orionis.auth.authorization.repository.DatabasePermissionRepository

THE ORIONIS API

Build with clarity.

Explore the building blocks of an async-first Python framework. Every module, class, and method — connected, searchable, and ready to build with.

Explore modules View classes

class documentation

class DatabasePermissionRepository(IPermissionRepository): (source)

Constructor: DatabasePermissionRepository(db)

View In Hierarchy

Load permissions and roles from the framework authorization tables.

Roles, direct permissions and role permissions are resolved in one UNION statement, once per request. No intermediate role-ID list can become stale between separate reads. Later checks use the snapshot.

Concurrency

The repository is stateless and safe to register as a singleton. It only issues read queries, so concurrent calls never interfere.

Method	`__directPermissionsOf`	Build the direct-permission arm of the authorization statement.
Method	`__init__`	Initialise the repository with the model-less query gateway.
Method	`__rolePermissionsOf`	Build inherited permissions constrained to the current owner's roles.
Method	`__rolesOf`	Build the role arm of the authorization statement.
Async Method	`loadFor`	Load the permissions and roles owned by an identity.
Class Variable	`__slots__`	Undocumented
Instance Variable	`__db`	Undocumented

def __directPermissionsOf(self, model_type: str, model_id: object) -> IRawQueryBuilder: (source) ¶

Build the direct-permission arm of the authorization statement.

Parameters
model_type:`str`	Polymorphic type stored in the pivot table.
model_id:`object`	Identifier stored in the pivot table.

Returns
`IRawQueryBuilder`	Query exposing direct permission names and their kind.

def __init__(self, db: IQueryBuilder): (source) ¶

Initialise the repository with the model-less query gateway.

Parameters
db:`IQueryBuilder`	Gateway used to build queries over the authorization tables.

Returns
`None`	The repository keeps only the injected gateway.

def __rolePermissionsOf(self, model_type: str, model_id: object) -> IRawQueryBuilder: (source) ¶

Build inherited permissions constrained to the current owner's roles.

Parameters
model_type:`str`	Stable polymorphic owner type.
model_id:`object`	Canonical identifier of the owner.

Returns
`IRawQueryBuilder`	Query exposing permissions from roles attached in this statement.

def __rolesOf(self, model_type: str, model_id: object) -> IRawQueryBuilder: (source) ¶

Build the role arm of the authorization statement.

Parameters
model_type:`str`	Polymorphic type stored in the pivot table.
model_id:`object`	Identifier stored in the pivot table.

Returns
`IRawQueryBuilder`	Query exposing role names tagged with their authorization kind.

async def loadFor(self, authorizable: IAuthorizable) -> tuple[frozenset[str], frozenset[str]]: (source) ¶

overrides orionis.auth.contracts.IPermissionRepository.loadFor

Load the permissions and roles owned by an identity.

Parameters
authorizable:`IAuthorizable`	Identity whose authorization must be resolved.

Returns
`tuple[frozenset[str], frozenset[str]]`	Effective permission names first, role names second.

__slots__: tuple[str, ...] = (source) ¶

overrides orionis.auth.contracts.IPermissionRepository.__slots__

Undocumented

__db = (source) ¶

Undocumented