@camunda/ccma-shared-types 0.0.1

package/dist/types/OrganizationPermission.type.js

@@ -0,0 +1,784 @@
+import { OrganizationRole } from "../enums/OrganizationRole.enum.js";
+const CRUD_TRUE = {
+  create: true,
+  read: true,
+  update: true,
+  delete: true
+};
+const CRUD_FALSE = {
+  create: false,
+  read: false,
+  update: false,
+  delete: false
+};
+const CRUD_READ_TRUE = {
+  create: false,
+  read: true,
+  update: false,
+  delete: false
+};
+const CRUD_READ_UPDATE_TRUE = {
+  create: false,
+  read: true,
+  update: true,
+  delete: false
+};
+const OrganizationPermissionsDescriptions = {
+  org: {
+    clusters: {
+      create: "Create new clusters",
+      read: "View clusters",
+      update: "Update clusters",
+      delete: "Delete clusters"
+    },
+    clients: {
+      create: "Create new console clients",
+      read: "View console clients",
+      update: "Update console clients",
+      delete: "Delete console clients"
+    },
+    settings: {
+      create: "unused",
+      read: "View settings",
+      update: "Update settings",
+      delete: "Delete settings"
+    },
+    usage: {
+      create: "unused",
+      read: "View usage metrics",
+      update: "unused",
+      delete: "unused"
+    },
+    billing: {
+      create: "unused",
+      read: "View billing information",
+      update: "Update billing information",
+      delete: "unused"
+    },
+    users: {
+      general: {
+        create: "Add users",
+        read: "View users",
+        update: "Update users",
+        delete: "Remove users"
+      },
+      owner: {
+        create: "Initiate owner change",
+        read: "Read owners",
+        update: "Update owners",
+        delete: "Remove owners"
+      },
+      admin: {
+        create: "Add admins",
+        read: "Read admins",
+        update: "Update admins",
+        delete: "Remove admins"
+      },
+      member: {
+        create: "Add members",
+        read: "Read members",
+        update: "Update members",
+        delete: "Remove members"
+      }
+    },
+    activity: {
+      create: "unused",
+      read: "View activity",
+      update: "unused",
+      delete: "unused"
+    },
+    diagrams: {
+      create: "unused",
+      read: "unused",
+      update: "unused",
+      delete: "unused"
+    },
+    forms: {
+      create: "unused",
+      read: "unused",
+      update: "unused",
+      delete: "unused"
+    },
+    instances: {
+      create: "unused",
+      read: "unused",
+      update: "unused",
+      delete: "unused"
+    },
+    workflows: {
+      create: "unused",
+      read: "unused",
+      update: "unused",
+      delete: "unused"
+    },
+    webide: {
+      create: "unused",
+      read: "Open Web Modeler",
+      update: "unused",
+      delete: "unused"
+    },
+    earlyAccessFeatures: {
+      create: "Enable early access features",
+      read: "View early access features",
+      update: "Update early access features",
+      delete: "Disable early access features"
+    }
+  },
+  cluster: {
+    clients: {
+      create: "Create cluster clients",
+      read: "View cluster clients",
+      update: "Update cluster clients",
+      delete: "Delete cluster clients"
+    },
+    alerts: {
+      create: "Create cluster alerts",
+      read: "View cluster alerts",
+      update: "Update cluster alerts",
+      delete: "Delete cluster alerts"
+    },
