how to set permissions or roles to active @permission_required or @role_required?

[ockan]

how to set permissions or roles to active @permission_required or @role_required?

[cookesan]

The decorators read the values from the logged-in current_user object.

For roles, use the plural decorator roles_required(...). It checks current_user.roles first. If that is missing, it falls back to current_user.role and wraps that single value as a list.

For permissions, permission_required(...) checks current_user.permissions. That can be a list/set-like value, or a callable that returns the permissions.

Example:

from bustapi.auth import BaseUser, roles_required, permission_required

class User(BaseUser):
    def __init__(self, id):
        self.id = id
        self.role = "admin"
        self.permissions = ["posts:delete", "users:read"]

@app.get("/admin")
@roles_required("admin")
def admin():
    return {"ok": True}

@app.post("/posts/delete")
@permission_required("posts:delete")
def delete_post():
    return {"deleted": True}

The important part is that your user_loader returns a user object with those attributes after login.

[ockan]

this method perhaps cause the circular import