@northern.tech/store 0.1.3 → 0.2.0

package/dist/usersSlice/constants.d.ts

@@ -1,6 +1,34 @@
 declare const useradmApiUrlv1: string;
 declare const useradmApiUrlv2: string;
 
+type UiPermission = {
+    explanations: object;
+    permissionSets: Record<string, string>;
+    permissionLevel: number;
+    title: string;
+    value: string;
+    verbs: string[];
+};
+type ExcessiveAccessConfig = {
+    selector: string;
+    warning: string;
+};
+type EndpointDefinition = {
+    path: RegExp;
+    types: string[];
+    uiPermissions: UiPermission[];
+};
+type PermissionsArea = {
+    endpoints: EndpointDefinition[];
+    explanation: string;
+    uiPermissions: UiPermission[];
+    title: string;
+    key: string;
+    scope?: string;
+    filter?: (object: any) => string[];
+    placeholder?: string;
+    excessiveAccessConfig?: ExcessiveAccessConfig;
+};
 declare const PermissionTypes: {
     Any: string;
     Get: string;
@@ -58,6 +86,7 @@ declare const uiPermissionsById: {
         permissionSets: {
             groups: string;
             releases: string;
+            tenantManagement: string;
             userManagement: string;
         };
         title: string;
@@ -73,6 +102,7 @@ declare const uiPermissionsById: {
             auditlog: string;
             groups: string;
             releases: string;
+            tenantManagement: string;
             userManagement: string;
         };
         title: string;
@@ -127,6 +157,7 @@ declare const uiPermissionsByArea: {
                     auditlog: string;
                     groups: string;
                     releases: string;
+                    tenantManagement: string;
                     userManagement: string;
                 };
                 title: string;
@@ -135,6 +166,7 @@ declare const uiPermissionsByArea: {
             }[];
         }[];
         explanation: string;
+        key: string;
         uiPermissions: {
             explanations: {
                 groups: string;
@@ -144,6 +176,7 @@ declare const uiPermissionsByArea: {
                 auditlog: string;
                 groups: string;
                 releases: string;
+                tenantManagement: string;
                 userManagement: string;
             };
             title: string;
@@ -181,6 +214,7 @@ declare const uiPermissionsByArea: {
                     auditlog: string;
                     groups: string;
                     releases: string;
+                    tenantManagement: string;
                     userManagement: string;
                 };
                 title: string;
@@ -199,6 +233,7 @@ declare const uiPermissionsByArea: {
                 permissionSets: {
                     groups: string;
                     releases: string;
+                    tenantManagement: string;
                     userManagement: string;
                 };
                 title: string;
@@ -207,6 +242,7 @@ declare const uiPermissionsByArea: {
             }[];
         })[];
         explanation: string;
+        key: string;
         uiPermissions: ({
             explanations: {
                 groups: string;
@@ -228,6 +264,7 @@ declare const uiPermissionsByArea: {
                 auditlog: string;
                 groups: string;
                 releases: string;
+                tenantManagement: string;
                 userManagement: string;
             };
             title: string;
@@ -254,6 +291,7 @@ declare const uiPermissionsByArea: {
             }[];
         }[];
         explanation: string;
+        key: string;
         scope: string;
         uiPermissions: {
             explanations: {
@@ -282,6 +320,7 @@ declare const uiPermissionsByArea: {
                     auditlog: string;
                     groups: string;
                     releases: string;
+                    tenantManagement: string;
                     userManagement: string;
                 };
                 title: string;
@@ -314,6 +353,7 @@ declare const uiPermissionsByArea: {
                 permissionSets: {
                     groups: string;
                     releases: string;
+                    tenantManagement: string;
                     userManagement: string;
                 };
                 title: string;
@@ -328,6 +368,7 @@ declare const uiPermissionsByArea: {
                     auditlog: string;
                     groups: string;
                     releases: string;
+                    tenantManagement: string;
                     userManagement: string;
                 };
                 title: string;
@@ -336,6 +377,7 @@ declare const uiPermissionsByArea: {
             })[];
         })[];
         explanation: string;
+        key: string;
         scope: string;
         uiPermissions: ({
             explanations: {
@@ -346,6 +388,7 @@ declare const uiPermissionsByArea: {
             permissionSets: {
                 groups: string;
                 releases: string;
+                tenantManagement: string;
                 userManagement: string;
             };
             title: string;
@@ -360,6 +403,7 @@ declare const uiPermissionsByArea: {
                 auditlog: string;
                 groups: string;
                 releases: string;
+                tenantManagement: string;
                 userManagement: string;
             };
             title: string;
@@ -382,6 +426,81 @@ declare const uiPermissionsByArea: {
         })[];
         title: string;
     };
+    tenantManagement: {
+        endpoints: ({
+            path: RegExp;
+            types: string[];
+            uiPermissions: {
+                explanations: {
+                    groups: string;
+                };
+                permissionLevel: number;
+                permissionSets: {
+                    auditlog: string;
+                    groups: string;
+                    releases: string;
+                    tenantManagement: string;
+                    userManagement: string;
+                };
+                title: string;
+                value: string;
+                verbs: string[];
+            }[];
+        } | {
+            path: RegExp;
+            types: string[];
+            uiPermissions: {
+                explanations: {
+                    groups: string;
+                    releases: string;
+                };
+                permissionLevel: number;
+                permissionSets: {
+                    groups: string;
+                    releases: string;
+                    tenantManagement: string;
+                    userManagement: string;
+                };
+                title: string;
+                value: string;
+                verbs: string[];
+            }[];
+        })[];
+        explanation: string;
+        key: string;
+        uiPermissions: ({
+            explanations: {
+                groups: string;
+                releases: string;
+            };
+            permissionLevel: number;
+            permissionSets: {
+                groups: string;
+                releases: string;
+                tenantManagement: string;
+                userManagement: string;
