workos 7.1.2 → 9.5.0

data/lib/workos/authorization.rb

@@ -52,6 +52,186 @@ module WorkOS
       @client = client
     end
 
+    # List role assignments for a group
+    # @param group_id [String] The ID of the group.
+    # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
+    # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
+    # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
+    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records).
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::Types::ListStruct<WorkOS::GroupRoleAssignment>]
+    def list_group_role_assignments(
+      group_id:,
+      before: nil,
+      after: nil,
+      limit: 10,
+      order: "desc",
+      request_options: {}
+    )
+      params = {
+        "before" => before,
+        "after" => after,
+        "limit" => limit,
+        "order" => order
+      }.compact
+      response = @client.request(
+        method: :get,
+        path: "/authorization/groups/#{WorkOS::Util.encode_path(group_id)}/role_assignments",
+        auth: true,
+        params: params,
+        request_options: request_options
+      )
+      fetch_next = ->(cursor) {
+        list_group_role_assignments(
+          group_id: group_id,
+          before: before,
+          after: cursor,
+          limit: limit,
+          order: order,
+          request_options: request_options
+        )
+      }
+      WorkOS::Types::ListStruct.from_response(
+        response,
+        model: WorkOS::GroupRoleAssignment,
+        filters: {group_id: group_id, before: before, limit: limit, order: order},
+        fetch_next: fetch_next
+      )
+    end
+
+    # Assign a role to a group
+    # @param group_id [String] The ID of the group.
+    # @param role_slug [String] The slug of the role to assign to the group.
+    # @param resource_id [String, nil] The ID of the resource. Omit along with the external-id fields to target the organization itself.
+    # @param resource_external_id [String, nil] The external ID of the resource.
+    # @param resource_type_slug [String, nil] The resource type slug.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::GroupRoleAssignment]
+    def create_group_role_assignment(
+      group_id:,
+      role_slug:,
+      resource_id: nil,
+      resource_external_id: nil,
+      resource_type_slug: nil,
+      request_options: {}
+    )
+      body = {
+        "role_slug" => role_slug,
+        "resource_id" => resource_id,
+        "resource_external_id" => resource_external_id,
+        "resource_type_slug" => resource_type_slug
+      }.compact
+      response = @client.request(
+        method: :post,
+        path: "/authorization/groups/#{WorkOS::Util.encode_path(group_id)}/role_assignments",
+        auth: true,
+        body: body,
+        request_options: request_options
+      )
+      result = WorkOS::GroupRoleAssignment.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
+
+    # Replace all role assignments for a group
+    # @param group_id [String] The ID of the group.
+    # @param role_assignments [Array<WorkOS::ReplaceGroupRoleAssignmentEntry>] The list of role assignments that should exist for the group. All existing assignments will be replaced.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::Types::ListStruct<WorkOS::GroupRoleAssignment>]
+    def update_group_role_assignments(
+      group_id:,
+      role_assignments:,
+      request_options: {}
+    )
+      body = {
+        "role_assignments" => role_assignments
+      }
+      response = @client.request(
+        method: :put,
+        path: "/authorization/groups/#{WorkOS::Util.encode_path(group_id)}/role_assignments",
+        auth: true,
+        body: body,
+        request_options: request_options
+      )
+      WorkOS::Types::ListStruct.from_response(
+        response,
+        model: WorkOS::GroupRoleAssignment,
+        filters: {group_id: group_id, role_assignments: role_assignments}
+      )
+    end
+
+    # Remove group role assignments by criteria
+    # @param group_id [String] The ID of the group.
+    # @param role_slug [String] The slug of the role to remove assignments for.
+    # @param resource_id [String, nil] The ID of the resource. Mutually exclusive with `resource_external_id` and `resource_type_slug`.
+    # @param resource_external_id [String, nil] The external ID of the resource.
+    # @param resource_type_slug [String, nil] The resource type slug.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [void]
+    def delete_group_role_assignments(
+      group_id:,
+      role_slug:,
+      resource_id: nil,
+      resource_external_id: nil,
+      resource_type_slug: nil,
+      request_options: {}
+    )
+      body = {
+        "role_slug" => role_slug,
+        "resource_id" => resource_id,
+        "resource_external_id" => resource_external_id,
+        "resource_type_slug" => resource_type_slug
+      }.compact
+      @client.request(
+        method: :delete,
+        path: "/authorization/groups/#{WorkOS::Util.encode_path(group_id)}/role_assignments",
+        auth: true,
+        body: body,
+        request_options: request_options
+      )
+      nil
+    end
+
+    # Get a group role assignment
+    # @param group_id [String] The ID of the group.
