feat(BA-4785): add connections to RoleGQL with pagination support

[fregataa]

Summary

• Add permissions and users connection fields to RoleGQL for querying associated data
• Implements full Relay-style pagination support for both fields
• Automatically scopes queries to the parent role

Changes

• Add permissions field to RoleGQL — returns PermissionConnection scoped by role_id
• Add users field to RoleGQL — returns UserV2Connection via SearchUsersByRoleAction
• Use strawberry.lazy() for cross-module type references to avoid circular imports
• Support all standard pagination parameters (cursor-based, offset-based, filtering, ordering)

GraphQL Query Examples

Permissions field

query {
  role(id: "role-uuid") {
    id
    name
    permissions(
      first: 10
      filter: { scopeType: DOMAIN, entityType: USER }
      orderBy: { field: ENTITY_TYPE, direction: ASC }
    ) {
      edges {
        node {
          id
          scopeType
          entityType
          operation
        }
      }
      pageInfo {
        hasNextPage
        endCursor
      }
      count
    }
  }
}

Users field

query {
  role(id: "role-uuid") {
    id
    name
    users(
      first: 10
      filter: { username: { contains: "alice" }, status: { in: [ACTIVE] } }
      orderBy: [{ field: USERNAME, direction: ASC }]
    ) {
      edges {
        node {
          id
          username
          email
          status
          domainName
        }
      }
      pageInfo {
        hasNextPage
        endCursor
      }
      count
    }
  }
}

Combined query

query {
  role(id: "role-uuid") {
    id
    name
    description
    source
    status
    permissions(first: 5) {
      edges {
        node { id scopeType entityType operation }
      }
      count
    }
    users(first: 5, orderBy: [{ field: CREATED_AT, direction: DESC }]) {
      edges {
        node { id username email }
      }
      count
    }
  }
}

JIRA Issues

• BA-4785: Add permissions and users fields with pagination to RoleGQL

Related

Part of BA-4775 (RBAC GraphQL Type Enhancement)

Test Plan

• Quality checks pass (fmt, fix, lint)
• GraphQL integration tests

🤖 Generated with Claude Code

---

📚 Documentation preview 📚: https://sorna--9518.org.readthedocs.build/en/9518/

---

📚 Documentation preview 📚: https://sorna-ko--9518.org.readthedocs.build/ko/9518/

[Copilot]

Pull request overview

Adds a permissions connection field to the RBAC RoleGQL GraphQL type to allow querying permissions associated with a role, including pagination, filtering, and ordering.

Changes:

• Adds a permissions field resolver to RoleGQL that returns a PermissionConnection.
• Scopes permission queries to the current role by injecting a role_id filter and merging with user-provided filters.
• Introduces TYPE_CHECKING imports and strawberry.lazy() annotations to avoid circular imports.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 4 out of 4 changed files in this pull request and generated no new comments.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[jopemachine]

It seems that "Added in ..." should be included.