refac

2026-07-14 00:42:57 -04:00
parent caa2457c17
commit 4ed19d504b
2 changed files with 21 additions and 0 deletions
@@ -253,6 +253,23 @@ async def filter_allowed_access_grants(
    ):
        access_grants = strip_user_access_grants(access_grants)

+    if any(
+        (grant.get('principal_type') if isinstance(grant, dict) else getattr(grant, 'principal_type', None))
+        == 'group'
+        for grant in access_grants
+    ) and not await has_permission(
+        user_id,
+        'access_grants.allow_groups',
+        default_permissions,
+        db=db,
+    ):
+        access_grants = [
+            grant
+            for grant in access_grants
+            if (grant.get('principal_type') if isinstance(grant, dict) else getattr(grant, 'principal_type', None))
+            != 'group'
+        ]
+
    return access_grants