Prepare v0.1.0 release dependencies

src/govoplan_core/privacy/retention.py

@@ -304,6 +304,93 @@ def parent_privacy_policy(session: Session, *, tenant_id: str, scope_type: str,
     return policy
 
 
+
+def _retention_policy_source_fields(patch: dict[str, Any], *, baseline: bool = False) -> list[str]:
+    fields: list[str] = []
+    for key in RETENTION_POLICY_FIELD_KEYS:
+        if key in patch and patch.get(key) is not None:
+            fields.append(key)
+    if isinstance(patch.get("allow_lower_level_limits"), dict) and patch["allow_lower_level_limits"]:
+        fields.append("allow_lower_level_limits")
+    if baseline and not fields:
+        fields.append("defaults")
+    return fields
+
+
+def _retention_policy_source_step(scope_type: str, label: str, scope_id: str | None, patch: dict[str, Any], *, baseline: bool = False) -> dict[str, Any]:
+    return {
+        "scope_type": scope_type,
+        "scope_id": scope_id,
+        "label": label,
+        "applied_fields": _retention_policy_source_fields(patch, baseline=baseline),
+    }
+
+
+def effective_privacy_policy_sources(
+    session: Session,
+    *,
+    tenant_id: str | None = None,
+    owner_user_id: str | None = None,
+    owner_group_id: str | None = None,
+    campaign_id: str | None = None,
+) -> list[dict[str, Any]]:
+    system_settings = get_system_settings(session)
+    sources = [_retention_policy_source_step("system", "System", None, _privacy_policy_patch_from_settings(system_settings.settings or {}), baseline=True)]
+    campaign: Campaign | None = None
+    if campaign_id:
+        campaign = session.get(Campaign, campaign_id)
+        if campaign is None:
+            raise PrivacyPolicyError("Campaign not found for privacy policy")
+        tenant_id = campaign.tenant_id
+        owner_user_id = campaign.owner_user_id
+        owner_group_id = campaign.owner_group_id
+    if tenant_id:
+        tenant = session.get(Tenant, tenant_id)
+        if tenant is None:
+            raise PrivacyPolicyError("Tenant not found for privacy policy")
+        sources.append(_retention_policy_source_step("tenant", "Tenant", tenant.id, _privacy_policy_patch_from_settings(tenant.settings or {})))
+    if owner_user_id:
+        user = session.get(User, owner_user_id)
+        if user and (not tenant_id or user.tenant_id == tenant_id):
+            sources.append(_retention_policy_source_step("user", "Owner user", user.id, _privacy_policy_patch_from_settings(user.settings or {})))
+    if owner_group_id:
+        group = session.get(Group, owner_group_id)
+        if group and (not tenant_id or group.tenant_id == tenant_id):
+            sources.append(_retention_policy_source_step("group", "Owner group", group.id, _privacy_policy_patch_from_settings(group.settings or {})))
+    if campaign is not None:
+        sources.append(_retention_policy_source_step("campaign", "Campaign", campaign.id, _privacy_policy_patch_from_settings(campaign.settings or {})))
+    return sources
+
+
+def parent_privacy_policy_sources(session: Session, *, tenant_id: str, scope_type: str, scope_id: str | None = None) -> list[dict[str, Any]]:
+    clean_scope = scope_type.strip().casefold()
+    if clean_scope == "system":
+        return []
+    system_settings = get_system_settings(session)
+    sources = [_retention_policy_source_step("system", "System", None, _privacy_policy_patch_from_settings(system_settings.settings or {}), baseline=True)]
+    if clean_scope == "tenant":
+        return sources
+    tenant = session.get(Tenant, tenant_id)
+    if tenant is None:
+        raise PrivacyPolicyError("Tenant not found for privacy policy")
+    sources.append(_retention_policy_source_step("tenant", "Tenant", tenant.id, _privacy_policy_patch_from_settings(tenant.settings or {})))
+    if clean_scope in {"user", "group"}:
+        return sources
+    if clean_scope != "campaign" or not scope_id:
+        return sources
+    campaign = session.get(Campaign, scope_id)
+    if campaign is None or campaign.tenant_id != tenant_id:
+        raise PrivacyPolicyError("Campaign not found for privacy policy")
+    if campaign.owner_user_id:
+        user = session.get(User, campaign.owner_user_id)
+        if user and user.tenant_id == tenant_id:
+            sources.append(_retention_policy_source_step("user", "Owner user", user.id, _privacy_policy_patch_from_settings(user.settings or {})))
+    if campaign.owner_group_id:
+        group = session.get(Group, campaign.owner_group_id)
+        if group and group.tenant_id == tenant_id:
+            sources.append(_retention_policy_source_step("group", "Owner group", group.id, _privacy_policy_patch_from_settings(group.settings or {})))
+    return sources
+
 def get_privacy_policy_for_scope(session: Session, *, tenant_id: str, scope_type: str, scope_id: str | None = None) -> dict[str, Any]:
     clean_scope = scope_type.strip().casefold()
     if clean_scope == "system":