feat: Add model-level permissions framework (rebase test - no not merge)#1110

Open

mihow wants to merge 34 commits intomainfrom

feat/model-level-permissions-rebased

Commits on Jan 31, 2026

feat: added create project permission

mohamedelabbas1996
authored and
mihow
committed
fat: handled permission check for model level permissions

mohamedelabbas1996
authored and
mihow
committed
feat: return the create model level permission to the frontend with the response `user_permissions` field

mohamedelabbas1996
authored and
mihow
committed
migration: added the create project permission migration

mohamedelabbas1996
authored and
mihow
committed
refactor: separate object-level and model-level permission checks

mohamedelabbas1996
authored and
mihow
committed
feat: handle project create case using model level permissions

mohamedelabbas1996
authored and
mihow
committed
feat: add AuthenticatedUsers global role and auto-assign on user signup

mohamedelabbas1996
authored and
mihow
committed
tests: added tests for model level permissions

mohamedelabbas1996
authored and
mihow
committed
feat: return model and object level permissions to the frontend

mohamedelabbas1996
authored and
mihow
committed
refactor: delegate collection-level permission handling to model

mohamedelabbas1996
authored and
mihow
committed
feat: added model level permissions for the taxon and processing service models

mohamedelabbas1996
authored and
mihow
committed
migration: added a migration to add all users to the AuthenticatedUsers group

mohamedelabbas1996
authored and
mihow
committed
tests: added tests for model level permissions for Project, Taxon and ProcessingService models

mohamedelabbas1996
authored and
mihow
committed
refactor: get_collection_level_permissions signature to match with get_permissions parameter order

mohamedelabbas1996
authored and
mihow
committed
refactor tests: extract shared permission helpers into BasePermissionTestCase to remove duplication

mohamedelabbas1996
authored and
mihow
committed
feat: added custom model level permissions for taxon and processing service models

mohamedelabbas1996
authored and
mihow
committed
fix: assign project manager role to the project owner when creating a project

mohamedelabbas1996
authored and
mihow
committed
feat: return custom model level permissions to frontend

mohamedelabbas1996
authored and
mihow
committed
fix: support multi-word custom actions

mohamedelabbas1996
authored and
mihow
committed
docs: added a doc string for Project.check_permission

mohamedelabbas1996
authored and
mihow
committed
refactor: rename AuthenticatedUsers to AuthorizedUser

mohamedelabbas1996
authored and
mihow
committed
migration: create model-level permissions in a single migration

mohamedelabbas1996
authored and
mihow
committed
test: added tests for custom model-level permissions

mohamedelabbas1996
authored and
mihow
committed
test: fix processing service endpoint url and assign_tags request payload

mohamedelabbas1996
authored and
mihow
committed
chore: rename m2m permission descriptions to indicate global scope

mohamedelabbas1996
authored and
mihow
committed
feat: grant AuthorizedUsers role default global model-level permissions for creating processing services, registering pipelines, creating taxa, and assigning tags

mohamedelabbas1996
authored and
mihow
committed
test: fixed tests

mohamedelabbas1996
authored and
mihow
committed
chore: move permission methods to PermissionsMixin

mohamedelabbas1996
authored and
mihow
committed
chore: changed chore: rename signal handler to assign_authorized_user_group

mohamedelabbas1996
authored and
mihow
committed
feat: add signal to synchronize global role group permissions

mohamedelabbas1996
authored and
mihow
committed
test: add test for automatic AuthorizedUser group assignment

mohamedelabbas1996
authored and
mihow
committed
feat: include "globally" in model-level permission names to clarify global scope

mohamedelabbas1996
authored and
mihow
committed
refactor: Refactored the _get_or_update_permission method to stop overriding existing

mohamedelabbas1996
authored and
mihow
committed
chore: add merge migration for main branch integration

mihow
and
claude
committed