@getcommunity/gc-validators 0.0.195 → 0.0.196

package/dist/permissions.d.ts

@@ -0,0 +1,707 @@
+import { aa as AuthorizedUserDocument, N as ClientUserDocumentStatus, Y as CommentDocument, a8 as UserAccountDocument, P as ClientDocument, x as ClientContentPillarDocument, z as ClientMediaPlatformDocument, y as ClientMediaPlatformContentTypeDocument, I as ClientProjectDocument, J as ClientReportDocument, K as ClientStyleguideDocument, ad as UtmTrackingLinkDocument, $ as GCFlyTourDocument, _ as GCFlyTourSnapDocument, a5 as RoleType, L as ClientUserDocument, Z as ContentPillarDocument, a1 as MediaPlatformDocument, a0 as MediaContentTypeDocument } from './comment.document-C-LqvG8c.js';
+import { C as CLIENT_ENTITY_PERMISSIONS } from './permission.constants-Chqmz1hY.js';
+export { d as CLIENT_ENTITY_KEYS, e as CLIENT_ENTITY_SCOPES, b as ClientEntityActions, a as ClientEntityKey, c as ClientEntityScope } from './permission.constants-Chqmz1hY.js';
+import './font.constants-DyF4szgM.js';
+
+/**
+ * Attribute-based access control (ABAC) permissions
+ *
+ * @reference https://github.com/WebDevSimplified/permission-system/blob/main/auth-abac.ts
+ */
+declare const ROLE_PERMISSIONS: {
+    readonly authenticated: {
+        readonly "user-account": {
+            readonly list: false;
+            readonly create: false;
+            readonly read: false;
+            readonly update: false;
+            readonly delete: false;
+        };
+        readonly comment: {
+            readonly list: true;
+            readonly create: true;
+            readonly update: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: CommentDocument | undefined) => boolean;
+            readonly delete: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: CommentDocument | undefined) => boolean;
+            readonly report: true;
+        };
+        readonly client: {
+            readonly access: false;
+            readonly billing: false;
+            readonly owner: false;
+            readonly manager: false;
+            readonly admin: false;
+            readonly list: false;
+            readonly create: false;
+            readonly read: false;
+            readonly update: false;
+            readonly delete: false;
+        };
+        readonly "client-user": {
+            readonly list: false;
+            readonly create: false;
+            readonly read: false;
+            readonly update: false;
+            readonly delete: false;
+        };
+        readonly "client-content-pillar": {
+            readonly list: false;
+            readonly create: false;
+            readonly read: false;
+            readonly update: false;
+            readonly delete: false;
+        };
+        readonly "client-media-platform": {
+            readonly list: false;
+            readonly create: false;
+            readonly read: false;
+            readonly update: false;
+            readonly delete: false;
+        };
+        readonly "client-media-platform-content-type": {
+            readonly list: false;
+            readonly create: false;
+            readonly read: false;
+            readonly update: false;
+            readonly delete: false;
+        };
+        readonly "client-project": {
+            readonly list: false;
+            readonly create: false;
+            readonly read: false;
+            readonly update: false;
+            readonly delete: false;
+            readonly assign: false;
+        };
+        readonly "client-report": {
+            readonly list: false;
+            readonly create: false;
+            readonly read: false;
+            readonly update: false;
+            readonly delete: false;
+        };
+        readonly "client-styleguide": {
+            readonly list: false;
+            readonly create: false;
+            readonly read: false;
+            readonly update: false;
+            readonly delete: false;
+        };
+        readonly "content-pillar": {
+            readonly list: false;
+            readonly create: false;
+            readonly read: false;
+            readonly update: false;
+            readonly delete: false;
+        };
+        readonly "media-platform": {
+            readonly list: false;
+            readonly create: false;
+            readonly read: false;
+            readonly update: false;
+            readonly delete: false;
+        };
+        readonly "media-content-type": {
+            readonly list: false;
+            readonly create: false;
+            readonly read: false;
+            readonly update: false;
+            readonly delete: false;
+        };
+        readonly "utm-tracking-link": {
+            readonly list: false;
+            readonly create: false;
+            readonly read: false;
+            readonly update: false;
+            readonly delete: false;
+        };
+        readonly gcflytour: {
+            readonly list: true;
+            readonly create: false;
+            readonly read: true;
+            readonly update: false;
+            readonly delete: false;
+        };
+        readonly "gcflytour-snap": {
+            readonly list: true;
+            readonly create: false;
+            readonly read: true;
+            readonly update: false;
+            readonly delete: false;
+        };
+    };
+    readonly public: {
+        readonly "user-account": {
