FGA_4: list/assign/remove role, remove roleAssginment

[swaroopAkkineniWorkos]

Description

Documentation

Does this require changes to the WorkOS Docs? E.g. the API Reference or code snippets need updates.

[ ] Yes

If yes, link a related docs PR and add a docs maintainer as a reviewer. Their approval is required.

[swaroopAkkineniWorkos]

@greptile review

[greptile-apps]

_{3 files reviewed, no comments}

_{Edit Code Review Agent Settings | Greptile}

[swaroopAkkineniWorkos]

this is duplicate of what is in https://github.com/workos/workos-python/pull/568/changes#r2842020033, can consolidate

[greptile-apps]

_{4 files reviewed, no comments}

_{Edit Code Review Agent Settings | Greptile}

[swaroopAkkineniWorkos]

@greptile re-review plz

[swaroopAkkineniWorkos]

@greptile re-review plz

[greptile-apps]

Greptile Summary

Added role assignment management functionality to the Python SDK, implementing methods to assign roles, remove roles, remove role assignments by ID, and list role assignments for organization memberships.

Key changes:

• Implemented assign_role() to assign a role to an organization membership with resource identification via resource_id or resource_external_id + resource_type_slug
• Implemented remove_role() to remove a role assignment by role slug and resource identifier
• Implemented remove_role_assignment() to remove a role assignment by its ID
• Implemented list_role_assignments() with full pagination support (limit, before, after, order)
• Added both sync and async implementations following existing SDK patterns
• Comprehensive test coverage with 12 test cases covering all scenarios including edge cases
• Added mock fixtures for role assignments

Confidence Score: 5/5

• This PR is safe to merge with no issues detected
• Implementation follows established SDK patterns perfectly, has comprehensive test coverage for both sync and async execution, properly handles resource identification via multiple methods, and includes appropriate type definitions. No security concerns or logic errors found.
• No files require special attention

Important Files Changed

Filename	Overview
src/workos/authorization.py	Added role assignment methods (assign_role, remove_role, remove_role_assignment, list_role_assignments) for both sync and async classes with proper implementation following existing patterns
tests/test_authorization_role_assignments.py	Comprehensive test coverage for all role assignment operations with both sync and async execution, covering edge cases and pagination scenarios
tests/utils/fixtures/mock_role_assignment.py	Added mock fixtures for RoleAssignment testing with proper type definitions and default values

_{Last reviewed commit: 554e117}