Add query parameters for related entities on GET permissions

This adds optional filter query parameters, mirroring the existing `GET
/proposals` filtering pattern on Context entity, `changemaker`,
`funder`, `dataProvider`, `proposal` and Grantee, `granteeType` and
`verb`. This means adding a dataprovider parameters extractor, a
granteeType, and a verb extractor method.

Issue #2447 Add filtering to permission grant queries

Author: hminsky2002

CHANGELOG.md

@@ -22,6 +22,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - `PUT /permissionGrants/:permissionGrantId` now returns `403` (instead of `401`) when an authenticated user lacks permission to manage permission grants on the specified context entity, and `404` when that context entity cannot be viewed or does not exist.
 - `POST /applicationForms` now returns `403` (instead of `401`) when an authenticated user lacks permission on the associated opportunity, and `404` (instead of `422`) when that opportunity cannot be viewed or does not exist.
 - `PATCH /applicationFormFields/:applicationFormFieldId` now returns `403` (instead of `401`) when an authenticated user lacks edit permission on the field's application form.
+### Changed
+
+- `GET /permissionGrants` now accepts optional filter query parameters: `changemaker`, `funder`, `dataProvider`, and `proposal` to filter by context entity, and `granteeType` and `verb` to filter by grantee.
 
 ## 0.38.0 2026-06-12
 

src/__tests__/applicationForms.int.test.ts

@@ -822,6 +822,12 @@ describe('/applicationForms', () => {
 			const grants = await loadPermissionGrantBundle(
 				db,
 				getAuthContext(systemUser, true),
+				undefined,
+				undefined,
+				undefined,
+				undefined,
+				undefined,
+				undefined,
 				NO_LIMIT,
 				NO_OFFSET,
 			);

src/__tests__/bulkUploadTasks.int.test.ts

@@ -567,6 +567,12 @@ describe('/tasks/bulkUploads', () => {
 			const grants = await loadPermissionGrantBundle(
 				db,
 				getAuthContext(systemUser, true),
+				undefined,
+				undefined,
+				undefined,
+				undefined,
+				undefined,
+				undefined,
 				NO_LIMIT,
 				NO_OFFSET,
 			);

src/__tests__/changemakerFieldValues.int.test.ts

@@ -121,6 +121,12 @@ describe('POST /changemakerFieldValues', () => {
 		const grants = await loadPermissionGrantBundle(
 			db,
 			getAuthContext(systemUser, true),
+			undefined,
+			undefined,
+			undefined,
+			undefined,
+			undefined,
+			undefined,
 			NO_LIMIT,
 			NO_OFFSET,
 		);

src/__tests__/changemakers.int.test.ts

@@ -1126,6 +1126,12 @@ describe('/changemakers', () => {
 			const grants = await loadPermissionGrantBundle(
 				db,
 				getAuthContext(systemUser, true),
+				undefined,
+				undefined,
+				undefined,
+				undefined,
+				undefined,
+				undefined,
 				NO_LIMIT,
 				NO_OFFSET,
 			);

src/__tests__/dataProviders.int.test.ts

@@ -203,6 +203,12 @@ describe('/dataProviders', () => {
 			const grants = await loadPermissionGrantBundle(
 				db,
 				getAuthContext(systemUser, true),
+				undefined,
+				undefined,
+				undefined,
+				undefined,
+				undefined,
+				undefined,
 				NO_LIMIT,
 				NO_OFFSET,
 			);
@@ -230,6 +236,12 @@ describe('/dataProviders', () => {
 			const before = await loadPermissionGrantBundle(
 				db,
 				systemUserAuthContext,
+				undefined,
+				undefined,
+				undefined,
+				undefined,
+				undefined,
+				undefined,
 				NO_LIMIT,
 				NO_OFFSET,
 			);
@@ -242,6 +254,12 @@ describe('/dataProviders', () => {
 			const after = await loadPermissionGrantBundle(
 				db,
 				systemUserAuthContext,
+				undefined,
+				undefined,
+				undefined,
+				undefined,
+				undefined,
+				undefined,
 				NO_LIMIT,
 				NO_OFFSET,
 			);

src/__tests__/funders.int.test.ts

@@ -492,6 +492,12 @@ describe('/funders', () => {
 			const grants = await loadPermissionGrantBundle(
 				db,
 				getAuthContext(systemUser, true),
+				undefined,
+				undefined,
+				undefined,
+				undefined,
+				undefined,
+				undefined,
 				NO_LIMIT,
 				NO_OFFSET,
 			);
@@ -521,6 +527,12 @@ describe('/funders', () => {
 			const before = await loadPermissionGrantBundle(
 				db,
 				systemUserAuthContext,
+				undefined,
+				undefined,
+				undefined,
+				undefined,
+				undefined,
+				undefined,
 				NO_LIMIT,
 				NO_OFFSET,
 			);
@@ -533,6 +545,12 @@ describe('/funders', () => {
 			const after = await loadPermissionGrantBundle(
 				db,
 				systemUserAuthContext,
+				undefined,
+				undefined,
+				undefined,
+				undefined,
+				undefined,
+				undefined,
 				NO_LIMIT,
 				NO_OFFSET,
 			);

src/__tests__/opportunities.int.test.ts

@@ -364,6 +364,12 @@ describe('/opportunities', () => {
 			const grants = await loadPermissionGrantBundle(
 				db,
 				getAuthContext(systemUser, true),
+				undefined,
+				undefined,
+				undefined,
+				undefined,
+				undefined,
+				undefined,
 				NO_LIMIT,
 				NO_OFFSET,
 			);