@northern.tech/store 0.1.3 → 0.2.0

package/dist/commonSelectors.mjs

@@ -11,26 +11,27 @@ import {
   getIsEnterprise,
   getMappedDevicesList,
   getOnboardingState,
+  getRelevantRoles,
   getSearchEndpoint,
   getSelectedDeploymentData,
   getTenantCapabilities,
   getUserCapabilities,
   getUserRoles
-} from "./chunk-RQOE5OOT.mjs";
-import "./chunk-BRHSKNFC.mjs";
-import "./chunk-HVHZG2H4.mjs";
-import "./chunk-O6O3D52B.mjs";
+} from "./chunk-Y47SYXII.mjs";
+import "./chunk-4U4X4KAC.mjs";
+import "./chunk-2HCZYULZ.mjs";
+import "./chunk-XJNI62IP.mjs";
 import "./chunk-H2PQQMRY.mjs";
 import "./chunk-QBKCUIWO.mjs";
-import "./chunk-DZBVTSIX.mjs";
-import "./chunk-ZIYGEXSJ.mjs";
+import "./chunk-BWFTQHNM.mjs";
+import "./chunk-QG4PT5WK.mjs";
 import "./chunk-C2YZYTJ6.mjs";
-import "./chunk-G32LAKW4.mjs";
-import "./chunk-ZNST5R6O.mjs";
+import "./chunk-U6YTBIDT.mjs";
+import "./chunk-MQIKQKSW.mjs";
 import "./chunk-G4FGNSV3.mjs";
 import "./chunk-IU4OXOPA.mjs";
 import "./chunk-BOSBROA3.mjs";
-import "./chunk-G3I53JGW.mjs";
+import "./chunk-OGAMVFPS.mjs";
 import "./chunk-XWBD7VOK.mjs";
 export {
   getAttrsEndpoint,
@@ -45,6 +46,7 @@ export {
   getIsEnterprise,
   getMappedDevicesList,
   getOnboardingState,
+  getRelevantRoles,
   getSearchEndpoint,
   getSelectedDeploymentData,
   getTenantCapabilities,

package/dist/constants.d.mts

@@ -1,12 +1,12 @@
 export { ADDONS, APPLICATION_JSON_CONTENT_TYPE, APPLICATION_JWT_CONTENT_TYPE, BEGINNING_OF_TIME, BENEFITS, DARK_MODE, LIGHT_MODE, PLANS, apiRoot, apiUrl, canAccess, chartTypes, defaultReportType, defaultReports, emptyChartSelection, headerNames, locations, yes } from './appSlice/constants.mjs';
-export { ALL_DEVICES, ALL_RELEASES, ATTRIBUTE_SCOPES, DEVICE_FILTERING_OPTIONS, DEVICE_ISSUE_OPTIONS, DEVICE_LIST_DEFAULTS, DEVICE_LIST_MAXIMUM_LENGTH, DEVICE_ONLINE_CUTOFF, EXTERNAL_PROVIDER, MAX_PAGE_SIZE, SORTING_OPTIONS, TIMEOUTS, UNGROUPED_GROUP, defaultIdAttribute, emptyRole, emptyUiPermissions, timeUnits } from './commonConstants.mjs';
+export { ALL_DEVICES, ALL_RELEASES, ATTRIBUTE_SCOPES, DEVICE_FILTERING_OPTIONS, DEVICE_ISSUE_OPTIONS, DEVICE_LIST_DEFAULTS, DEVICE_LIST_MAXIMUM_LENGTH, DEVICE_ONLINE_CUTOFF, EXTERNAL_PROVIDER, MAX_PAGE_SIZE, SORTING_OPTIONS, TIMEOUTS, UNGROUPED_GROUP, UiPermissionsDefinition, UiRoleDefinition, defaultIdAttribute, emptyRole, emptyUiPermissions, timeUnits } from './commonConstants.mjs';
 export { DEFAULT_PENDING_INPROGRESS_COUNT, DEPLOYMENT_ROUTES, DEPLOYMENT_STATES, DEPLOYMENT_TYPES, defaultStats, deploymentDisplayStates, deploymentPrototype, deploymentStatesToSubstates, deploymentStatesToSubstatesWithSkipped, deploymentSubstates, deploymentsApiUrl, deploymentsApiUrlV2, installationSubstatesMap, limitDefault, listDefaultsByState, pauseMap } from './deploymentsSlice/constants.mjs';
 export { ALL_DEVICE_STATES, DEVICE_CONNECT_STATES, DEVICE_DISMISSAL_STATE, DEVICE_MESSAGE_PROTOCOLS, DEVICE_MESSAGE_TYPES, DEVICE_STATES, deviceAuthV2, deviceConfig, deviceConnect, emptyFilter, geoAttributes, inventoryApiUrl, inventoryApiUrlV2, iotManagerBaseURL, reportingApiUrl } from './devicesSlice/constants.mjs';
 export { alertChannels, monitorApiUrlv1 } from './monitorSlice/constants.mjs';