+            readonly list: false;
+            readonly create: false;
+            readonly read: false;
+            readonly update: false;
+            readonly delete: false;
+        };
+        readonly comment: {
+            readonly list: true;
+            readonly create: false;
+            readonly update: false;
+            readonly delete: false;
+            readonly report: false;
+        };
+        readonly client: {
+            readonly access: false;
+            readonly billing: false;
+            readonly owner: false;
+            readonly manager: false;
+            readonly admin: false;
+            readonly list: false;
+            readonly create: false;
+            readonly read: false;
+            readonly update: false;
+            readonly delete: false;
+        };
+        readonly "client-user": {
+            readonly list: false;
+            readonly create: false;
+            readonly read: false;
+            readonly update: false;
+            readonly delete: false;
+        };
+        readonly "client-content-pillar": {
+            readonly list: false;
+            readonly create: false;
+            readonly read: false;
+            readonly update: false;
+            readonly delete: false;
+        };
+        readonly "client-media-platform": {
+            readonly list: false;
+            readonly create: false;
+            readonly read: false;
+            readonly update: false;
+            readonly delete: false;
+        };
+        readonly "client-media-platform-content-type": {
+            readonly list: false;
+            readonly create: false;
+            readonly read: false;
+            readonly update: false;
+            readonly delete: false;
+        };
+        readonly "client-project": {
+            readonly list: false;
+            readonly create: false;
+            readonly read: false;
+            readonly update: false;
+            readonly delete: false;
+            readonly assign: false;
+        };
+        readonly "client-report": {
+            readonly list: false;
+            readonly create: false;
+            readonly read: false;
+            readonly update: false;
+            readonly delete: false;
+        };
+        readonly "client-styleguide": {
+            readonly list: false;
+            readonly create: false;
+            readonly read: false;
+            readonly update: false;
+            readonly delete: false;
+        };
+        readonly "content-pillar": {
+            readonly list: false;
+            readonly create: false;
+            readonly read: false;
+            readonly update: false;
+            readonly delete: false;
+        };
+        readonly "media-platform": {
+            readonly list: false;
+            readonly create: false;
+            readonly read: false;
+            readonly update: false;
+            readonly delete: false;
+        };
+        readonly "media-content-type": {
+            readonly list: false;
+            readonly create: false;
+            readonly read: false;
+            readonly update: false;
+            readonly delete: false;
+        };
+        readonly "utm-tracking-link": {
+            readonly list: false;
+            readonly create: false;
+            readonly read: false;
+            readonly update: false;
+            readonly delete: false;
+        };
+        readonly gcflytour: {
+            readonly list: true;
+            readonly create: false;
+            readonly read: true;
+            readonly update: false;
+            readonly delete: false;
+        };
+        readonly "gcflytour-snap": {
+            readonly list: true;
+            readonly create: false;
+            readonly read: true;
+            readonly update: false;
+            readonly delete: false;
+        };
+    };
+    readonly employee: {
+        readonly "user-account": {
+            readonly list: true;
+            readonly create: false;
+            readonly read: true;
+            readonly update: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: UserAccountDocument | undefined) => boolean;
+            readonly delete: false;
+        };
+        readonly comment: {
+            readonly list: true;
+            readonly create: true;
+            readonly update: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: CommentDocument | undefined) => boolean;
+            readonly delete: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: CommentDocument | undefined) => boolean;
+            readonly report: true;
+        };
+        readonly client: {
+            readonly access: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientDocument | undefined) => boolean;
+            readonly billing: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientDocument | undefined) => boolean;
+            readonly owner: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientDocument | undefined) => boolean;
+            readonly manager: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientDocument | undefined) => boolean;
+            readonly admin: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientDocument | undefined) => boolean;
+            readonly list: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientDocument | undefined) => boolean;
