raystack / frontier
43%
main: 47%

Repo Added 27 Jul 2023 06:58AM UTC

Token xRqMBdQBcqmLktLNAeQpRpj0YfJbkFc6Q regen

Build 5440 Last

Committed 10 Jun 2026 09:33AM UTC coverage: 43.281% (-0.09%) from 43.371%

Committed by

Commit Message

fix(permission): cascade role->permission tuple cleanup on delete

permission.Delete only removed the DB row. Every role granting the
permission keeps app/role:<role>#<slug>@<*> tuples (one per principal
type), so deleting a permission left those tuples dangling on a relation no
longer backed by any permission row. The method was also unreachable: the
DeletePermission RPC was hardwired to "function not available".

Changes:
- permission.Service gains a relation dependency and, on Delete, sweeps the
  role->permission tuples by object-namespace (app/role) + relation-name
  (the permission slug), clearing them across all roles and principal types
  before removing the row. Tolerates ErrNotExist for unused permissions.
- Implement the DeletePermission admin handler and gate it on superuser
  (previously returned CodeUnavailable), making the guard reachable and
  giving the data-cleanup effort a way to remove stray permissions.

Adds an e2e regression test: create a permission, build a role on it,
delete the permission, assert no role->permission tuple remains. Verified
it fails without the sweep (tuple lingers) and passes with it.

Refs #1661

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Coverage Stats

28 of 152 new or added lines in 8 files covered. (18.42%)

16077 of 37146 relevant lines covered (43.28%)

12.3 hits per line

37146 RELEVANT LINES 16077 COVERED LINES

12.3 HITS PER LINE

Builds	Branch	Commit	Type	Ran	Committer	Via	Coverage
27267132511	fix/permission-delete-cascade	fix(permission): cascade role->permission tuple cleanup on delete permission.Delete only removed the DB row. Every role granting the permission keeps app/role:<role>#<slug>@<*> tuples (one per principal type), so deleting a permission left those ...	Pull #1685	10 Jun 2026 09:46AM UTC	whoAbhishekSah	github	43.28
27266860116	fix/permission-delete-cascade	fix(permission): cascade role->permission tuple cleanup on delete permission.Delete only removed the DB row. Every role granting the permission keeps app/role:<role>#<slug>@<*> tuples (one per principal type), so deleting a permission left those ...	Pull #1685	10 Jun 2026 09:34AM UTC	whoAbhishekSah	github	43.28
27264140381	fix/permission-delete-cascade	fix(permission): cascade role->permission tuple cleanup on delete permission.Delete only removed the DB row. Every role granting the permission keeps app/role:<role>#<slug>@<*> tuples (one per principal type), so deleting a permission left those ...	Pull #1685	10 Jun 2026 08:45AM UTC	whoAbhishekSah	github	43.28
27263960681	fix/permission-delete-cascade	fix(permission): cascade role->permission tuple cleanup on delete permission.Delete only removed the DB row. Every role granting the permission keeps app/role:<role>#<slug>@<*> tuples (one per principal type), so deleting a permission left those ...	Pull #1685	10 Jun 2026 08:41AM UTC	whoAbhishekSah	github	43.28
27263917606	fix/permission-delete-cascade	fix(permission): cascade role->permission tuple cleanup on delete permission.Delete only removed the DB row. Every role granting the permission keeps app/role:<role>#<slug>@<*> tuples (one per principal type), so deleting a permission left those ...	Pull #1685	10 Jun 2026 08:40AM UTC	whoAbhishekSah	github	43.28
27262982337	fix/permission-delete-cascade	fix(permission): cascade role->permission tuple cleanup on delete permission.Delete only removed the DB row. Every role granting the permission keeps app/role:<role>#<slug>@<*> tuples (one per principal type), so deleting a permission left those ...	Pull #1685	10 Jun 2026 08:23AM UTC	whoAbhishekSah	github	43.28
27262800362	fix/permission-delete-cascade	fix(permission): cascade role->permission tuple cleanup on delete permission.Delete only removed the DB row. Every role granting the permission keeps app/role:<role>#<slug>@<*> tuples (one per principal type), so deleting a permission left those ...	Pull #1685	10 Jun 2026 08:19AM UTC	whoAbhishekSah	github	43.28
27261720552	fix/permission-delete-cascade	fix(permission): cascade role->permission tuple cleanup on delete permission.Delete only removed the DB row. Every role granting the permission keeps app/role:<role>#<slug>@<*> tuples (one per principal type), so deleting a permission left those ...	Pull #1685	10 Jun 2026 07:59AM UTC	whoAbhishekSah	github	43.28
27261131080	fix/permission-delete-cascade	fix(permission): cascade role->permission tuple cleanup on delete permission.Delete only removed the DB row. Every role granting the permission keeps app/role:<role>#<slug>@<*> tuples (one per principal type), so deleting a permission left those ...	Pull #1685	10 Jun 2026 07:47AM UTC	whoAbhishekSah	github	43.29
27198032949	fix/permission-delete-cascade	fix(permission): cascade role->permission tuple cleanup on delete permission.Delete only removed the DB row. Every role granting the permission keeps app/role:<role>#<slug>@<*> tuples (one per principal type), so deleting a permission left those ...	Pull #1685	09 Jun 2026 09:54AM UTC	whoAbhishekSah	github	43.21

raystack / frontier
43%
main: 47%

raystack / frontier 43% main: 47%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

CHANGE BRANCH x

Relevant lines Covered

Source Files on fix/permission-delete-cascade

Recent builds

raystack / frontier
43%
main: 47%

README BADGES
x

CHANGE BRANCH
x