 export { onboardingSteps, orderedOnboardingSteps } from './onboardingSlice/constants.mjs';
-export { AUDIT_LOGS_TYPES, JSON_METADATA_FORMAT, SSO_TYPES, TENANT_LIST_DEFAULT, Webhook, XML_METADATA_FORMAT, auditLogsApiUrl, emptyWebhook, getOidcStartUrl, getSamlStartUrl, ssoIdpApiUrlv1, tenantadmApiUrlv1, tenantadmApiUrlv2 } from './organizationSlice/constants.mjs';
+export { AUDIT_LOGS_TYPES, JSON_METADATA_FORMAT, SP_AUDIT_LOGS_TYPES, SSO_TYPES, TENANT_LIST_DEFAULT, Webhook, XML_METADATA_FORMAT, auditLogsApiUrl, emptyWebhook, getOidcStartUrl, getSamlStartUrl, ssoIdpApiUrlv1, tenantadmApiUrlv1, tenantadmApiUrlv2 } from './organizationSlice/constants.mjs';
 export { ARTIFACT_GENERATION_TYPE, currentArtifact, rootfsImageVersion, softwareTitleMap } from './releasesSlice/constants.mjs';
-export { OWN_USER_ID, PermissionTypes, READ_STATES, USER_LOGOUT, checkPermissionsObject, defaultPermissionSets, itemUiPermissionsReducer, rolesById, rolesByName, scopedPermissionAreas, settingsKeys, twoFAStates, uiPermissionsByArea, uiPermissionsById, useradmApiUrl, useradmApiUrl as useradmApiUrlv1, useradmApiUrlv2 } from './usersSlice/constants.mjs';
+export { OWN_USER_ID, PermissionTypes, PermissionsArea, READ_STATES, USER_LOGOUT, UiPermission, checkPermissionsObject, defaultPermissionSets, itemUiPermissionsReducer, rolesById, rolesByName, scopedPermissionAreas, serviceProviderRolesById, settingsKeys, twoFAStates, uiPermissionsByArea, uiPermissionsById, useradmApiUrl, useradmApiUrl as useradmApiUrlv1, useradmApiUrlv2 } from './usersSlice/constants.mjs';
 import '@mui/material/OverridableComponent';
 import '@mui/material';
 import 'react';

package/dist/constants.d.ts

@@ -1,12 +1,12 @@
 export { ADDONS, APPLICATION_JSON_CONTENT_TYPE, APPLICATION_JWT_CONTENT_TYPE, BEGINNING_OF_TIME, BENEFITS, DARK_MODE, LIGHT_MODE, PLANS, apiRoot, apiUrl, canAccess, chartTypes, defaultReportType, defaultReports, emptyChartSelection, headerNames, locations, yes } from './appSlice/constants.js';
-export { ALL_DEVICES, ALL_RELEASES, ATTRIBUTE_SCOPES, DEVICE_FILTERING_OPTIONS, DEVICE_ISSUE_OPTIONS, DEVICE_LIST_DEFAULTS, DEVICE_LIST_MAXIMUM_LENGTH, DEVICE_ONLINE_CUTOFF, EXTERNAL_PROVIDER, MAX_PAGE_SIZE, SORTING_OPTIONS, TIMEOUTS, UNGROUPED_GROUP, defaultIdAttribute, emptyRole, emptyUiPermissions, timeUnits } from './commonConstants.js';
+export { ALL_DEVICES, ALL_RELEASES, ATTRIBUTE_SCOPES, DEVICE_FILTERING_OPTIONS, DEVICE_ISSUE_OPTIONS, DEVICE_LIST_DEFAULTS, DEVICE_LIST_MAXIMUM_LENGTH, DEVICE_ONLINE_CUTOFF, EXTERNAL_PROVIDER, MAX_PAGE_SIZE, SORTING_OPTIONS, TIMEOUTS, UNGROUPED_GROUP, UiPermissionsDefinition, UiRoleDefinition, defaultIdAttribute, emptyRole, emptyUiPermissions, timeUnits } from './commonConstants.js';
 export { DEFAULT_PENDING_INPROGRESS_COUNT, DEPLOYMENT_ROUTES, DEPLOYMENT_STATES, DEPLOYMENT_TYPES, defaultStats, deploymentDisplayStates, deploymentPrototype, deploymentStatesToSubstates, deploymentStatesToSubstatesWithSkipped, deploymentSubstates, deploymentsApiUrl, deploymentsApiUrlV2, installationSubstatesMap, limitDefault, listDefaultsByState, pauseMap } from './deploymentsSlice/constants.js';
