[PP-3772] Add patron blocking rules per library#3090

Open

dbernstein wants to merge 31 commits intomainfrom

feature/PP-3772-Add-patron-blocking-rules-per-library

Commits on Mar 16, 2026

Add per-library patron blocking rules to SIP2 LibrarySettings (PP-3772)
dbernstein
committed
Refactor to push patron blocks up the inheritance stack.
dbernstein
committed
Add rules engine
dbernstein
committed
Tie patron blocking rules data into the rules engine.
dbernstein
committed
* rule_engine.py — Richer error messages:
dbernstein
committed
* Deprecated code removed
dbernstein
committed
Add int() as an allowable function to the simpleeval rules engine.
dbernstein
committed
Add documentation for functions available for building patron blocking rules.
dbernstein
committed
Fix syntactic error introduced accidentally during the manual merge process.
dbernstein
committed
Fix linting errors.
dbernstein
committed
Update lock file.
dbernstein
committed
Adds backend support for front end rule validations before saving:
dbernstein
committed
Fix mypy
dbernstein
committed
Add test coverage to fetch_live_rule_validation_values
dbernstein
committed
Remove inline imports.
dbernstein
committed
Fix lock file.
dbernstein
committed
Remove in-method imports.
dbernstein
committed
Add simpleeval to toml.
dbernstein
committed
Remove divider comment blocks from rules_engine.py.
dbernstein
committed
Convert docstrings to reST from google.
dbernstein
committed
Replace _sip2_thread_local with explicit RemoteAuthResult API
dbernstein
committed
Remove stale comment.
dbernstein
committed
Wire validate_message into patron blocking rules validation
dbernstein
committed
Add validation when supports_patron_blocking_rules is False
dbernstein
committed
Replace SIP2-specific checks with supports_patron_blocking_rules (OCP)
dbernstein
committed
Unify evaluator lifecycle between admin validation and runtime (#9)
dbernstein
committed
Rename tests to accord with CLAUDE.md recommentations.
dbernstein
committed
README.md link for available functions for patron blocking rules.
dbernstein
committed
Rename BLOCKED_CREDENTIALS to SUSPENDED_CREDENTIALS and add BLOCKED_BY_POLICY (#12)
dbernstein
committed

Commits on Mar 17, 2026

Fix poetry lock and mypy.
dbernstein
committed
Patron blocking: fail-open, CloudWatch logging, remove live validation
dbernstein
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[PP-3772] Add patron blocking rules per library#3090

[PP-3772] Add patron blocking rules per library#3090
dbernstein wants to merge 31 commits intomainfrom
feature/PP-3772-Add-patron-blocking-rules-per-library

Commits on Mar 16, 2026

Add per-library patron blocking rules to SIP2 LibrarySettings (PP-3772)

Refactor to push patron blocks up the inheritance stack.

Add rules engine

Tie patron blocking rules data into the rules engine.

* rule_engine.py — Richer error messages:

* Deprecated code removed

Add int() as an allowable function to the simpleeval rules engine.

Add documentation for functions available for building patron blocking rules.

Fix syntactic error introduced accidentally during the manual merge process.

Fix linting errors.

Update lock file.

Adds backend support for front end rule validations before saving:

Fix mypy

Add test coverage to fetch_live_rule_validation_values

Remove inline imports.

Fix lock file.

Remove in-method imports.

Add simpleeval to toml.

Remove divider comment blocks from rules_engine.py.

Convert docstrings to reST from google.

Replace _sip2_thread_local with explicit RemoteAuthResult API

Remove stale comment.

Wire validate_message into patron blocking rules validation

Add validation when supports_patron_blocking_rules is False

Replace SIP2-specific checks with supports_patron_blocking_rules (OCP)

Unify evaluator lifecycle between admin validation and runtime (#9)

Rename tests to accord with CLAUDE.md recommentations.

README.md link for available functions for patron blocking rules.

Rename BLOCKED_CREDENTIALS to SUSPENDED_CREDENTIALS and add BLOCKED_BY_POLICY (#12)

Commits on Mar 17, 2026

Fix poetry lock and mypy.

Patron blocking: fail-open, CloudWatch logging, remove live validation