Sync GovOPlaN module state

src/govoplan_access/backend/semantic.py

@@ -7,6 +7,7 @@ from sqlalchemy.orm import Session
 
 from govoplan_access.backend.db.models import (
     Account,
+    ExternalFunctionRoleAssignment,
     Function,
     FunctionAssignment,
     FunctionDelegation,
@@ -16,6 +17,7 @@ from govoplan_access.backend.db.models import (
     Role,
     User,
 )
+from govoplan_core.core.idm import OrganizationFunctionAssignmentRef
 from govoplan_core.security.time import utc_now
 
 
@@ -154,3 +156,31 @@ def collect_function_roles(session: Session, user: User) -> list[Role]:
         .order_by(Role.name.asc())
         .all()
     )
+
+
+def collect_external_function_roles(
+    session: Session,
+    user: User,
+    assignments: Iterable[OrganizationFunctionAssignmentRef],
+    *,
+    source_module: str = "organizations",
+) -> list[Role]:
+    function_ids = sorted({
+        assignment.function_id
+        for assignment in assignments
+        if assignment.tenant_id == user.tenant_id and assignment.status == "active"
+    })
+    if not function_ids:
+        return []
+    return (
+        session.query(Role)
+        .join(ExternalFunctionRoleAssignment, ExternalFunctionRoleAssignment.role_id == Role.id)
+        .filter(
+            ExternalFunctionRoleAssignment.tenant_id == user.tenant_id,
+            ExternalFunctionRoleAssignment.source_module == source_module,
+            ExternalFunctionRoleAssignment.function_id.in_(function_ids),
+            Role.tenant_id == user.tenant_id,
+        )
+        .order_by(Role.name.asc())
+        .all()
+    )