Add HTML5 object access context

services/api-server/src/api_server/html5.py

@@ -316,7 +316,12 @@ def render_html5_review(project_id: str, findings: list[dict] | None) -> str:
     """
 
 
-def render_html5_object_context(project_id: str, schema: object | None, impact: object | None) -> str:
+def render_html5_object_context(
+    project_id: str,
+    schema: object | None,
+    impact: object | None,
+    access: object | None = None,
+) -> str:
     if schema is None or impact is None:
         return f"""
         <div class="object-context" data-html5-object-context>
@@ -333,6 +338,7 @@ def render_html5_object_context(project_id: str, schema: object | None, impact:
     forms = getattr(impact, "forms", []) or []
     roles = getattr(impact, "roles", []) or []
     jobs = getattr(impact, "jobs", []) or []
+    grants = getattr(access, "grants", []) if access is not None else []
     return f"""
     <div class="object-context" data-html5-object-context data-html5-object-name="{escape(str(name))}">
       <div class="panel-title">Object context</div>
@@ -346,11 +352,12 @@ def render_html5_object_context(project_id: str, schema: object | None, impact:
         {_metric("Modules", len(modules))}
         {_metric("Routines", len(routines))}
         {_metric("Forms", len(forms))}
-        {_metric("Roles", len(roles))}
+        {_metric("Roles", len(grants) or len(roles))}
       </dl>
       <div class="compact-list">
         {''.join(_named_node_item("attr", item) for item in attributes[:6]) or '<p class="muted padded">Реквизиты не найдены</p>'}
         {''.join(_tabular_section_item(item) for item in sections[:4])}
+        {''.join(_role_access_item(item) for item in grants[:6])}
         {''.join(_named_node_item("routine", item) for item in routines[:6])}
         {''.join(_named_node_item("job", item) for item in jobs[:4])}
       </div>
@@ -1366,6 +1373,24 @@ def _tabular_section_item(section: object) -> str:
     """
 
 
+def _role_access_item(grant: object) -> str:
+    role = getattr(grant, "role", None)
+    permissions = getattr(grant, "permissions", {}) or {}
+    role_name = getattr(role, "qualified_name", None) or getattr(role, "name", "role")
+    enabled = [
+        str(key)
+        for key, value in sorted(permissions.items())
+        if str(value).lower() in {"true", "1", "yes", "да"}
+    ]
+    permission_text = ", ".join(enabled) if enabled else "permissions unavailable"
+    return f"""
+    <article class="object-context-item" data-html5-object-context-item="role-access">
+      <strong>{escape(str(role_name))}</strong>
+      <small>{escape(permission_text)}</small>
+    </article>
+    """
+
+
 def _authoring_diff_item(line: object) -> str:
     kind = str(getattr(line, "kind", ""))
     text = str(getattr(line, "text", ""))