 export { ALL_DEVICE_STATES, DEVICE_CONNECT_STATES, DEVICE_DISMISSAL_STATE, DEVICE_MESSAGE_PROTOCOLS, DEVICE_MESSAGE_TYPES, DEVICE_STATES, deviceAuthV2, deviceConfig, deviceConnect, emptyFilter, geoAttributes, inventoryApiUrl, inventoryApiUrlV2, iotManagerBaseURL, reportingApiUrl } from './devicesSlice/constants.js';
 export { alertChannels, monitorApiUrlv1 } from './monitorSlice/constants.js';
 export { onboardingSteps, orderedOnboardingSteps } from './onboardingSlice/constants.js';
-export { AUDIT_LOGS_TYPES, JSON_METADATA_FORMAT, SSO_TYPES, TENANT_LIST_DEFAULT, Webhook, XML_METADATA_FORMAT, auditLogsApiUrl, emptyWebhook, getOidcStartUrl, getSamlStartUrl, ssoIdpApiUrlv1, tenantadmApiUrlv1, tenantadmApiUrlv2 } from './organizationSlice/constants.js';
+export { AUDIT_LOGS_TYPES, JSON_METADATA_FORMAT, SP_AUDIT_LOGS_TYPES, SSO_TYPES, TENANT_LIST_DEFAULT, Webhook, XML_METADATA_FORMAT, auditLogsApiUrl, emptyWebhook, getOidcStartUrl, getSamlStartUrl, ssoIdpApiUrlv1, tenantadmApiUrlv1, tenantadmApiUrlv2 } from './organizationSlice/constants.js';
 export { ARTIFACT_GENERATION_TYPE, currentArtifact, rootfsImageVersion, softwareTitleMap } from './releasesSlice/constants.js';
-export { OWN_USER_ID, PermissionTypes, READ_STATES, USER_LOGOUT, checkPermissionsObject, defaultPermissionSets, itemUiPermissionsReducer, rolesById, rolesByName, scopedPermissionAreas, settingsKeys, twoFAStates, uiPermissionsByArea, uiPermissionsById, useradmApiUrl, useradmApiUrl as useradmApiUrlv1, useradmApiUrlv2 } from './usersSlice/constants.js';
+export { OWN_USER_ID, PermissionTypes, PermissionsArea, READ_STATES, USER_LOGOUT, UiPermission, checkPermissionsObject, defaultPermissionSets, itemUiPermissionsReducer, rolesById, rolesByName, scopedPermissionAreas, serviceProviderRolesById, settingsKeys, twoFAStates, uiPermissionsByArea, uiPermissionsById, useradmApiUrl, useradmApiUrl as useradmApiUrlv1, useradmApiUrlv2 } from './usersSlice/constants.js';
 import '@mui/material/OverridableComponent';
 import '@mui/material';
 import 'react';

package/dist/constants.js

@@ -82,6 +82,7 @@ __export(constants_exports, {
   PermissionTypes: () => PermissionTypes,
   READ_STATES: () => READ_STATES,
   SORTING_OPTIONS: () => SORTING_OPTIONS,
+  SP_AUDIT_LOGS_TYPES: () => SP_AUDIT_LOGS_TYPES,
   SSO_TYPES: () => SSO_TYPES,
   TENANT_LIST_DEFAULT: () => TENANT_LIST_DEFAULT,
   TIMEOUTS: () => TIMEOUTS,
@@ -137,6 +138,7 @@ __export(constants_exports, {
   rolesByName: () => rolesByName,
   rootfsImageVersion: () => rootfsImageVersion,
   scopedPermissionAreas: () => scopedPermissionAreas,
+  serviceProviderRolesById: () => serviceProviderRolesById,
   settingsKeys: () => settingsKeys,
   softwareTitleMap: () => softwareTitleMap,
   ssoIdpApiUrlv1: () => ssoIdpApiUrlv1,
@@ -505,6 +507,7 @@ var emptyUiPermissions = Object.freeze({
   deployments: [],
   groups: Object.freeze({}),
   releases: Object.freeze({}),
+  tenantManagement: [],
   userManagement: []
 });
 var emptyRole = Object.freeze({
@@ -788,6 +791,7 @@ var AUDIT_LOGS_TYPES = [
   { title: "Device", queryParameter: "object_id", value: "device" },
   { title: "User", queryParameter: "object_id", value: "user" }
 ];
+var SP_AUDIT_LOGS_TYPES = [AUDIT_LOGS_TYPES[3], { title: "Tenant", queryParameter: "object_id", value: "tenant" }];
