ADUANASOFT/plantillas-proyectos
13
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Correcion con vite, borrar los print y mejorar la barra de manuales

Browse Source
This commit is contained in:
Kevin_Ramirez
2026-05-07 11:41:44 -05:00
parent d325218d27
commit beaf9b2f8e
5 changed files with 32 additions and 304 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
backend/core/security.py
View File

@@ -600,6 +600,10 @@ def validate_company_access(
.first()
)
if not company:
print(f"DEBUG: validate_company_access: No se encontró la compañía {company_id} para el tenant {tenant_id}")
logger.warning(f"validate_company_access: No se encontró la compañía {company_id} para el tenant {tenant_id}")
return company is not None
except Exception as e:
logger.error("Error validating company access: %s", e)
@@ -632,21 +636,18 @@ def validate_access_to_resource(
"""
tenant_id = resolve_effective_tenant_id_from_user(current_user)
print(f"DEBUG: validate_access_to_resource: tid={tenant_id} user={current_user.get('preferred_username')}")
# Admin global Keycloak / master: lista ``roles`` del Hub (/auth/me), con fallback JWT.
all_user_roles = collect_user_role_names(current_user)
is_keycloak_admin = "admin" in all_user_roles
print(f"DEBUG: validate_access_to_resource: is_admin={is_keycloak_admin} roles={all_user_roles}")
# 🚪 EXCEPCIÓN ESPECIAL: Si es el endpoint /me, permitimos el paso para el Bootstrap
# Detectamos si no se requieren permisos (típico de /me)
is_me_endpoint = required_permissions is None
print(f"DEBUG: validate_access_to_resource: is_me={is_me_endpoint} required={required_permissions}")
if not is_keycloak_admin and not is_me_endpoint:
if not validate_company_access(db, company_id, current_user):
print(f"DEBUG: validate_access_to_resource: ACCESO DENEGADO a cia {company_id}")
print(f"DEBUG: Acceso denegado a compañía {company_id}")
raise HTTPException(status_code=403, detail="Access denied to this company")
# Si no hay tenant_id, intentamos recuperarlo de la empresa
@@ -696,9 +697,7 @@ def validate_access_to_resource(
print(f"DEBUG: Error en auto-bootstrap de seguridad: {e}")
if not has_access:
print(f"DEBUG: validate_access_to_resource: PERMISO DENEGADO. Faltan: {required_permissions}")
print(f"DEBUG: Permiso denegado. Faltan: {required_permissions}")
raise HTTPException(status_code=403, detail="Permission denied")
print(f"DEBUG: validate_access_to_resource: ACCESO CONCEDIDO")
return tenant_id or 1