+    # @param role_assignment_id [String] The ID of the group role assignment.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::GroupRoleAssignment]
+    def get_group_role_assignment(
+      group_id:,
+      role_assignment_id:,
+      request_options: {}
+    )
+      response = @client.request(
+        method: :get,
+        path: "/authorization/groups/#{WorkOS::Util.encode_path(group_id)}/role_assignments/#{WorkOS::Util.encode_path(role_assignment_id)}",
+        auth: true,
+        request_options: request_options
+      )
+      result = WorkOS::GroupRoleAssignment.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
+
+    # Remove a group role assignment
+    # @param group_id [String] The ID of the group.
+    # @param role_assignment_id [String] The ID of the group role assignment to remove.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [void]
+    def delete_group_role_assignment(
+      group_id:,
+      role_assignment_id:,
+      request_options: {}
+    )
+      @client.request(
+        method: :delete,
+        path: "/authorization/groups/#{WorkOS::Util.encode_path(group_id)}/role_assignments/#{WorkOS::Util.encode_path(role_assignment_id)}",
+        auth: true,
+        request_options: request_options
+      )
+      nil
+    end
+
     # Check authorization
     # @param organization_membership_id [String] The ID of the organization membership to check.
     # @param permission_slug [String] The slug of the permission to check.
@@ -93,7 +273,7 @@ module WorkOS
     # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
     # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
     # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
-    # @param order [WorkOS::Types::AuthorizationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records).
     # @param permission_slug [String] The permission slug to filter by. Only child resources where the organization membership has this permission are returned.
     # @param parent_resource [WorkOS::Authorization::ParentResourceById, WorkOS::Authorization::ParentResourceByExternalId] Identifies the parent resource.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
@@ -104,7 +284,7 @@ module WorkOS
       parent_resource:,
       before: nil,
       after: nil,
-      limit: nil,
+      limit: 10,
       order: "desc",
       request_options: {}
     )
@@ -157,7 +337,7 @@ module WorkOS
     # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
     # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
     # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
-    # @param order [WorkOS::Types::AuthorizationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records).
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
     # @return [WorkOS::Types::ListStruct<WorkOS::AuthorizationPermission>]
     def list_effective_permissions(
@@ -165,7 +345,7 @@ module WorkOS
       resource_id:,
       before: nil,
       after: nil,
-      limit: nil,
+      limit: 10,
       order: "desc",
       request_options: {}
     )
@@ -208,7 +388,7 @@ module WorkOS
     # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
     # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
     # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
-    # @param order [WorkOS::Types::AuthorizationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records).
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
     # @return [WorkOS::Types::ListStruct<WorkOS::AuthorizationPermission>]
     def list_effective_permissions_by_external_id(
@@ -217,7 +397,7 @@ module WorkOS
       external_id:,
       before: nil,
       after: nil,
-      limit: nil,
+      limit: 10,
       order: "desc",
       request_options: {}
     )
@@ -259,22 +439,31 @@ module WorkOS
     # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
     # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
     # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
-    # @param order [WorkOS::Types::AuthorizationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records).
+    # @param resource_id [String, nil] Filter assignments by the ID of the resource.
+    # @param resource_external_id [String, nil] Filter assignments by the external ID of the resource.
+    # @param resource_type_slug [String, nil] Filter assignments by the slug of the resource type.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
-    # @return [WorkOS::Types::ListStruct<WorkOS::RoleAssignment>]
+    # @return [WorkOS::Types::ListStruct<WorkOS::UserRoleAssignment>]
     def list_role_assignments(
       organization_membership_id:,
       before: nil,
       after: nil,
-      limit: nil,
+      limit: 10,
       order: "desc",
+      resource_id: nil,
+      resource_external_id: nil,
+      resource_type_slug: nil,
       request_options: {}
     )
       params = {
         "before" => before,
         "after" => after,
         "limit" => limit,
-        "order" => order
+        "order" => order,
+        "resource_id" => resource_id,
+        "resource_external_id" => resource_external_id,
+        "resource_type_slug" => resource_type_slug
       }.compact
       response = @client.request(
         method: :get,
@@ -290,13 +479,16 @@ module WorkOS
           after: cursor,
           limit: limit,
           order: order,
+          resource_id: resource_id,
+          resource_external_id: resource_external_id,
+          resource_type_slug: resource_type_slug,
           request_options: request_options
         )
       }
       WorkOS::Types::ListStruct.from_response(
         response,
-        model: WorkOS::RoleAssignment,
-        filters: {organization_membership_id: organization_membership_id, before: before, limit: limit, order: order},
+        model: WorkOS::UserRoleAssignment,
+        filters: {organization_membership_id: organization_membership_id, before: before, limit: limit, order: order, resource_id: resource_id, resource_external_id: resource_external_id, resource_type_slug: resource_type_slug},
         fetch_next: fetch_next
       )