+            };
+            title: string;
+            value: string;
+            verbs: string[];
+        } | {
+            explanations: {
+                groups: string;
+            };
+            permissionLevel: number;
+            permissionSets: {
+                auditlog: string;
+                groups: string;
+                releases: string;
+                tenantManagement: string;
+                userManagement: string;
+            };
+            title: string;
+            value: string;
+            verbs: string[];
+        })[];
+        title: string;
+    };
     userManagement: {
         endpoints: ({
             path: RegExp;
@@ -395,6 +514,7 @@ declare const uiPermissionsByArea: {
                     auditlog: string;
                     groups: string;
                     releases: string;
+                    tenantManagement: string;
                     userManagement: string;
                 };
                 title: string;
@@ -413,6 +533,7 @@ declare const uiPermissionsByArea: {
                 permissionSets: {
                     groups: string;
                     releases: string;
+                    tenantManagement: string;
                     userManagement: string;
                 };
                 title: string;
@@ -421,6 +542,7 @@ declare const uiPermissionsByArea: {
             }[];
         })[];
         explanation: string;
+        key: string;
         uiPermissions: ({
             explanations: {
                 groups: string;
@@ -430,6 +552,7 @@ declare const uiPermissionsByArea: {
             permissionSets: {
                 groups: string;
                 releases: string;
+                tenantManagement: string;
                 userManagement: string;
             };
             title: string;
@@ -444,6 +567,7 @@ declare const uiPermissionsByArea: {
                 auditlog: string;
                 groups: string;
                 releases: string;
+                tenantManagement: string;
                 userManagement: string;
             };
             title: string;
@@ -474,6 +598,7 @@ declare const rolesById: Readonly<{
                 "All releases": any[];
             };
             userManagement: any[];
+            tenantManagement: string[];
         };
     } | {
         name: string;
@@ -484,10 +609,11 @@ declare const rolesById: Readonly<{
             releases: {
                 "All releases": any[];
             };
-            auditlog: never[];
-            deployments: never[];
-            groups: Readonly<{}>;
-            userManagement: never[];
+            auditlog: string[];
+            deployments?: string[];
+            groups: Record<string, string[]>;
+            tenantManagement: string[];
+            userManagement: string[];
         };
     } | {
         name: string;
@@ -498,13 +624,44 @@ declare const rolesById: Readonly<{
             groups: {
                 "All devices": string[];
             };
-            auditlog: never[];
-            deployments: never[];
-            releases: Readonly<{}>;
-            userManagement: never[];
+            auditlog: string[];
+            deployments?: string[];
+            releases: Record<string, string[]>;
+            tenantManagement: string[];
+            userManagement: string[];
         };
     };
 }>;
+declare const serviceProviderRolesById: {
+    admin: {
+        name: string;
+        value: string;
+        description: string;
+        permissions: never[];
+        uiPermissions: {
+            auditlog: any[];
+            userManagement: any[];
+            tenantManagement: any[];
+            deployments?: string[];
+            groups: Record<string, string[]>;
+            releases: Record<string, string[]>;
+        };
+    };
+    readOnly: {
+        name: string;
+        value: string;
+        description: string;
+        permissions: never[];
+        uiPermissions: {
+            auditlog: string[];
+            userManagement: string[];
+            tenantManagement: string[];
+            deployments?: string[];
+            groups: Record<string, string[]>;
+            releases: Record<string, string[]>;
+        };
+    };
+};
 declare const defaultPermissionSets: {
     [x: string]: {
         name: string;
@@ -512,6 +669,7 @@ declare const defaultPermissionSets: {
             userManagement: string[];
             auditlog?: undefined;
             releases?: undefined;
+            tenantManagement?: undefined;
             deployments?: undefined;
             groups?: undefined;
         };
@@ -527,22 +685,25 @@ declare const defaultPermissionSets: {
                 "All releases": any[];
             };
             userManagement: any[];
+            tenantManagement: string[];
         } | {
             releases: {
                 "All releases": any[];
             };
-            auditlog: never[];
-            deployments: never[];
-            groups: Readonly<{}>;
-            userManagement: never[];
+            auditlog: string[];
+            deployments?: string[];
+            groups: Record<string, string[]>;
+            tenantManagement: string[];
+            userManagement: string[];
         } | {
             groups: {
                 "All devices": string[];
             };
-            auditlog: never[];
-            deployments: never[];
-            releases: Readonly<{}>;
-            userManagement: never[];
+            auditlog: string[];
+            deployments?: string[];
+            releases: Record<string, string[]>;
+            tenantManagement: string[];
+            userManagement: string[];
         };
     } | {
         name: string;
@@ -550,6 +711,7 @@ declare const defaultPermissionSets: {
             auditlog: string[];
             userManagement?: undefined;
             releases?: undefined;
+            tenantManagement?: undefined;
             deployments?: undefined;
             groups?: undefined;
         };
@@ -561,6 +723,17 @@ declare const defaultPermissionSets: {
             };
             userManagement?: undefined;
             auditlog?: undefined;
+            tenantManagement?: undefined;
+            deployments?: undefined;
+            groups?: undefined;
+        };
+    } | {
+        name: string;
+        result: {
+            tenantManagement: string[];
+            userManagement?: undefined;
+            auditlog?: undefined;
+            releases?: undefined;
             deployments?: undefined;
             groups?: undefined;
         };
@@ -574,6 +747,7 @@ declare const defaultPermissionSets: {
             userManagement?: undefined;
             auditlog?: undefined;
             releases?: undefined;
+            tenantManagement?: undefined;
         };
     } | {
         name: string;
@@ -584,6 +758,7 @@ declare const defaultPermissionSets: {
             userManagement?: undefined;
             auditlog?: undefined;
             releases?: undefined;
+            tenantManagement?: undefined;
             deployments?: undefined;
         };
     };
@@ -632,4 +807,4 @@ declare const READ_STATES: {
     unread: string;
 };
 
