Skip to content

add dwh allowance to patch_user_info #49

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Zimovchik merged 1 commit into from
Sep 29, 2025
Merged

add dwh allowance to patch_user_info #49

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
13 changes: 10 additions & 3 deletions userdata_api/utils/user.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,10 +14,12 @@ async def patch_user_info(new: UserInfoUpdate, user_id: int, user: dict[str, int
"""
Обновить информацию о пользователе в соотетствии с переданным токеном.

Метод обновляет только информацию из источников `admin` и `user`
Метод обновляет только информацию из источников `admin`, `user` или `dwh`.

Для обновления от имени админа нужен скоуп `userdata.info.admin`

Для обновления информации из dwh нужен скоуп `userdata.info.dwh`

Для обновления от иимени пользователя необходима владениие ининформацией

Обноввляет только инормацую созданную самим источником
Expand All @@ -35,9 +37,14 @@ async def patch_user_info(new: UserInfoUpdate, user_id: int, user: dict[str, int
"Admin source requires 'userdata.info.admin' scope",
"Источник 'администратор' требует право 'userdata.info.admin'",
)
if new.source != "admin" and new.source != "user":
if new.source == "dwh" and "userdata.info.dwh" not in scope_names:
raise Forbidden(
"Dwh source requires 'userdata.info.dwh' scope",
"Источник 'dwh' требует право 'userdata.info.dwh'",
)
if new.source != "admin" and new.source != "user" and new.source != "dwh":
raise Forbidden(
"HTTP protocol applying only 'admin' and 'user' source",
"HTTP protocol applying only 'admin', 'user' or 'dwh' source",
"Данный источник информации не обновляется через HTTP",
)
if new.source == "user" and user["id"] != user_id:
Expand Down