     end
@@ -306,7 +498,7 @@ module WorkOS
     # @param role_slug [String] The slug of the role to assign.
     # @param resource_target [WorkOS::Authorization::ResourceTargetById, WorkOS::Authorization::ResourceTargetByExternalId] Identifies the resource target.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
-    # @return [WorkOS::RoleAssignment]
+    # @return [WorkOS::UserRoleAssignment]
     def assign_role(
       organization_membership_id:,
       role_slug:,
@@ -332,7 +524,7 @@ module WorkOS
         body: body,
         request_options: request_options
       )
-      result = WorkOS::RoleAssignment.new(response.body)
+      result = WorkOS::UserRoleAssignment.new(response.body)
       result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
       result
     end
@@ -671,7 +863,7 @@ module WorkOS
       organization_id:,
       resource_type_slug:,
       external_id:,
-      cascade_delete: nil,
+      cascade_delete: false,
       request_options: {}
     )
       params = {
@@ -694,7 +886,7 @@ module WorkOS
     # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
     # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
     # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
-    # @param order [WorkOS::Types::AuthorizationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records).
     # @param permission_slug [String] The permission slug to filter by. Only users with this permission on the resource are returned.
     # @param assignment [WorkOS::Types::AuthorizationAssignment, nil] Filter by assignment type. Use "direct" for direct assignments only, or "indirect" to include inherited assignments.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
@@ -706,7 +898,7 @@ module WorkOS
       permission_slug:,
       before: nil,
       after: nil,
-      limit: nil,
+      limit: 10,
       order: "desc",
       assignment: nil,
       request_options: {}
@@ -748,27 +940,82 @@ module WorkOS
       )
     end
 
+    # List role assignments for a resource by external ID
+    # @param organization_id [String] The ID of the organization that owns the resource.
+    # @param resource_type_slug [String] The slug of the resource type.
+    # @param external_id [String] An identifier you provide to reference the resource in your system.
+    # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
+    # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
+    # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
+    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records).
+    # @param role_slug [String, nil] Filter assignments by the slug of the role.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::Types::ListStruct<WorkOS::UserRoleAssignment>]
+    def list_role_assignments_for_resource_by_external_id(
+      organization_id:,
+      resource_type_slug:,
+      external_id:,
+      before: nil,
+      after: nil,
+      limit: 10,
+      order: "desc",
+      role_slug: nil,
+      request_options: {}
+    )
+      params = {
+        "before" => before,
+        "after" => after,
+        "limit" => limit,
+        "order" => order,
+        "role_slug" => role_slug
+      }.compact
+      response = @client.request(
+        method: :get,
+        path: "/authorization/organizations/#{WorkOS::Util.encode_path(organization_id)}/resources/#{WorkOS::Util.encode_path(resource_type_slug)}/#{WorkOS::Util.encode_path(external_id)}/role_assignments",
+        auth: true,
+        params: params,
+        request_options: request_options
+      )
+      fetch_next = ->(cursor) {
+        list_role_assignments_for_resource_by_external_id(
+          organization_id: organization_id,
+          resource_type_slug: resource_type_slug,
+          external_id: external_id,
+          before: before,
+          after: cursor,
+          limit: limit,
+          order: order,
+          role_slug: role_slug,
+          request_options: request_options
+        )
+      }
+      WorkOS::Types::ListStruct.from_response(
+        response,
+        model: WorkOS::UserRoleAssignment,
+        filters: {organization_id: organization_id, resource_type_slug: resource_type_slug, external_id: external_id, before: before, limit: limit, order: order, role_slug: role_slug},
+        fetch_next: fetch_next
+      )
+    end
+
     # List resources
     # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
     # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
     # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
-    # @param order [WorkOS::Types::AuthorizationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records).
     # @param organization_id [String, nil] Filter resources by organization ID.
     # @param resource_type_slug [String, nil] Filter resources by resource type slug.
     # @param resource_external_id [String, nil] Filter resources by external ID.
-    # @param search [String, nil] Search resources by name.