+            readonly create: false;
+            readonly read: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientDocument | undefined) => boolean;
+            readonly update: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientDocument | undefined) => boolean;
+            readonly delete: false;
+        };
+        readonly "client-user": {
+            readonly list: true;
+            readonly create: false;
+            readonly read: true;
+            readonly update: false;
+            readonly delete: false;
+            readonly verify: true;
+        };
+        readonly "client-content-pillar": {
+            readonly list: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientContentPillarDocument | undefined) => boolean;
+            readonly create: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus) => boolean;
+            readonly read: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientContentPillarDocument | undefined) => boolean;
+            readonly update: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientContentPillarDocument | undefined) => boolean;
+            readonly delete: false;
+        };
+        readonly "client-media-platform": {
+            readonly list: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientMediaPlatformDocument | undefined) => boolean;
+            readonly create: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus) => boolean;
+            readonly read: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientMediaPlatformDocument | undefined) => boolean;
+            readonly update: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientMediaPlatformDocument | undefined) => boolean;
+            readonly delete: false;
+        };
+        readonly "client-media-platform-content-type": {
+            readonly list: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientMediaPlatformContentTypeDocument | undefined) => boolean;
+            readonly create: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus) => boolean;
+            readonly read: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientMediaPlatformContentTypeDocument | undefined) => boolean;
+            readonly update: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientMediaPlatformContentTypeDocument | undefined) => boolean;
+            readonly delete: false;
+        };
+        readonly "client-project": {
+            readonly list: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientProjectDocument | undefined) => boolean;
+            readonly create: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus) => boolean;
+            readonly read: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientProjectDocument | undefined) => boolean;
+            readonly update: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientProjectDocument | undefined) => boolean;
+            readonly delete: false;
+            readonly assign: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientProjectDocument | undefined) => boolean;
+        };
+        readonly "client-report": {
+            readonly list: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientReportDocument | undefined) => boolean;
+            readonly create: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus) => boolean;
+            readonly read: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientReportDocument | undefined) => boolean;
+            readonly update: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientReportDocument | undefined) => boolean;
+            readonly delete: false;
+        };
+        readonly "client-styleguide": {
+            readonly list: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientStyleguideDocument | undefined) => boolean;
+            readonly create: false;
+            readonly read: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientStyleguideDocument | undefined) => boolean;
+            readonly update: false;
+            readonly delete: false;
+        };
+        readonly "content-pillar": {
+            readonly list: true;
+            readonly create: false;
+            readonly read: true;
+            readonly update: false;
+            readonly delete: false;
+        };
+        readonly "media-platform": {
+            readonly list: true;
+            readonly create: false;
+            readonly read: true;
+            readonly update: false;
+            readonly delete: false;
+        };
+        readonly "media-content-type": {
+            readonly list: true;
+            readonly create: false;
+            readonly read: true;
+            readonly update: false;
+            readonly delete: false;
+        };
+        readonly "utm-tracking-link": {
+            readonly list: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: UtmTrackingLinkDocument | undefined) => boolean;
+            readonly create: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus) => boolean;
+            readonly read: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: UtmTrackingLinkDocument | undefined) => boolean;
+            readonly update: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: UtmTrackingLinkDocument | undefined) => boolean;
