope_id=scope_id),
+            parent_policy_sources=_parent_privacy_policy_sources_for_response(session, tenant_id=principal.tenant_id, scope_type=clean_scope, scope_id=scope_id),
+        )
+    except PrivacyPolicyError as exc:
+        session.rollback()
+        raise HTTPException(status_code=status.HTTP_422_UNPROCESSABLE_ENTITY, detail=str(exc)) from exc
+
+
+def _parent_privacy_policy_sources_for_response(session: Session, *, tenant_id: str, scope_type: str, scope_id: str | None):
+    if scope_type == "system":
+        return []
+    return parent_privacy_policy_sources(session, tenant_id=tenant_id, scope_type=scope_type, scope_id=scope_id or (tenant_id if scope_type == "tenant" else None))
+
+
+def _effective_privacy_policy_sources_for_response(session: Session, *, tenant_id: str, scope_type: str, scope_id: str | None):
+    if scope_type == "system":
+        return effective_privacy_policy_sources(session)
+    if scope_type == "tenant":
+        return effective_privacy_policy_sources(session, tenant_id=scope_id or tenant_id)
+    if scope_type == "campaign" and scope_id:
+        return effective_privacy_policy_sources(session, campaign_id=scope_id)
+    if scope_type == "user" and scope_id:
+        return effective_privacy_policy_sources(session, tenant_id=tenant_id, owner_user_id=scope_id)
+    if scope_type == "group" and scope_id:
+        return effective_privacy_policy_sources(session, tenant_id=tenant_id, owner_group_id=scope_id)
+    return effective_privacy_policy_sources(session, tenant_id=tenant_id)
+
+
+def _parent_privacy_policy_for_response(session: Session, *, tenant_id: str, scope_type: str, scope_id: str | None):
+    if scope_type == "system":
+        return None
+    return parent_privacy_policy(session, tenant_id=tenant_id, scope_type=scope_type, scope_id=scope_id or (tenant_id if scope_type == "tenant" else None))
+
+
+def _effective_privacy_policy_for_response(session: Session, *, tenant_id: str, scope_type: str, scope_id: str | None):
+    if scope_type == "system":
+        return effective_privacy_policy(session)
+    if scope_type == "tenant":
+        return effective_privacy_policy(session, tenant_id=scope_id or tenant_id)
+    if scope_type == "campaign" and scope_id:
+        return effective_privacy_policy(session, campaign_id=scope_id)
+    if scope_type == "user" and scope_id:
+        return effective_privacy_policy(session, tenant_id=tenant_id, owner_user_id=scope_id)
+    if scope_type == "group" and scope_id:
+        return effective_privacy_policy(session, tenant_id=tenant_id, owner_group_id=scope_id)
+    return effective_privacy_policy(session, tenant_id=tenant_id)
+
+
+@router.post("/system/retention/run", response_model=RetentionRunResponse)
+def run_retention_policy(
+    payload: RetentionRunRequest,
+    session: Session = Depends(get_session),
+    principal: ApiPrincipal = Depends(require_scope("system:settings:write")),
+):
+    result = apply_retention_policy(session, dry_run=payload.dry_run)
+    audit_from_principal(
+        session,
+        principal,
+        action="retention_policy.run",
+        scope="system",
+        object_type="retention_policy",
+        object_id="global",
+        details={"dry_run": payload.dry_run, "counts": result.get("counts")},
+    )
+    session.commit()
+    return RetentionRunResponse(result=result)