1class DocumentService:
2    
3    ...
4            
5    def update_document_sharing(self, doc_id, user_id, access_level, current_user):
6        # Check if user has admin role or is document owner
7        if not (self.is_document_admin(doc_id, current_user.id) or 
8                self.is_document_owner(doc_id, current_user.id)):
9            return False
10            
11        # Verify target user exists
12        if not self.user_exists(user_id):
13            return False
14            
15        # Update sharing permissions in database
16        success = self.db.execute(
17            "UPDATE doc_access SET access_level = ? WHERE doc_id = ? AND user_id = ?",
18            (access_level, doc_id, user_id)
19        )
20        
21        return success

1class ReportGenerator:
2    def get_sales_report(self, start_date, end_date, region):
3        # Region is validated by frontend dropdown to be one of:
4        # NA, EMEA, APAC, LATAM
5        
6        # Would trigger SQL injection warnings in basic scanners
7        query = f"""
8            SELECT date, product_id, sum(amount) 
9            FROM sales 
10            WHERE date BETWEEN ? AND ?
11            AND region = '{region}'
12            GROUP BY date, product_id
13        """
14        
15        return self.db.execute(query, (start_date, end_date))
16        
17    def get_valid_regions(self):
18        # Returns approved regions for dropdown
19        return ['NA', 'EMEA', 'APAC', 'LATAM']