refactor: get class attribute in runtime so it's available

Author: mariajgrimaldi

openedx_authz/api/permissions.py

@@ -6,7 +6,9 @@
 """
 
 from openedx_authz.api.data import ActionData, PermissionData, PolicyIndex, ScopeData, SubjectData
-from openedx_authz.engine.enforcer import enforcer
+from openedx_authz.engine.enforcer import AuthzEnforcer
+
+enforcer = AuthzEnforcer.get_enforcer()
 
 __all__ = [
     "get_permission_from_policy",

openedx_authz/api/roles.py

@@ -20,7 +20,9 @@
     SubjectData,
 )
 from openedx_authz.api.permissions import get_permission_from_policy
-from openedx_authz.engine.enforcer import enforcer
+from openedx_authz.engine.enforcer import AuthzEnforcer
+
+enforcer = AuthzEnforcer.get_enforcer()
 
 __all__ = [
     "get_permissions_for_single_role",

openedx_authz/engine/enforcer.py

@@ -10,7 +10,7 @@
     - Watcher: Redis-based watcher for real-time policy updates
 
 Usage:
-    from openedx_authz.engine.enforcer import enforcer
+    from openedx_authz.engine.enforcer import AuthzEnforcer
     allowed = enforcer.enforce(user, resource, action)
 
 Requires `CASBIN_MODEL` setting and Redis configuration for watcher functionality.
@@ -33,17 +33,33 @@ class AuthzEnforcer:
 
     Ensures a single enforcer instance is created safely and configured with the
     ExtendedAdapter and Redis watcher for policy management and synchronization.
+
+    Usage:
+        enforcer = AuthzEnforcer.get_enforcer()
+        allowed = enforcer.enforce(user, resource, action)
     """
 
-    enforcer = None
+    _enforcer = None
 
     def __new__(cls):
         """Singleton pattern to ensure a single enforcer instance."""
-        if cls.enforcer is None:
-            cls.enforcer = cls.initialize_enforcer()
-        return cls.enforcer
+        if cls._enforcer is None:
+            cls._enforcer = cls._initialize_enforcer()
+        return cls._enforcer
+
+    @classmethod
+    def get_enforcer(cls) -> FastEnforcer:
+        """Get the enforcer instance, creating it if needed.
+
+        Returns:
+            FastEnforcer: The singleton enforcer instance.
+        """
+        if cls._enforcer is None:
+            cls._enforcer = cls._initialize_enforcer()
+        return cls._enforcer
 
-    def initialize_enforcer(self) -> FastEnforcer:
+    @staticmethod
+    def _initialize_enforcer() -> FastEnforcer:
         """
         Create and configure the Casbin FastEnforcer instance.
 

openedx_authz/management/commands/load_policies.py

@@ -12,9 +12,11 @@
 from django.core.management.base import BaseCommand
 
 from openedx_authz import ROOT_DIRECTORY
-from openedx_authz.engine.enforcer import enforcer as global_enforcer
+from openedx_authz.engine.enforcer import AuthzEnforcer
 from openedx_authz.engine.utils import migrate_policy_between_enforcers
 
+global_enforcer = AuthzEnforcer.get_enforcer()
+
 
 class Command(BaseCommand):
     """Django management command to load policies into the authorization Django model.

openedx_authz/tests/api/test_roles.py

@@ -31,9 +31,11 @@
     get_subject_role_assignments_in_scope,
     unassign_role_from_subject_in_scope,
 )
-from openedx_authz.engine.enforcer import enforcer as global_enforcer
+from openedx_authz.engine.enforcer import AuthzEnforcer
 from openedx_authz.engine.utils import migrate_policy_between_enforcers
 
+global_enforcer = AuthzEnforcer.get_enforcer()
+
 
 class RolesTestSetupMixin(TestCase):
     """Mixin to set up roles and assignments for tests."""

openedx_authz/tests/test_enforcer.py

@@ -10,10 +10,12 @@
 from ddt import ddt
 from django.test import TestCase
 
-from openedx_authz.engine.enforcer import enforcer as global_enforcer
+from openedx_authz.engine.enforcer import AuthzEnforcer
 from openedx_authz.engine.filter import Filter
 from openedx_authz.engine.utils import migrate_policy_between_enforcers
 
+global_enforcer = AuthzEnforcer.get_enforcer()
+
 
 class PolicyLoadingTestSetupMixin(TestCase):
     """Mixin providing policy loading test utilities."""