+    operate: {
+      create: "unused",
+      read: "Open Operate",
+      update: "unused",
+      delete: "unused"
+    },
+    tasklist: {
+      create: "unused",
+      read: "Open Task List",
+      update: "unused",
+      delete: "unused"
+    },
+    optimize: {
+      create: "unused",
+      read: "Open Optimize",
+      update: "unused",
+      delete: "unused"
+    },
+    identity: {
+      create: "unused",
+      read: "Open Identity",
+      update: "unused",
+      delete: "unused"
+    },
+    ipWhitelist: {
+      create: "Create IP Whitelist",
+      read: "Read IP Whitelist",
+      update: "Update IP Whitelist",
+      delete: "Delete IP Whitelist"
+    },
+    secureConnectivity: {
+      create: "Create Secure Connectivity",
+      read: "Read Secure Connectivity",
+      update: "Update Secure Connectivity",
+      delete: "Delete Secure Connectivity"
+    },
+    encryption: {
+      create: "Create BYO Encryption",
+      read: "Read BYO Encryption",
+      update: "Update BYO Encryption",
+      delete: "Delete BYO Encryption"
+    },
+    connectorSecrets: {
+      create: "Create Connector Secrets",
+      read: "View Connector Secrets",
+      update: "Update Connector Secrets",
+      delete: "Delete Connector Secrets"
+    },
+    connectors: {
+      create: "unused",
+      read: "Read Manage Connectors View",
+      update: "unused",
+      delete: "unused"
+    },
+    settings: {
+      resourceBasedAuthorizations: {
+        activate: {
+          create: "unused",
+          read: "View resource-based authorizations settings",
+          update: "Enable/Disable resource-based authorizations",
+          delete: "unused"
+        },
+        configure: {
+          create: "unused",
+          read: "Read resource-based authorizations for users",
+          update: "Update resource-based authorizations for users",
+          delete: "unused"
+        }
+      },
+      identityBasedAuthorizations: {
+        activate: {
+          create: "unused",
+          read: "View identity-based authorizations settings",
+          update: "Enable/Disable identity-based authorizations",
+          delete: "unused"
+        }
+      },
+      multiTenancy: {
+        activate: {
+          create: "unused",
+          read: "View Multi-tenency settings",
+          update: "Enable/Disable Multi-tenancy",
+          delete: "unused"
+        }
+      }
+    }
+  }
+};
+const PermissionsForOrganizationRole = /* @__PURE__ */ new Map([
+  [
+    OrganizationRole.MEMBER,
+    {
+      org: {
+        clusters: CRUD_TRUE,
+        clients: CRUD_TRUE,
+        settings: CRUD_READ_TRUE,
+        usage: CRUD_READ_TRUE,
+        billing: CRUD_FALSE,
+        users: {
+          general: CRUD_FALSE,
+          owner: CRUD_FALSE,
+          admin: CRUD_FALSE,
+          member: CRUD_FALSE
+        },
+        activity: CRUD_FALSE,
+        diagrams: CRUD_TRUE,
+        forms: CRUD_TRUE,
+        instances: CRUD_TRUE,
+        workflows: CRUD_TRUE,
+        webide: CRUD_READ_TRUE,
+        earlyAccessFeatures: CRUD_FALSE
+      },
+      cluster: {
+        clients: CRUD_TRUE,
+        alerts: CRUD_TRUE,
+        operate: CRUD_TRUE,
+        tasklist: CRUD_TRUE,
+        optimize: CRUD_TRUE,
+        identity: CRUD_TRUE,
+        ipWhitelist: CRUD_TRUE,
+        secureConnectivity: CRUD_TRUE,
+        encryption: CRUD_TRUE,