+            readonly delete: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: UtmTrackingLinkDocument | undefined) => boolean;
+        };
+        readonly gcflytour: {
+            readonly list: true;
+            readonly create: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus) => boolean;
+            readonly read: true;
+            readonly update: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: GCFlyTourDocument | undefined) => boolean;
+            readonly delete: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: GCFlyTourDocument | undefined) => boolean;
+        };
+        readonly "gcflytour-snap": {
+            readonly list: true;
+            readonly create: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus) => boolean;
+            readonly read: true;
+            readonly update: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: GCFlyTourSnapDocument | undefined) => boolean;
+            readonly delete: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: GCFlyTourSnapDocument | undefined) => boolean;
+        };
+    };
+    readonly manager: {
+        readonly "user-account": {
+            readonly list: true;
+            readonly create: false;
+            readonly read: true;
+            readonly update: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: UserAccountDocument | undefined) => boolean;
+            readonly delete: false;
+        };
+        readonly comment: {
+            readonly list: true;
+            readonly create: true;
+            readonly update: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: CommentDocument | undefined) => boolean;
+            readonly delete: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: CommentDocument | undefined) => boolean;
+            readonly report: true;
+        };
+        readonly client: {
+            readonly access: true;
+            readonly billing: true;
+            readonly owner: true;
+            readonly manager: true;
+            readonly admin: true;
+            readonly list: true;
+            readonly create: true;
+            readonly read: true;
+            readonly update: true;
+            readonly delete: false;
+        };
+        readonly "client-user": {
+            readonly list: true;
+            readonly create: true;
+            readonly read: true;
+            readonly update: true;
+            readonly delete: true;
+            readonly verify: true;
+        };
+        readonly "client-content-pillar": {
+            readonly list: true;
+            readonly create: true;
+            readonly read: true;
+            readonly update: true;
+            readonly delete: true;
+        };
+        readonly "client-media-platform": {
+            readonly list: true;
+            readonly create: true;
+            readonly read: true;
+            readonly update: true;
+            readonly delete: true;
+        };
+        readonly "client-media-platform-content-type": {
+            readonly list: true;
+            readonly create: true;
+            readonly read: true;
+            readonly update: true;
+            readonly delete: true;
+        };
+        readonly "client-project": {
+            readonly list: true;
+            readonly create: true;
+            readonly read: true;
+            readonly update: true;
+            readonly delete: true;
+            readonly assign: true;
+        };
+        readonly "client-report": {
+            readonly list: true;
+            readonly create: true;
+            readonly read: true;
+            readonly update: true;
+            readonly delete: true;
+        };
+        readonly "client-styleguide": {
+            readonly list: true;
+            readonly create: true;
+            readonly read: true;
+            readonly update: true;
+            readonly delete: true;
+        };
+        readonly "content-pillar": {
+            readonly list: true;
+            readonly create: true;
+            readonly read: true;
+            readonly update: true;
+            readonly delete: true;
+        };
+        readonly "media-platform": {
+            readonly list: true;
+            readonly create: true;
+            readonly read: true;
+            readonly update: true;
+            readonly delete: true;
+        };
+        readonly "media-content-type": {
+            readonly list: true;
+            readonly create: true;
+            readonly read: true;
+            readonly update: true;
+            readonly delete: true;
+        };
+        readonly "utm-tracking-link": {
+            readonly list: true;
+            readonly create: true;
+            readonly read: true;
+            readonly update: true;
+            readonly delete: true;
+        };
+        readonly gcflytour: {
+            readonly list: true;
+            readonly create: true;
+            readonly read: true;
+            readonly update: true;
+            readonly delete: true;
+        };
+        readonly "gcflytour-snap": {
+            readonly list: true;
+            readonly create: true;
+            readonly read: true;
+            readonly update: true;
+            readonly delete: true;
+        };
+    };
+    readonly client: {
+        readonly "user-account": {
+            readonly list: true;
+            readonly create: false;
