@iblai/iblai-api 4.43.1-core → 4.43.1-rbac-core

package/dist/types/index.d.ts

@@ -150,6 +150,7 @@ export type { MediaResource } from './models/MediaResource';
 export { MediaTypeEnum } from './models/MediaTypeEnum';
 export type { MentorDetail } from './models/MentorDetail';
 export type { MentorInteractions } from './models/MentorInteractions';
+export type { MentorPolicy } from './models/MentorPolicy';
 export type { MetricDetail } from './models/MetricDetail';
 export { ModeEnum } from './models/ModeEnum';
 export type { NewPerLearnerList } from './models/NewPerLearnerList';
@@ -392,6 +393,8 @@ export type { UserApp } from './models/UserApp';
 export type { UserDeleteAPIError } from './models/UserDeleteAPIError';
 export type { UserDeleteAPIRequest } from './models/UserDeleteAPIRequest';
 export type { UserDeleteAPIResponse } from './models/UserDeleteAPIResponse';
+export type { UserGroupAccess } from './models/UserGroupAccess';
+export type { UserGroupAccessInfo } from './models/UserGroupAccessInfo';
 export type { UserInfo } from './models/UserInfo';
 export type { UserLicenseAssignmentCreate } from './models/UserLicenseAssignmentCreate';
 export type { UserLicenseAssignmentDetail } from './models/UserLicenseAssignmentDetail';

package/dist/types/models/MentorPolicy.d.ts

@@ -0,0 +1,47 @@
+import type { RbacPolicyGroup } from './RbacPolicyGroup';
+import type { RbacUser } from './RbacUser';
+/**
+ * Serializer for mentor-specific RBAC policies using ModelSerializer pattern.
+ * Accepts mentor_id and role, generates resources and role internally.
+ */
+export type MentorPolicy = {
+    readonly id: number;
+    /**
+     * Policy name. If not supplied, defaults to a UUID4
+     */
+    readonly name: string;
+    /**
+     * Platform key where the mentor belongs
+     */
+    platform_key: string;
+    /**
+     * ID of the mentor to manage access for
+     */
+    mentor_id: number;
+    /**
+     * Role for accessing this mentor (viewer or editor)
+     */
+    role: string;
+    /**
+     * List of resources this policy applies to
+     */
+    readonly resources: any;
+    readonly users: Array<RbacUser>;
+    readonly groups: Array<RbacPolicyGroup>;
+    /**
+     * List of group IDs to grant access to this mentor
+     */
+    groups_to_add?: Array<number>;
+    /**
+     * List of group IDs to revoke access from this mentor
+     */
+    groups_to_remove?: Array<number>;
+    /**
+     * List of user IDs to grant access to this mentor
+     */
+    users_to_add?: Array<number>;
+    /**
+     * List of user IDs to revoke access from this mentor
+     */
+    users_to_remove?: Array<number>;
+};

package/dist/types/models/PatchedRbacGroup.d.ts

@@ -22,6 +22,7 @@ export type PatchedRbacGroup = {
      * Optional group description
      */
     description?: string;
+    readonly owner?: RbacUser;
     readonly users?: Array<RbacUser>;
     /**
      * List of user IDs to add to this group

package/dist/types/models/RbacGroup.d.ts

@@ -22,6 +22,7 @@ export type RbacGroup = {
      * Optional group description
      */
     description?: string;
+    readonly owner: RbacUser;
     readonly users: Array<RbacUser>;
     /**
      * List of user IDs to add to this group

package/dist/types/models/StudentLLMAccessResponse.d.ts

@@ -10,8 +10,4 @@ export type StudentLLMAccessResponse = {
      * List of LLM resource paths that students can access. Format: ['llms/openai/models/gpt-4', 'llms/openai/', 'llms/']
      */
     llm_resources: Array<string>;
-    /**
-     * Success message (only in set access response)
-     */
-    message?: string;
 };

package/dist/types/models/UserGroupAccess.d.ts

@@ -0,0 +1,34 @@
+import type { UserGroupAccessInfo } from './UserGroupAccessInfo';
+/**
+ * ModelSerializer for user group access policies
+ */
+export type UserGroupAccess = {
+    /**
+     * Platform key where the groups exist
+     */
+    platform_key: string;
+    /**
+     * ID of the user to manage group access for
+     */
+    user_id: number;
+    /**
+     * List of group IDs to grant access to
+     */
+    groups_to_add?: Array<number>;
+    /**
+     * List of group IDs to revoke access from
+     */
+    groups_to_remove?: Array<number>;
+    /**
+     * Policy ID
+     */
+    readonly policy_id: number;
+    /**
+     * Policy name
+     */
+    readonly policy_name: string;
+    /**
+     * Groups with access
+     */
+    readonly groups_with_access: Array<UserGroupAccessInfo>;
+};

package/dist/types/models/UserGroupAccessInfo.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Serializer for group access information in responses
+ */
+export type UserGroupAccessInfo = {
+    /**
+     * Group ID
+     */
+    id: number;
+    /**
+     * Group name
+     */
+    name: string;
+    /**
+     * Group description
+     */
+    description: string;
+    /**
+     * List of permissions user has for this group (e.g., ['read', 'manageMentors'])
+     */
+    permissions: Array<string>;
+};