+        connectorSecrets: CRUD_TRUE,
+        connectors: CRUD_FALSE,
+        settings: {
+          resourceBasedAuthorizations: {
+            activate: CRUD_FALSE,
+            configure: CRUD_FALSE
+          },
+          identityBasedAuthorizations: {
+            activate: CRUD_FALSE
+          },
+          multiTenancy: {
+            activate: CRUD_FALSE
+          }
+        }
+      }
+    }
+  ],
+  [
+    OrganizationRole.ADMIN,
+    {
+      org: {
+        clusters: CRUD_TRUE,
+        clients: CRUD_TRUE,
+        settings: CRUD_READ_TRUE,
+        usage: CRUD_READ_TRUE,
+        billing: CRUD_READ_UPDATE_TRUE,
+        users: {
+          general: CRUD_TRUE,
+          owner: CRUD_FALSE,
+          admin: CRUD_FALSE,
+          member: CRUD_TRUE
+        },
+        activity: CRUD_READ_TRUE,
+        diagrams: CRUD_TRUE,
+        forms: CRUD_TRUE,
+        instances: CRUD_TRUE,
+        workflows: CRUD_TRUE,
+        webide: CRUD_READ_TRUE,
+        earlyAccessFeatures: CRUD_TRUE
+      },
+      cluster: {
+        clients: CRUD_TRUE,
+        alerts: CRUD_TRUE,
+        operate: CRUD_TRUE,
+        tasklist: CRUD_TRUE,
+        optimize: CRUD_TRUE,
+        identity: CRUD_TRUE,
+        ipWhitelist: CRUD_TRUE,
+        secureConnectivity: CRUD_TRUE,
+        encryption: CRUD_TRUE,
+        connectorSecrets: CRUD_TRUE,
+        connectors: CRUD_TRUE,
+        settings: {
+          resourceBasedAuthorizations: {
+            activate: CRUD_TRUE,
+            configure: CRUD_TRUE
+          },
+          identityBasedAuthorizations: {
+            activate: CRUD_TRUE
+          },
+          multiTenancy: {
+            activate: CRUD_TRUE
+          }
+        }
+      }
+    }
+  ],
+  [
+    OrganizationRole.OWNER,
+    {
+      org: {
+        clusters: CRUD_TRUE,
+        clients: CRUD_TRUE,
+        settings: {
+          create: false,
+          read: true,
+          update: true,
+          delete: true
+        },
+        usage: CRUD_READ_TRUE,
+        billing: CRUD_READ_UPDATE_TRUE,
+        users: {
+          general: CRUD_TRUE,
+          owner: CRUD_TRUE,
+          admin: CRUD_TRUE,
+          member: CRUD_TRUE
+        },
+        activity: CRUD_READ_TRUE,
+        diagrams: CRUD_TRUE,
+        forms: CRUD_TRUE,
+        instances: CRUD_TRUE,
+        workflows: CRUD_TRUE,
+        webide: CRUD_READ_TRUE,
+        earlyAccessFeatures: CRUD_TRUE
+      },
+      cluster: {
+        clients: CRUD_TRUE,
+        alerts: CRUD_TRUE,
+        operate: CRUD_TRUE,
+        tasklist: CRUD_TRUE,
+        optimize: CRUD_TRUE,
+        identity: CRUD_TRUE,
+        ipWhitelist: CRUD_TRUE,
+        secureConnectivity: CRUD_TRUE,
+        encryption: CRUD_TRUE,
+        connectorSecrets: CRUD_TRUE,
+        connectors: CRUD_TRUE,
+        settings: {
+          resourceBasedAuthorizations: {
+            activate: CRUD_TRUE,
+            configure: CRUD_TRUE
+          },
+          identityBasedAuthorizations: {
+            activate: CRUD_TRUE
+          },
+          multiTenancy: {
+            activate: CRUD_TRUE
+          }
+        }
+      }
+    }
+  ],
+  [
+    OrganizationRole.SUPPORTAGENT,
+    {
+      org: {
+        clusters: CRUD_READ_TRUE,
+        clients: CRUD_READ_TRUE,
+        settings: CRUD_READ_TRUE,
+        usage: CRUD_READ_TRUE,
+        billing: CRUD_READ_TRUE,
+        users: {