+            readonly read: true;
+            readonly update: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: UserAccountDocument | undefined) => boolean;
+            readonly delete: false;
+        };
+        readonly comment: {
+            readonly list: true;
+            readonly create: true;
+            readonly update: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: CommentDocument | undefined) => boolean;
+            readonly delete: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: CommentDocument | undefined) => boolean;
+            readonly report: true;
+        };
+        readonly client: {
+            readonly access: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientDocument | undefined) => boolean;
+            readonly billing: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientDocument | undefined) => boolean;
+            readonly owner: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientDocument | undefined) => boolean;
+            readonly manager: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientDocument | undefined) => boolean;
+            readonly admin: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientDocument | undefined) => boolean;
+            readonly list: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientDocument | undefined) => boolean;
+            readonly create: false;
+            readonly read: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientDocument | undefined) => boolean;
+            readonly update: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientDocument | undefined) => boolean;
+            readonly delete: false;
+        };
+        readonly "client-user": {
+            readonly list: true;
+            readonly create: false;
+            readonly read: true;
+            readonly update: false;
+            readonly delete: false;
+            readonly verify: true;
+        };
+        readonly "client-content-pillar": {
+            readonly list: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientContentPillarDocument | undefined) => boolean;
+            readonly create: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus) => boolean;
+            readonly read: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientContentPillarDocument | undefined) => boolean;
+            readonly update: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientContentPillarDocument | undefined) => boolean;
+            readonly delete: false;
+        };
+        readonly "client-media-platform": {
+            readonly list: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientMediaPlatformDocument | undefined) => boolean;
+            readonly create: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus) => boolean;
+            readonly read: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientMediaPlatformDocument | undefined) => boolean;
+            readonly update: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientMediaPlatformDocument | undefined) => boolean;
+            readonly delete: false;
+        };
+        readonly "client-media-platform-content-type": {
+            readonly list: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientMediaPlatformContentTypeDocument | undefined) => boolean;
+            readonly create: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus) => boolean;
+            readonly read: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientMediaPlatformContentTypeDocument | undefined) => boolean;
+            readonly update: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientMediaPlatformContentTypeDocument | undefined) => boolean;
+            readonly delete: false;
+        };
+        readonly "client-project": {
+            readonly list: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientProjectDocument | undefined) => boolean;
+            readonly create: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus) => boolean;
+            readonly read: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientProjectDocument | undefined) => boolean;
+            readonly update: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientProjectDocument | undefined) => boolean;
+            readonly delete: false;
+            readonly assign: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientProjectDocument | undefined) => boolean;
+        };
+        readonly "client-report": {
+            readonly list: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientReportDocument | undefined) => boolean;
+            readonly create: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus) => boolean;
+            readonly read: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientReportDocument | undefined) => boolean;
+            readonly update: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientReportDocument | undefined) => boolean;
+            readonly delete: false;
+        };
+        readonly "client-styleguide": {
+            readonly list: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientStyleguideDocument | undefined) => boolean;
+            readonly create: false;
+            readonly read: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: ClientStyleguideDocument | undefined) => boolean;
+            readonly update: false;
