Description

This PR includes a new method for the Scope Data classes (get_object). This is done for two main reasons:

• To allow direct access to the object when related attributes are needed, for example, when used in a Casbin custom matcher to check permissions based on object attributes.
• To address the current issue of storing non-canonical scope IDs, which leads to inconsistencies in permission validation.

Related Issues

• Define Standard Format for Scope IDs in Casbin Policies #102

Testing Instructions

Using Tutor:

1. Install this plugin with the changes in this PR.
2. Run the migrations by running tutor dev exec lms python manage.py lms migrate
3. Load the default policies by running tutor dev exec lms python manage.py lms load_policies

Endpoint

PUT http://local.openedx.io:8000/api/authz/v1/roles/users/

{
    "users": ["steve"],
    "role": "library_admin",
    "scope": "lib:NotExistentOrg:NOTEXISTENTLIB"
}

Try assigning permissions to a library with an incorrect (non-canonical) ID — for example, using only uppercase or lowercase letters. You should see an error message indicating that the scope does not exist.

Merge Checklist:

Check off if complete or not applicable:

• Version bumped
• Changelog record added
• Documentation updated (not only docstrings)
• Fixup commits are squashed away
• Unit tests added/updated
• Manual testing instructions provided
• Noted any: Concerns, dependencies, migration issues, deadlines, tickets