+          general: CRUD_READ_TRUE,
+          owner: CRUD_FALSE,
+          admin: CRUD_FALSE,
+          member: CRUD_FALSE
+        },
+        activity: CRUD_READ_TRUE,
+        diagrams: CRUD_READ_TRUE,
+        forms: CRUD_READ_TRUE,
+        instances: CRUD_READ_TRUE,
+        workflows: CRUD_READ_TRUE,
+        webide: CRUD_READ_TRUE,
+        earlyAccessFeatures: CRUD_FALSE
+      },
+      cluster: {
+        clients: CRUD_READ_TRUE,
+        alerts: CRUD_READ_TRUE,
+        operate: CRUD_READ_TRUE,
+        tasklist: CRUD_READ_TRUE,
+        optimize: CRUD_READ_TRUE,
+        identity: CRUD_READ_TRUE,
+        ipWhitelist: CRUD_READ_TRUE,
+        secureConnectivity: CRUD_READ_TRUE,
+        encryption: CRUD_READ_TRUE,
+        connectorSecrets: CRUD_READ_TRUE,
+        connectors: CRUD_READ_TRUE,
+        settings: {
+          resourceBasedAuthorizations: {
+            activate: CRUD_FALSE,
+            configure: CRUD_FALSE
+          },
+          identityBasedAuthorizations: {
+            activate: CRUD_FALSE
+          },
+          multiTenancy: {
+            activate: CRUD_FALSE
+          }
+        }
+      }
+    }
+  ],
+  [
+    OrganizationRole.OPERATIONS_ENGINEER,
+    {
+      org: {
+        clusters: {
+          create: true,
+          read: true,
+          update: true,
+          delete: false
+        },
+        clients: CRUD_FALSE,
+        settings: CRUD_READ_TRUE,
+        usage: CRUD_FALSE,
+        billing: CRUD_FALSE,
+        users: {
+          general: CRUD_FALSE,
+          owner: CRUD_FALSE,
+          admin: CRUD_FALSE,
+          member: CRUD_FALSE
+        },
+        activity: CRUD_FALSE,
+        diagrams: {
+          create: true,
+          read: true,
+          update: true,
+          delete: false
+        },
+        forms: {
+          create: true,
+          read: true,
+          update: true,
+          delete: false
+        },
+        instances: CRUD_TRUE,
+        workflows: CRUD_READ_TRUE,
+        webide: CRUD_READ_TRUE,
+        earlyAccessFeatures: CRUD_FALSE
+      },
+      cluster: {
+        clients: CRUD_TRUE,
+        alerts: CRUD_TRUE,
+        operate: CRUD_TRUE,
+        tasklist: CRUD_FALSE,
+        optimize: CRUD_FALSE,
+        identity: CRUD_FALSE,
+        ipWhitelist: CRUD_TRUE,
+        secureConnectivity: CRUD_TRUE,
+        encryption: CRUD_TRUE,
+        connectorSecrets: CRUD_TRUE,
+        connectors: CRUD_FALSE,
+        settings: {
+          resourceBasedAuthorizations: {
+            activate: CRUD_FALSE,
+            configure: CRUD_FALSE
+          },
+          identityBasedAuthorizations: {
+            activate: CRUD_FALSE
+          },
+          multiTenancy: {
+            activate: CRUD_FALSE
+          }
+        }
+      }
+    }
+  ],
+  [
+    OrganizationRole.TASK_USER,
+    {
+      org: {
+        clusters: CRUD_READ_TRUE,
+        clients: CRUD_FALSE,
+        settings: CRUD_READ_TRUE,
+        usage: CRUD_FALSE,
+        billing: CRUD_FALSE,
+        users: {
+          general: CRUD_FALSE,
+          owner: CRUD_FALSE,
+          admin: CRUD_FALSE,
+          member: CRUD_FALSE
+        },
+        activity: CRUD_FALSE,
+        diagrams: CRUD_FALSE,
+        forms: CRUD_FALSE,
+        instances: CRUD_FALSE,
+        workflows: CRUD_FALSE,
+        webide: CRUD_READ_TRUE,
+        earlyAccessFeatures: CRUD_FALSE
+      },
+      cluster: {