+            readonly delete: false;
+        };
+        readonly "content-pillar": {
+            readonly list: true;
+            readonly create: false;
+            readonly read: true;
+            readonly update: false;
+            readonly delete: false;
+        };
+        readonly "media-platform": {
+            readonly list: true;
+            readonly create: false;
+            readonly read: true;
+            readonly update: false;
+            readonly delete: false;
+        };
+        readonly "media-content-type": {
+            readonly list: true;
+            readonly create: false;
+            readonly read: true;
+            readonly update: false;
+            readonly delete: false;
+        };
+        readonly "utm-tracking-link": {
+            readonly list: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: UtmTrackingLinkDocument | undefined) => boolean;
+            readonly create: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus) => boolean;
+            readonly read: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: UtmTrackingLinkDocument | undefined) => boolean;
+            readonly update: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: UtmTrackingLinkDocument | undefined) => boolean;
+            readonly delete: (u: AuthorizedUserDocument, p: ClientUserDocumentStatus, d: UtmTrackingLinkDocument | undefined) => boolean;
+        };
+        readonly gcflytour: {
+            readonly list: true;
+            readonly create: false;
+            readonly read: true;
+            readonly update: false;
+            readonly delete: false;
+        };
+        readonly "gcflytour-snap": {
+            readonly list: true;
+            readonly create: false;
+            readonly read: true;
+            readonly update: false;
+            readonly delete: false;
+        };
+    };
+};
+
+/**
+ * Attribute-based access control (ABAC) permissions
+ *
+ * @reference https://github.com/WebDevSimplified/permission-system/blob/main/auth-abac.ts
+ */
+
+type LCRUDActions = "list" | "create" | "read" | "update" | "delete";
+type PermissionCheck<Key extends keyof Permissions> = boolean | ((user: AuthorizedUserDocument, permissions: ClientUserDocumentStatus, data?: Permissions[Key]["dataType"]) => boolean);
+type RolesWithPermissions = {
+    [R in RoleType]: Partial<{
+        [Key in keyof Permissions]: Partial<{
+            [Action in Permissions[Key]["action"]]: PermissionCheck<Key>;
+        }>;
+    }>;
+};
+type Permissions = {
+    "user-account": {
+        dataType: UserAccountDocument;
+        action: LCRUDActions;
+    };
+    comment: {
+        dataType: CommentDocument;
+        action: "list" | "create" | "update" | "delete" | "report";
+    };
+    client: {
+        dataType: ClientDocument;
+        action: (typeof CLIENT_ENTITY_PERMISSIONS)["client"][number] | LCRUDActions;
+    };
+    "client-user": {
+        dataType: ClientUserDocument;
+        action: LCRUDActions | "verify";
+    };
+    "client-content-pillar": {
+        dataType: ClientContentPillarDocument;
+        action: (typeof CLIENT_ENTITY_PERMISSIONS)["client-content-pillar"][number];
+    };
+    "client-media-platform": {
+        dataType: ClientMediaPlatformDocument;
+        action: (typeof CLIENT_ENTITY_PERMISSIONS)["client-media-platform"][number];
+    };
+    "client-media-platform-content-type": {
+        dataType: ClientMediaPlatformContentTypeDocument;
+        action: (typeof CLIENT_ENTITY_PERMISSIONS)["client-media-platform-content-type"][number];
+    };
+    "client-project": {
+        dataType: ClientProjectDocument;
+        action: (typeof CLIENT_ENTITY_PERMISSIONS)["client-project"][number];
+    };
+    "client-report": {
+        dataType: ClientReportDocument;
+        action: (typeof CLIENT_ENTITY_PERMISSIONS)["client-report"][number];
+    };
+    "client-styleguide": {
+        dataType: ClientStyleguideDocument;
+        action: (typeof CLIENT_ENTITY_PERMISSIONS)["client-styleguide"][number];
+    };
+    "content-pillar": {
+        dataType: ContentPillarDocument;
+        action: LCRUDActions;
+    };
+    "media-platform": {
+        dataType: MediaPlatformDocument;
+        action: LCRUDActions;
+    };
+    "media-content-type": {
+        dataType: MediaContentTypeDocument;
+        action: LCRUDActions;
+    };
+    "utm-tracking-link": {
+        dataType: UtmTrackingLinkDocument;
+        action: (typeof CLIENT_ENTITY_PERMISSIONS)["utm-tracking-link"][number];
+    };
+    gcflytour: {
+        dataType: GCFlyTourDocument;
+        action: (typeof CLIENT_ENTITY_PERMISSIONS)["gcflytour"][number];
+    };
+    "gcflytour-snap": {
+        dataType: GCFlyTourSnapDocument;
+        action: (typeof CLIENT_ENTITY_PERMISSIONS)["gcflytour-snap"][number];
+    };
+};
+
+/**
+ * Attribute-based access control (ABAC) permissions
+ *
+ * @reference https://github.com/WebDevSimplified/permission-system/blob/main/auth-abac.ts
+ */
+
+declare function hasPermission<Resource extends keyof Permissions>(user: AuthorizedUserDocument, permissions: ClientUserDocumentStatus, resource: Resource, action: Permissions[Resource]["action"], data?: Permissions[Resource]["dataType"]): boolean;
+
+export { CLIENT_ENTITY_PERMISSIONS, type LCRUDActions, type Permissions, ROLE_PERMISSIONS, type RolesWithPermissions, hasPermission };