[FEATURE]: Custom Access Validation

Author: amadolid

jac-cloud/jac_cloud/plugin/jaseci.py

@@ -135,10 +135,10 @@ def restrict(architype: Architype) -> None:
 
     @staticmethod
     @hookimpl
-    def check_access_level(to: Anchor) -> AccessLevel:
+    def check_access_level(to: Anchor, no_custom: bool) -> AccessLevel:
         """Access validation."""
         if not FastAPI.is_enabled():
-            return JacFeatureImpl.check_access_level(to=to)
+            return JacFeatureImpl.check_access_level(to=to, no_custom=no_custom)
 
         if not to.persistent:
             return AccessLevel.WRITE
@@ -155,6 +155,12 @@ def check_access_level(to: Anchor) -> AccessLevel:
         if jroot == jctx.system_root or jroot.id == to.root or jroot == to:
             return AccessLevel.WRITE
 
+        if (
+            not no_custom
+            and (custom_level := to.architype.__jac_access__()) is not None
+        ):
+            return AccessLevel.cast(custom_level)
+
         access_level = AccessLevel.NO_ACCESS
 
         # if target anchor have set access.all

jac-cloud/jac_cloud/tests/openapi_specs.yaml

@@ -530,6 +530,15 @@ components:
       - object_id
       title: update_custom_object_body_model
       type: object
+    update_nested_node_access_body_model:
+      properties:
+        access:
+          anyOf:
+          - type: string
+          - type: 'null'
+          title: Access
+      title: update_nested_node_access_body_model
+      type: object
   securitySchemes:
     APIKeyHeader:
       in: header
@@ -4022,6 +4031,75 @@ paths:
       summary: /update_nested_node/{node}
       tags:
       - walker
+  /walker/update_nested_node_access:
+    post:
+      operationId: api_root_walker_update_nested_node_access_post
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/update_nested_node_access_body_model'
+        required: true
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                anyOf:
+                - $ref: '#/components/schemas/ContextResponse_NoneType_'
+                - {}
+                title: Response Api Root Walker Update Nested Node Access Post
+          description: Successful Response
+        '422':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/HTTPValidationError'
+          description: Validation Error
+      security:
+      - HTTPBearer: []
+      summary: /update_nested_node_access
+      tags:
+      - walker
+  /walker/update_nested_node_access/{node}:
+    post:
+      operationId: api_entry_walker_update_nested_node_access__node__post
+      parameters:
+      - in: path
+        name: node
+        required: true
+        schema:
+          anyOf:
+          - type: string
+          - type: 'null'
+          title: Node
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/update_nested_node_access_body_model'
+        required: true
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                anyOf:
+                - $ref: '#/components/schemas/ContextResponse_NoneType_'
+                - {}
+                title: Response Api Entry Walker Update Nested Node Access  Node  Post
+          description: Successful Response
+        '422':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/HTTPValidationError'
+          description: Validation Error
+      security:
+      - HTTPBearer: []
+      summary: /update_nested_node_access/{node}
+      tags:
+      - walker
   /walker/visit_nested_node:
     post:
       operationId: api_root_walker_visit_nested_node_post

jac-cloud/jac_cloud/tests/simple_graph.jac

@@ -72,7 +72,11 @@ obj Parent:Child: {
 }
 
 node Nested {
-    has val: int, arr: list[int], json: dict[str, int], parent: Parent, enum_field: Enum;
+    has val: int, arr: list[int], json: dict[str, int], parent: Parent, enum_field: Enum, access: str | None = None;
+
+    can __jac_access__ {
+        return self.access;
+    }
 }
 
 walker create_graph {
@@ -205,6 +209,15 @@ walker update_nested_node {
     }
 }
 
+walker update_nested_node_access {
+    has access: str | None = None;
+
+    can enter_nested with Nested entry {
+        here.access = self.access;
+        return here;
+    }
+}
+
 walker detach_nested_node {
     can enter_root with `root entry {
         report here del--> [-->(`?Nested)];