feat(security): implement permission checks in tenant CRUD routes and enhance API error handling

2026-01-14 17:34:02 -06:00
parent 4f38328031
commit 86e1f7e8f6
13 changed files with 346 additions and 202 deletions
--- a/backend/api/v1/modules/a76/invoices/routes.py
+++ b/backend/api/v1/modules/a76/invoices/routes.py
@@ -20,9 +20,14 @@ invoice_crud = TenantCRUDRoutes(
    tags=[],
    resource_name="Invoice",
    id_name="invoice_id",
-    id_type=int,
+    id_type=int,    
    enable_list=True,  # Enable list endpoint with pagination
    enable_filters=True,  # Enable filters for status, operation_type, etc.
+    list_permissions=[],
+    get_permissions=[],
+    create_permissions=[],
+    update_permissions=[],
+    delete_permissions=[],
    default_page_size=50,
    max_page_size=200,
 )