package/dist/types/services/CoreService.d.ts

@@ -7,6 +7,7 @@ import type { LauncherViewPostRequest } from '../models/LauncherViewPostRequest'
 import type { LtiKey } from '../models/LtiKey';
 import type { LtiMentor } from '../models/LtiMentor';
 import type { LtiTool } from '../models/LtiTool';
+import type { MentorPolicy } from '../models/MentorPolicy';
 import type { PaginatedRbacGroupList } from '../models/PaginatedRbacGroupList';
 import type { PaginatedRbacPolicyList } from '../models/PaginatedRbacPolicyList';
 import type { PaginatedRbacRoleList } from '../models/PaginatedRbacRoleList';
@@ -38,6 +39,7 @@ import type { TokenProxyInput } from '../models/TokenProxyInput';
 import type { TokenProxyOutput } from '../models/TokenProxyOutput';
 import type { UserDeleteAPIRequest } from '../models/UserDeleteAPIRequest';
 import type { UserDeleteAPIResponse } from '../models/UserDeleteAPIResponse';
+import type { UserGroupAccess } from '../models/UserGroupAccess';
 import type { UserPlatformLink } from '../models/UserPlatformLink';
 import type { UserPlatformManagementListViewGetResponse } from '../models/UserPlatformManagementListViewGetResponse';
 import type { UserPlatformSelfLinkRequest } from '../models/UserPlatformSelfLinkRequest';
@@ -634,7 +636,15 @@ export declare class CoreService {
      * @returns PaginatedRbacGroupList
      * @throws ApiError
      */
-    static coreRbacGroupsList({ page, pageSize, platformKey, }: {
+    static coreRbacGroupsList({ platformKey, owner, page, pageSize, }: {
+        /**
+         * Filter groups by platform key
+         */
+        platformKey: string;
+        /**
+         * Filter groups by owner username
+         */
+        owner?: string;
         /**
          * A page number within the paginated result set.
          */
@@ -643,10 +653,6 @@ export declare class CoreService {
          * Number of results to return per page.
          */
         pageSize?: number;
-        /**
-         * Filter groups by platform key
-         */
-        platformKey?: string;
     }): CancelablePromise<PaginatedRbacGroupList>;
     /**
      * Create RBAC group
@@ -709,8 +715,33 @@ export declare class CoreService {
         /**
          * platform key for authorization check
          */
-        platformKey?: string;
+        platformKey: string;
     }): CancelablePromise<void>;
+    /**
+     * Get mentor access status
+     * Retrieve current access information for a specific mentor, including all groups and users that have access with their respective roles.
+     * @returns MentorPolicy
+     * @throws ApiError
+     */
+    static coreRbacMentorAccessList({ mentorId, platformKey, }: {
+        /**
+         * ID of the mentor to get access information for
+         */
+        mentorId: number;
+        /**
+         * Platform key where the mentor belongs
+         */
+        platformKey: string;
+    }): CancelablePromise<Array<MentorPolicy>>;
+    /**
+     * Control which RbacGroups and/or Users have access to a mentor and with what Role
+     * Create or update RBAC policies to manage group and user access to specific mentors. Creates role-specific policies and handles adding/removing groups and users.
+     * @returns MentorPolicy
+     * @throws ApiError
+     */
+    static coreRbacMentorAccessCreate({ requestBody, }: {
+        requestBody: MentorPolicy;
+    }): CancelablePromise<MentorPolicy>;
     /**
      * Check user permissions
      * Check user permissions for specified resources
@@ -805,7 +836,7 @@ export declare class CoreService {
         /**
          * platform key for authorization check
          */
-        platformKey?: string;
+        platformKey: string;
     }): CancelablePromise<void>;
     /**
      * List RBAC roles
@@ -888,7 +919,7 @@ export declare class CoreService {
         /**
          * platform key for authorization check
          */
-        platformKey?: string;
+        platformKey: string;
     }): CancelablePromise<void>;
     /**
      * Set student LLM access permissions
@@ -932,6 +963,31 @@ export declare class CoreService {
          */
         platformKey: string;
     }): CancelablePromise<StudentMentorCreationPermissionResponse>;
+    /**
+     * Get user group access status
+     * Retrieve current group access information for a specific user, including all groups the user has access to and whether they have mentor management permissions.
+     * @returns UserGroupAccess
+     * @throws ApiError
+     */
+    static coreRbacUserGroupAccessRetrieve({ platformKey, userId, }: {
+        /**
+         * Platform key where the groups exist
+         */
+        platformKey: string;
+        /**
+         * ID of the user to check group access for
+         */
+        userId: number;
+    }): CancelablePromise<UserGroupAccess>;
+    /**
+     * Manage user access to groups
+     * Create or update user access to groups by adding/removing group access. Creates one policy per user with GROUP_MENTOR_MANAGER role for managing mentor access.
+     * @returns UserGroupAccess
+     * @throws ApiError
+     */
+    static coreRbacUserGroupAccessCreate({ requestBody, }: {
+        requestBody: UserGroupAccess;
+    }): CancelablePromise<UserGroupAccess>;
     /**
      * Invalidate all tokens for the authenticated user
      * @returns any No response body

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@iblai/iblai-api",
-  "version": "4.43.1-core",
+  "version": "4.43.1-rbac-core",
   "main": "dist/index.cjs.js",
   "module": "dist/index.esm.js",
   "type": "module",