Entity lists

[martastain]

No description provided.

[martastain]

List ACL idea:
Every list will have "access" field, containing {user: accessLevel} dictionary. Access level is a simple integer

class ListAccessLevel(IntEnum):
    READ = 10 # Can view the list and its items
    UPDATE = 20 # Can update attributes of the list items
    CONSTRUCT = 30 # Can add/remove items from the list or materialize new items
    ADMIN = 40 # Can update/delete the list itself and add new users to the list

So all checks could be performed like:

if entity_list.access.get(user.name, 0) < 30: 
    raise ForbiddenException("You cannot update this list's items")