feat(BA-4865): Apply RBAC validator infrastructure to Session actions#9624

Merged

fregataa merged 10 commits into

mainfrom

feature/BA-2946-apply-rbac-validator-to-session

Mar 20, 2026

Commits on Mar 20, 2026

feat(BA-2946): Apply RBAC validator infrastructure to Session actions

fregataa
and
claude
committed
changelog: add news fragment for PR #9624
fregataa
committed
refactor(BA-2946): move RBAC methods to base classes and fix validation

fregataa
and
claude
committed
refactor(BA-2946): derive scope from business logic, remove _scope_type/_scope_id fields

fregataa
and
claude
committed
fix(BA-2946): add user_id to SessionScopeAction calls in API handlers

fregataa
and
claude
committed
refactor(BA-2946): remove single entity actions, keep scope actions only

fregataa
and
claude
committed
feat(BA-2946): connect RBAC validators to SessionProcessors

fregataa
and
claude
committed
fix(BA-2946): fix misleading SessionScopeAction docstring

fregataa
and
claude
committed
fix(BA-2946): add missing user_id args and fix session_uuid rename in tests

fregataa
and
claude
committed
fix(BA-2946): set up user context in dataloader tests for RBAC

fregataa
and
claude
committed