+        clients: CRUD_FALSE,
+        alerts: CRUD_FALSE,
+        operate: CRUD_FALSE,
+        tasklist: CRUD_TRUE,
+        optimize: CRUD_FALSE,
+        identity: CRUD_FALSE,
+        ipWhitelist: CRUD_FALSE,
+        secureConnectivity: CRUD_FALSE,
+        encryption: CRUD_FALSE,
+        connectorSecrets: CRUD_FALSE,
+        connectors: CRUD_FALSE,
+        settings: {
+          resourceBasedAuthorizations: {
+            activate: CRUD_FALSE,
+            configure: CRUD_FALSE
+          },
+          identityBasedAuthorizations: {
+            activate: CRUD_FALSE
+          },
+          multiTenancy: {
+            activate: CRUD_FALSE
+          }
+        }
+      }
+    }
+  ],
+  [
+    OrganizationRole.ANALYST,
+    {
+      org: {
+        clusters: CRUD_READ_TRUE,
+        clients: CRUD_FALSE,
+        settings: CRUD_READ_TRUE,
+        usage: CRUD_FALSE,
+        billing: CRUD_FALSE,
+        users: {
+          general: CRUD_FALSE,
+          owner: CRUD_FALSE,
+          admin: CRUD_FALSE,
+          member: CRUD_FALSE
+        },
+        activity: CRUD_FALSE,
+        diagrams: {
+          create: true,
+          read: true,
+          update: true,
+          delete: false
+        },
+        forms: {
+          create: true,
+          read: true,
+          update: true,
+          delete: false
+        },
+        instances: CRUD_FALSE,
+        workflows: CRUD_FALSE,
+        webide: CRUD_READ_TRUE,
+        earlyAccessFeatures: CRUD_FALSE
+      },
+      cluster: {
+        clients: CRUD_FALSE,
+        alerts: CRUD_FALSE,
+        operate: CRUD_FALSE,
+        tasklist: CRUD_FALSE,
+        optimize: CRUD_READ_TRUE,
+        identity: CRUD_FALSE,
+        ipWhitelist: CRUD_FALSE,
+        secureConnectivity: CRUD_FALSE,
+        encryption: CRUD_FALSE,
+        connectorSecrets: CRUD_FALSE,
+        connectors: CRUD_FALSE,
+        settings: {
+          resourceBasedAuthorizations: {
+            activate: CRUD_FALSE,
+            configure: CRUD_FALSE
+          },
+          identityBasedAuthorizations: {
+            activate: CRUD_FALSE
+          },
+          multiTenancy: {
+            activate: CRUD_FALSE
+          }
+        }
+      }
+    }
+  ],
+  [
+    OrganizationRole.DEVELOPER,
+    {
+      org: {
+        clusters: {
+          create: true,
+          read: true,
+          update: false,
+          delete: false
+        },
+        clients: CRUD_FALSE,
+        settings: CRUD_READ_TRUE,
+        usage: CRUD_FALSE,
+        billing: CRUD_FALSE,
+        users: {
+          general: CRUD_READ_TRUE,
+          owner: CRUD_FALSE,
+          admin: CRUD_FALSE,
+          member: CRUD_READ_TRUE
+        },
+        activity: CRUD_FALSE,
+        diagrams: {
+          create: true,
+          read: true,
+          update: true,
+          delete: false
+        },
+        forms: {
+          create: true,
+          read: true,
+          update: true,
+          delete: false
+        },
+        instances: CRUD_TRUE,
+        workflows: CRUD_TRUE,
+        webide: CRUD_TRUE,
+        earlyAccessFeatures: CRUD_FALSE
+      },
+      cluster: {
+        clients: {
+          create: true,
+          read: true,
+          update: true,
+          delete: false
+        },
+        alerts: CRUD_READ_TRUE,
+        operate: CRUD_TRUE,
+        tasklist: CRUD_TRUE,
+        optimize: CRUD_FALSE,
