Re-wire vfolder invitation to RBAC ops scope membership functions
Open
- Dominant language
- Python
- Stars
- 670
- Forks
- 183
- Avg merge
- 17h 7m
- Merged PRs (30d)
- 358
Description
Accepting a vfolder invitation currently grants access via VFolderPermissionRow and RBACGranter only, without touching the Virtual Scope chain. Re-wire the invitation acceptance flow to use the RBAC ops scope-assignment functions so the shared vfolder is recorded as an entity_membership in the invitee's virtual scope with a permission_cap, alongside the legacy rows.
JIRA Issue: BA-7202
Contributor guide
Research direction
Start by tracing the vfolder invitation acceptance entry point and its existing VFolderPermissionRow and RBACGranter calls. Locate the RBAC ops scope-assignment functions, then verify that acceptance records the shared vfolder as an entity_membership with a permission_cap while retaining the legacy rows.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- authorization, backend
- Issue type
- Refactor
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 52/100