"""Read-only catalogue of platform permission codes."""

from __future__ import annotations

from flask import Blueprint, jsonify

from app.core.auth_decorators import require_auth, require_perm
from app.services import groups as groups_svc

bp = Blueprint("permissions", __name__, url_prefix="/permissions")


@bp.get("")
@require_auth
@require_perm("group.read")
def list_permissions():
    return jsonify({"items": groups_svc.list_permissions()})