+        identity: CRUD_FALSE,
+        ipWhitelist: CRUD_READ_TRUE,
+        secureConnectivity: CRUD_READ_TRUE,
+        encryption: CRUD_FALSE,
+        connectorSecrets: CRUD_TRUE,
+        connectors: CRUD_FALSE,
+        settings: {
+          resourceBasedAuthorizations: {
+            activate: CRUD_FALSE,
+            configure: CRUD_TRUE
+          },
+          identityBasedAuthorizations: {
+            activate: CRUD_FALSE
+          },
+          multiTenancy: {
+            activate: CRUD_FALSE
+          }
+        }
+      }
+    }
+  ],
+  [
+    OrganizationRole.VISITOR,
+    {
+      org: {
+        clusters: CRUD_READ_TRUE,
+        clients: CRUD_FALSE,
+        settings: CRUD_READ_TRUE,
+        usage: CRUD_FALSE,
+        billing: CRUD_FALSE,
+        users: {
+          general: CRUD_FALSE,
+          owner: CRUD_FALSE,
+          admin: CRUD_FALSE,
+          member: CRUD_FALSE
+        },
+        activity: CRUD_FALSE,
+        diagrams: CRUD_READ_TRUE,
+        forms: CRUD_READ_TRUE,
+        instances: CRUD_FALSE,
+        workflows: CRUD_FALSE,
+        webide: CRUD_READ_TRUE,
+        earlyAccessFeatures: CRUD_FALSE
+      },
+      cluster: {
+        clients: CRUD_READ_TRUE,
+        alerts: CRUD_READ_TRUE,
+        operate: CRUD_READ_TRUE,
+        tasklist: CRUD_READ_TRUE,
+        optimize: CRUD_FALSE,
+        identity: CRUD_FALSE,
+        ipWhitelist: CRUD_FALSE,
+        secureConnectivity: CRUD_FALSE,
+        encryption: CRUD_FALSE,
+        connectorSecrets: CRUD_FALSE,
+        connectors: CRUD_FALSE,
+        settings: {
+          resourceBasedAuthorizations: {
+            activate: CRUD_FALSE,
+            configure: CRUD_FALSE
+          },
+          identityBasedAuthorizations: {
+            activate: CRUD_FALSE
+          },
+          multiTenancy: {
+            activate: CRUD_FALSE
+          }
+        }
+      }
+    }
+  ],
+  [
+    OrganizationRole.MODELER,
+    {
+      org: {
+        clusters: CRUD_READ_TRUE,
+        clients: CRUD_FALSE,
+        settings: CRUD_READ_TRUE,
+        usage: CRUD_FALSE,
+        billing: CRUD_FALSE,
+        users: {
+          general: CRUD_FALSE,
+          owner: CRUD_FALSE,
+          admin: CRUD_FALSE,
+          member: CRUD_FALSE
+        },
+        activity: CRUD_FALSE,
+        diagrams: CRUD_FALSE,
+        forms: CRUD_FALSE,
+        instances: CRUD_FALSE,
+        workflows: CRUD_FALSE,
+        webide: CRUD_READ_TRUE,
+        earlyAccessFeatures: CRUD_FALSE
+      },
+      cluster: {
+        clients: CRUD_FALSE,
+        alerts: CRUD_FALSE,
+        operate: CRUD_FALSE,
+        tasklist: CRUD_FALSE,
+        optimize: CRUD_FALSE,
+        identity: CRUD_FALSE,
+        ipWhitelist: CRUD_FALSE,
+        secureConnectivity: CRUD_FALSE,
+        encryption: CRUD_FALSE,
+        connectorSecrets: CRUD_FALSE,
+        connectors: CRUD_FALSE,
+        settings: {
+          resourceBasedAuthorizations: {
+            activate: CRUD_FALSE,
+            configure: CRUD_FALSE
+          },
+          identityBasedAuthorizations: {
+            activate: CRUD_FALSE
+          },
+          multiTenancy: {
+            activate: CRUD_FALSE
+          }
+        }
+      }
+    }
+  ]
+]);
+export {
+  OrganizationPermissionsDescriptions,
+  PermissionsForOrganizationRole
+};
+//# sourceMappingURL=OrganizationPermission.type.js.map