 var emptyWebhook = {
   description: "",
   enabled: true,
@@ -837,10 +841,12 @@ var permissionSetIds = {
   DeployToDevices: "DeployToDevices",
   ManageDevices: "ManageDevices",
   ManageReleases: "ManageReleases",
+  ManageTenants: "ManageTenants",
   ManageUsers: "ManageUsers",
   ReadAuditLogs: "ReadAuditLogs",
   ReadDevices: "ReadDevices",
   ReadReleases: "ReadReleases",
+  ReadTenants: "ReadTenants",
   ReadUsers: "ReadUsers",
   SuperUser: "SuperUser",
   UploadArtifacts: "UploadArtifacts"
@@ -879,6 +885,7 @@ var uiPermissionsById = {
     permissionSets: {
       groups: permissionSetIds.ManageDevices,
       releases: permissionSetIds.ManageReleases,
+      tenantManagement: permissionSetIds.ManageTenants,
       userManagement: permissionSetIds.ManageUsers
     },
     title: "Manage",
@@ -892,6 +899,7 @@ var uiPermissionsById = {
       auditlog: permissionSetIds.ReadAuditLogs,
       groups: permissionSetIds.ReadDevices,
       releases: permissionSetIds.ReadReleases,
+      tenantManagement: permissionSetIds.ReadTenants,
       userManagement: permissionSetIds.ReadUsers
     },
     title: "Read",
@@ -916,6 +924,7 @@ var uiPermissionsByArea = {
   auditlog: {
     endpoints: [{ path: /\/(auditlog)/i, types: [PermissionTypes.Get], uiPermissions: [uiPermissionsById.read] }],
     explanation: "Granting access to the audit log will allow tracing changes to devices, releases and user accounts, as well as providing information about deployments.",
+    key: "auditlog",
     uiPermissions: [uiPermissionsById.read],
     title: "System audit log"
   },
@@ -926,6 +935,7 @@ var uiPermissionsByArea = {
       { path: /\/(deployments\/config)/i, types: [PermissionTypes.Get, PermissionTypes.Put], uiPermissions: [uiPermissionsById.manage] }
     ],
     explanation: "Providing deploy permissions will allow deployments to be created using the releases and devices a user has access to.",
+    key: "deployments",
     uiPermissions: [uiPermissionsById.read, uiPermissionsById.deploy],
     title: "Deployments"
   },
@@ -941,6 +951,7 @@ var uiPermissionsByArea = {
       { path: /\/(deviceconnect\/devices)/i, types: [PermissionTypes.Get, PermissionTypes.Post], uiPermissions: [uiPermissionsById.connect] }
     ],
     explanation: "Device group management permissions control the degree to which devices in a group can be accessed and moved to other groups.",
+    key: "groups",
     scope: scopedPermissionAreas.groups.scopeType,
     uiPermissions: [uiPermissionsById.read, uiPermissionsById.manage, uiPermissionsById.deploy, uiPermissionsById.configure, uiPermissionsById.connect],
     title: "Group Management"
@@ -960,16 +971,29 @@ var uiPermissionsByArea = {
       }
     ],
     explanation: "Release permissions can be granted to allow artifact & release modifications, as well as the creation of new releases.",
+    key: "releases",
     scope: "ReleaseTags",
     uiPermissions: [uiPermissionsById.read, uiPermissionsById.manage, uiPermissionsById.upload],
     title: "Release Management"
   },
+  tenantManagement: {
+    endpoints: [
