justin
dffd05d303
Wires the data model through repository -> service -> API/v1. The privacy engine (app/services/privacy.py) is the single enforcement point: every read resolves visibility there (tree role, tree visibility, per-person override; living-person redaction is a marked Phase 2 TODO). All writes record an attributable AuditEntry.
Endpoints: POST /users (open dev bootstrap until auth), GET /users/me, POST/GET /trees, GET /trees/{id}, and POST/GET /trees/{id}/persons. Authn is a temporary X-User-Id header shim; authz is membership-based (owner/editor/viewer). Domain errors map to 401/403/404/409. Verified on the deploy target: private tree -> 403 for non-members, missing actor -> 401, audit log populated.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Signed-off-by: Justin Paul <justin@jpaul.me>
28 lines
630 B
Python
28 lines
630 B
Python
import uuid
|
|
from datetime import datetime
|
|
|
|
from pydantic import BaseModel, ConfigDict
|
|
|
|
from app.models.enums import PersonPrivacy
|
|
|
|
|
|
class PersonCreate(BaseModel):
|
|
given: str | None = None
|
|
surname: str | None = None
|
|
gender: str | None = None
|
|
is_living: bool | None = None
|
|
privacy: PersonPrivacy = PersonPrivacy.inherit
|
|
notes: str | None = None
|
|
|
|
|
|
class PersonRead(BaseModel):
|
|
model_config = ConfigDict(from_attributes=True)
|
|
|
|
id: uuid.UUID
|
|
tree_id: uuid.UUID
|
|
primary_name: str | None = None
|
|
gender: str | None
|
|
is_living: bool | None
|
|
privacy: PersonPrivacy
|
|
created_at: datetime
|