     # @param parent [WorkOS::Authorization::ParentById, WorkOS::Authorization::ParentByExternalId, nil] Identifies the parent.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
     # @return [WorkOS::Types::ListStruct<WorkOS::AuthorizationResource>]
     def list_resources(
       before: nil,
       after: nil,
-      limit: nil,
+      limit: 10,
       order: "desc",
       organization_id: nil,
       resource_type_slug: nil,
       resource_external_id: nil,
-      search: nil,
       parent: nil,
       request_options: {}
     )
@@ -779,8 +1026,7 @@ module WorkOS
         "order" => order,
         "organization_id" => organization_id,
         "resource_type_slug" => resource_type_slug,
-        "resource_external_id" => resource_external_id,
-        "search" => search
+        "resource_external_id" => resource_external_id
       }.compact
       if parent
         case parent
@@ -809,7 +1055,6 @@ module WorkOS
           organization_id: organization_id,
           resource_type_slug: resource_type_slug,
           resource_external_id: resource_external_id,
-          search: search,
           parent: parent,
           request_options: request_options
         )
@@ -817,7 +1062,7 @@ module WorkOS
       WorkOS::Types::ListStruct.from_response(
         response,
         model: WorkOS::AuthorizationResource,
-        filters: {before: before, limit: limit, order: order, organization_id: organization_id, resource_type_slug: resource_type_slug, resource_external_id: resource_external_id, search: search, parent: parent},
+        filters: {before: before, limit: limit, order: order, organization_id: organization_id, resource_type_slug: resource_type_slug, resource_external_id: resource_external_id, parent: parent},
         fetch_next: fetch_next
       )
     end
@@ -937,7 +1182,7 @@ module WorkOS
     # @return [void]
     def delete_resource(
       resource_id:,
-      cascade_delete: nil,
+      cascade_delete: false,
       request_options: {}
     )
       params = {
@@ -958,7 +1203,7 @@ module WorkOS
     # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
     # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
     # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
-    # @param order [WorkOS::Types::AuthorizationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records).
     # @param permission_slug [String] The permission slug to filter by. Only users with this permission on the resource are returned.
     # @param assignment [WorkOS::Types::AuthorizationAssignment, nil] Filter by assignment type. Use `direct` for direct assignments only, or `indirect` to include inherited assignments.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
@@ -968,7 +1213,7 @@ module WorkOS
       permission_slug:,
       before: nil,
       after: nil,
-      limit: nil,
+      limit: 10,
       order: "desc",
       assignment: nil,
       request_options: {}
@@ -1008,6 +1253,57 @@ module WorkOS
       )
     end
 
+    # List role assignments for a resource
+    # @param resource_id [String] The ID of the authorization resource.
+    # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
+    # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
+    # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
+    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records).
+    # @param role_slug [String, nil] Filter assignments by the slug of the role.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::Types::ListStruct<WorkOS::UserRoleAssignment>]
+    def list_role_assignments_for_resource(
+      resource_id:,
+      before: nil,
+      after: nil,
+      limit: 10,
+      order: "desc",
+      role_slug: nil,
+      request_options: {}
+    )
+      params = {
+        "before" => before,
+        "after" => after,
+        "limit" => limit,
+        "order" => order,
+        "role_slug" => role_slug
+      }.compact
+      response = @client.request(
+        method: :get,
+        path: "/authorization/resources/#{WorkOS::Util.encode_path(resource_id)}/role_assignments",
+        auth: true,
+        params: params,
+        request_options: request_options
+      )
+      fetch_next = ->(cursor) {
+        list_role_assignments_for_resource(
+          resource_id: resource_id,
+          before: before,
+          after: cursor,
+          limit: limit,
+          order: order,
+          role_slug: role_slug,
+          request_options: request_options
+        )
+      }
+      WorkOS::Types::ListStruct.from_response(
+        response,
+        model: WorkOS::UserRoleAssignment,
+        filters: {resource_id: resource_id, before: before, limit: limit, order: order, role_slug: role_slug},
+        fetch_next: fetch_next
+      )
+    end
+
     # List environment roles
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
     # @return [WorkOS::RoleList]
@@ -1156,13 +1452,13 @@ module WorkOS
     # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
     # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
     # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
-    # @param order [WorkOS::Types::PermissionsOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records).
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
     # @return [WorkOS::Types::ListStruct<WorkOS::AuthorizationPermission>]
     def list_permissions(
       before: nil,
       after: nil,
-      limit: nil,
+      limit: 10,
       order: "desc",
       request_options: {}
     )