test(BA-5797): add repository unit tests for resolve_effective_permissions

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: fregataa

src/ai/backend/manager/data/permission/role.py

@@ -1,6 +1,7 @@
 from __future__ import annotations
 
 import uuid
+from collections.abc import Mapping
 from dataclasses import dataclass, field
 from datetime import datetime
 
@@ -113,7 +114,7 @@ class EffectivePermissionsInput:
 class EffectivePermissionsResult:
     """Mapping from entity ID to the set of operations the user is authorized to perform."""
 
-    permissions: dict[str, set[OperationType]]
+    permissions: Mapping[str, set[OperationType]]
 
 
 @dataclass(frozen=True)

src/ai/backend/manager/repositories/permission_controller/db_source/db_source.py

@@ -1,5 +1,6 @@
 import logging
 import uuid
+from collections import defaultdict
 from collections.abc import Collection, Iterable, Sequence
 from dataclasses import dataclass, field
 from typing import Any, cast
@@ -1164,7 +1165,7 @@ async def resolve_effective_permissions(
 
         combined_query = sa.union_all(scope_chain_query, self_scope_query)
 
-        permissions: dict[str, set[OperationType]] = {eid: set() for eid in data.target_entity_ids}
+        permissions: defaultdict[str, set[OperationType]] = defaultdict(set)
         async with self._db.begin_readonly_session_read_committed() as db_session:
             result = await db_session.execute(combined_query)
             for row in result:

src/ai/backend/manager/services/permission_contoller/actions/resolve_effective_permissions.py

@@ -1,5 +1,6 @@
 from __future__ import annotations
 
+from collections.abc import Mapping
 from dataclasses import dataclass, field
 from typing import override
 from uuid import UUID
@@ -38,7 +39,7 @@ def operation_type(cls) -> ActionOperationType:
 class ResolveEffectivePermissionsActionResult(BaseActionResult):
     """Result containing the effective permissions per entity."""
 
-    permissions: dict[str, set[OperationType]] = field(default_factory=dict)
+    permissions: Mapping[str, set[OperationType]] = field(default_factory=dict)
 
     @override
     def entity_id(self) -> str | None: