feat: add functions set permissions endpoint

Author: giancarloromeo

packages/models-library/src/models_library/api_schemas_webserver/functions.py

@@ -149,3 +149,9 @@ class ProjectFunctionToRegister(ProjectFunction, InputSchema): ...
 
 
 class RegisteredFunctionUpdate(FunctionUpdate, InputSchema): ...
+
+
+class FunctionGroupUpdate(InputSchema):
+    read: bool
+    write: bool
+    execute: bool

services/web/server/src/simcore_service_webserver/functions/_controller/_functions_rest.py

@@ -3,6 +3,7 @@
 from aiohttp import web
 from models_library.api_schemas_webserver.functions import (
     Function,
+    FunctionGroupUpdate,
     FunctionToRegister,
     RegisteredFunction,
     RegisteredFunctionGet,
@@ -12,6 +13,7 @@
 from models_library.functions import (
     FunctionAccessRights,
     FunctionClass,
+    FunctionGroupAccessRights,
     FunctionID,
     RegisteredProjectFunction,
     RegisteredSolverFunction,
@@ -41,6 +43,7 @@
 from ._functions_rest_exceptions import handle_rest_requests_exceptions
 from ._functions_rest_schemas import (
     FunctionGetQueryParams,
+    FunctionGroupPathParams,
     FunctionPathParams,
     FunctionsListQueryParams,
 )
@@ -356,6 +359,43 @@ async def delete_function(request: web.Request) -> web.Response:
     return web.json_response(status=status.HTTP_204_NO_CONTENT)
 
 
+#
+# /functions/{function_id}/groups/*
+#
+
+
+@routes.put(
+    f"/{VTAG}/functions/{{function_id}}/groups/{{group_id}}",
+    name="update_function_group",
+)
+@login_required
+@permission_required("function.write")
+@handle_rest_requests_exceptions
+async def update_function_group(request: web.Request) -> web.Response:
+    path_params = parse_request_path_parameters_as(FunctionGroupPathParams, request)
+    function_id = path_params.function_id
+    group_id = path_params.group_id
+
+    req_ctx = AuthenticatedRequestContext.model_validate(request)
+
+    function_group_update = FunctionGroupUpdate.model_validate(await request.json())
+
+    await _functions_service.set_function_group_permissions(
+        request.app,
+        user_id=req_ctx.user_id,
+        product_name=req_ctx.product_name,
+        function_id=function_id,
+        permissions=FunctionGroupAccessRights(
+            group_id=group_id,
+            read=function_group_update.read,
+            write=function_group_update.write,
+            execute=function_group_update.execute,
+        ),
+    )
+
+    return web.json_response(status=status.HTTP_202_ACCEPTED)
+
+
 #
 # /me/* endpoints
 #

services/web/server/src/simcore_service_webserver/functions/_controller/_functions_rest_schemas.py

@@ -1,4 +1,5 @@
 from models_library.functions import FunctionID
+from models_library.groups import GroupID
 from models_library.rest_pagination import PageQueryParameters
 from pydantic import BaseModel, ConfigDict
 
@@ -12,6 +13,10 @@ class FunctionPathParams(BaseModel):
     model_config = ConfigDict(populate_by_name=True, extra="forbid")
 
 
+class FunctionGroupPathParams(FunctionPathParams):
+    group_id: GroupID
+
+
 class _FunctionQueryParams(BaseModel):
     include_extras: bool = False