-
[OPIK-5044] [BE] feat: add P2 workspace permission annotations (#5705)
frostbyte_neo 发布于
2026-03-19 05:16:46 +00:00 - [OPIK-5044] [BE] feat: add P2 workspace permission annotations
Add P2 scope permissions from the workspace permissions spec:
- WORKSPACE_SETTINGS_CONFIGURE for workspace config upsert/delete
- USER_ROLE_UPDATE (enum only, no endpoint yet)
- AI_PROVIDER_UPDATE for LLM provider key create/update/delete
- ANNOTATION_QUEUE_ANNOTATE for adding items to annotation queues
Includes RequiredPermissionsTest for all annotated endpoints.
Co-Authored-By: Claude Opus 4.6 (1M context) noreply@anthropic.com
- test(permissions): add permission denial tests for P2 endpoints
Add tests verifying endpoints return 403 when the auth service denies
the required permission. Covers all P2-annotated endpoints plus existing
ANNOTATION_QUEUE_DELETE endpoints.Adds AuthTestUtils.mockTargetWorkspaceDenyPermission() helper and
call* client methods for AnnotationQueuesResourceClient.Co-Authored-By: Claude Opus 4.6 (1M context) noreply@anthropic.com
Co-authored-by: Claude Opus 4.6 (1M context) noreply@anthropic.com
下载附件