raystack / frontier / 26392678264

43%

main: 43%

Build Type

Pull #1648

github

Committed by AmanGIT07

Commit Message

refactor(project): migrate ListByUser callers to membership, delete legacy method

Switches every reader of "projects a principal sees" off `project.Service.ListByUser`
(SpiceDB `LookupResources` + repo enrichment + intersectPATScope) onto Postgres policy
reads via `membership.Service.ListProjectsByPrincipal`. Adds `project.Filter.Principal`
so the composition lives inside `Service.List` instead of the handler. Three handler
call sites and two internal callers migrated; old `ListByUser`, `listNonInheritedProjectIDs`,
`intersectPATScope`, and the project service's `RelationService.LookupResources`
dependency are deleted. Hardens `policy.Service.List` to refuse principal-narrowed
filters with empty PrincipalID, closing a mass-disclosure path exposed by the move
from SpiceDB to policy reads.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Pull Request Pull Request #1648: refactor(project): migrate ListByUser callers to membership, delete legacy method

Coverage Stats

46 of 51 new or added lines in 10 files covered. (90.2%)

2 existing lines in 1 file now uncovered.

16209 of 37854 relevant lines covered (42.82%)

11.98 hits per line