+      { path: /\/(tenantadm\/tenants)/i, types: [PermissionTypes.Get], uiPermissions: [uiPermissionsById.read] },
+      { path: /\/(tenantadm\/tenants)/i, types: [PermissionTypes.Post, PermissionTypes.Put], uiPermissions: [uiPermissionsById.manage] },
+      { path: /\/(users\/exists)/i, types: [PermissionTypes.Get], uiPermissions: [uiPermissionsById.manage] }
+    ],
+    explanation: "Tenant management permissions allow listing, creating and modifying child tenants",
+    key: "tenantManagement",
+    uiPermissions: [uiPermissionsById.read, uiPermissionsById.manage],
+    title: "Tenant Management"
+  },
   userManagement: {
     endpoints: [
       { path: /\/(useradm)/i, types: [PermissionTypes.Get], uiPermissions: [uiPermissionsById.read] },
       { path: /\/(useradm)/i, types: [PermissionTypes.Post], uiPermissions: [uiPermissionsById.manage] }
     ],
     explanation: "User management permissions should be granted carefully, as these allow privilege increases for any users managed by a user with user management permissions",
+    key: "userManagement",
     uiPermissions: [uiPermissionsById.read, uiPermissionsById.manage],
     title: "User Management"
   }
@@ -1038,6 +1062,30 @@ var rolesById = Object.freeze({
     })
   }
 });
+var serviceProviderRolesById = {
+  admin: {
+    name: "Admin",
+    value: staticRolesByName.admin,
+    description: "Full access",
+    permissions: [],
+    uiPermissions: __spreadProps(__spreadValues({}, emptyUiPermissions), {
+      auditlog: uiPermissionsByArea.auditlog.uiPermissions.map(permissionMapper),
+      userManagement: uiPermissionsByArea.userManagement.uiPermissions.map(permissionMapper),
+      tenantManagement: uiPermissionsByArea.tenantManagement.uiPermissions.map(permissionMapper)
+    })
+  },
+  readOnly: {
+    name: "Read access",
+    value: staticRolesByName.admin,
+    description: "This role can see all linked organizations but cannot make any changes",
+    permissions: [],
+    uiPermissions: __spreadProps(__spreadValues({}, emptyUiPermissions), {
+      auditlog: [uiPermissionsById.read.value],
+      userManagement: [uiPermissionsById.read.value],
+      tenantManagement: [uiPermissionsById.read.value]
+    })
+  }
+};
 var defaultPermissionSets = {
   [permissionSetIds.Basic]: {
     name: permissionSetIds.Basic,
@@ -1068,6 +1116,18 @@ var defaultPermissionSets = {
       releases: { [ALL_RELEASES]: [uiPermissionsById.read.value] }
     }
   },
+  [permissionSetIds.ReadTenants]: {
+    name: permissionSetIds.ReadTenants,
+    result: {
+      tenantManagement: [uiPermissionsById.read.value]
+    }
+  },
+  [permissionSetIds.ManageTenants]: {
+    name: permissionSetIds.ManageTenants,
+    result: {
+      tenantManagement: [uiPermissionsById.manage.value]
+    }
+  },
   [permissionSetIds.ReadUsers]: {
     name: permissionSetIds.ReadUsers,
     result: {
@@ -1174,6 +1234,7 @@ var READ_STATES = {
   PermissionTypes,
   READ_STATES,
   SORTING_OPTIONS,
+  SP_AUDIT_LOGS_TYPES,
   SSO_TYPES,
   TENANT_LIST_DEFAULT,
   TIMEOUTS,
@@ -1229,6 +1290,7 @@ var READ_STATES = {
   rolesByName,
   rootfsImageVersion,
   scopedPermissionAreas,
+  serviceProviderRolesById,
   settingsKeys,
   softwareTitleMap,
   ssoIdpApiUrlv1,