Merge branch 'main' into fix/validate-total-attachment-size

Author: whabanks

app/models.py

@@ -1081,6 +1081,7 @@ class ApiKeyPermission(StrEnum):
     """
 
     MANAGE_TEMPLATES = "manage_templates"
+    MANAGE_REPORTS = "manage_reports"
 
 
 API_KEY_PERMISSION_TYPES: frozenset[str] = frozenset(p.value for p in ApiKeyPermission)

tests/app/dao/test_api_key_dao.py

@@ -16,7 +16,7 @@
     update_compromised_api_key_info,
     update_last_used_api_key,
 )
-from app.models import KEY_TYPE_NORMAL, ApiKey
+from app.models import API_KEY_PERMISSION_TYPES, KEY_TYPE_NORMAL, ApiKey, ApiKeyPermission
 from tests.app.db import create_api_key
 from tests.conftest import set_signer_secret_key
 
@@ -286,6 +286,13 @@ def test_can_persist_and_round_trip_known_permission(self, sample_service):
         fetched = ApiKey.query.get(api_key.id)
         assert fetched.permissions == ["manage_templates"]
 
+    def test_can_persist_and_round_trip_manage_reports_permission(self, sample_service):
+        assert "manage_reports" in API_KEY_PERMISSION_TYPES
+        api_key = self._make_key(sample_service, permissions=[ApiKeyPermission.MANAGE_REPORTS])
+        fetched = ApiKey.query.get(api_key.id)
+        assert fetched.permissions == ["manage_reports"]
+        assert fetched.has_permission("manage_reports") is True
+
     def test_unknown_permission_is_rejected(self, sample_service):
         with pytest.raises(ValueError, match="Invalid api key permission"):
             self._make_key(sample_service, permissions=["not_a_real_permission"])