fix(BA-2832): Seperate permission group DTOs based on whether relationship data load is needed (#6415)

Author: seedspirit

changes/6451.enhance.md

@@ -0,0 +1 @@
+Introduced separate DTOs for permission groups(`PermissionGroupExtendedData`, `PermissionGroupData`) to conditionally load relationship data and prevent lazy loading errors

src/ai/backend/manager/data/permission/permission_group.py

@@ -28,4 +28,11 @@ class PermissionGroupData:
     role_id: uuid.UUID
     scope_id: ScopeId
 
+
+@dataclass
+class PermissionGroupExtendedData:
+    id: uuid.UUID
+    role_id: uuid.UUID
+    scope_id: ScopeId
+
     permissions: list[PermissionData]

src/ai/backend/manager/data/permission/role.py

@@ -12,7 +12,10 @@
     ObjectPermissionCreateInputBeforeRoleCreation,
     ObjectPermissionData,
 )
-from .permission_group import PermissionGroupCreatorBeforeRoleCreation, PermissionGroupData
+from .permission_group import (
+    PermissionGroupCreatorBeforeRoleCreation,
+    PermissionGroupExtendedData,
+)
 from .status import RoleStatus
 from .types import EntityType, OperationType, RoleSource
 
@@ -73,7 +76,7 @@ class RoleDataWithPermissions:
     source: RoleSource
     status: RoleStatus
 
-    permission_groups: list[PermissionGroupData]
+    permission_groups: list[PermissionGroupExtendedData]
     object_permissions: list[ObjectPermissionData]
 
     created_at: datetime

src/ai/backend/manager/models/rbac_models/permission/permission_group.py

@@ -10,6 +10,7 @@
 from ai.backend.manager.data.permission.permission_group import (
     PermissionGroupCreator,
     PermissionGroupData,
+    PermissionGroupExtendedData,
 )
 from ai.backend.manager.data.permission.types import (
     ScopeType,
@@ -73,5 +74,12 @@ def to_data(self) -> PermissionGroupData:
             id=self.id,
             role_id=self.role_id,
             scope_id=ScopeId(scope_type=self.scope_type, scope_id=self.scope_id),
+        )
+
+    def to_extended_data(self) -> PermissionGroupExtendedData:
+        return PermissionGroupExtendedData(
+            id=self.id,
+            role_id=self.role_id,
+            scope_id=ScopeId(scope_type=self.scope_type, scope_id=self.scope_id),
             permissions=[permission.to_data() for permission in self.permission_rows],
         )

src/ai/backend/manager/models/rbac_models/role.py

@@ -104,7 +104,7 @@ def to_data_with_permissions(self) -> RoleDataWithPermissions:
             updated_at=self.updated_at,
             deleted_at=self.deleted_at,
             description=self.description,
-            permission_groups=[pg_row.to_data() for pg_row in self.permission_group_rows],
+            permission_groups=[pg_row.to_extended_data() for pg_row in self.permission_group_rows],
             object_permissions=[op_row.to_data() for op_row in self.object_permission_rows],
         )