-export { OWN_USER_ID, PermissionTypes, READ_STATES, USER_LOGOUT, checkPermissionsObject, defaultPermissionSets, itemUiPermissionsReducer, rolesById, rolesByName, scopedPermissionAreas, settingsKeys, twoFAStates, uiPermissionsByArea, uiPermissionsById, useradmApiUrlv1 as useradmApiUrl, useradmApiUrlv1, useradmApiUrlv2 };
+export { OWN_USER_ID, PermissionTypes, type PermissionsArea, READ_STATES, USER_LOGOUT, type UiPermission, checkPermissionsObject, defaultPermissionSets, itemUiPermissionsReducer, rolesById, rolesByName, scopedPermissionAreas, serviceProviderRolesById, settingsKeys, twoFAStates, uiPermissionsByArea, uiPermissionsById, useradmApiUrlv1 as useradmApiUrl, useradmApiUrlv1, useradmApiUrlv2 };

package/dist/usersSlice/constants.js

@@ -57,6 +57,7 @@ __export(constants_exports, {
   rolesById: () => rolesById,
   rolesByName: () => rolesByName,
   scopedPermissionAreas: () => scopedPermissionAreas,
+  serviceProviderRolesById: () => serviceProviderRolesById,
   settingsKeys: () => settingsKeys,
   twoFAStates: () => twoFAStates,
   uiPermissionsByArea: () => uiPermissionsByArea,
@@ -403,6 +404,7 @@ var emptyUiPermissions = Object.freeze({
   deployments: [],
   groups: Object.freeze({}),
   releases: Object.freeze({}),
+  tenantManagement: [],
   userManagement: []
 });
 var emptyRole = Object.freeze({
@@ -601,6 +603,13 @@ var auditLogsApiUrl = `${apiUrl.v1}/auditlogs`;
 var tenantadmApiUrlv1 = `${apiUrl.v1}/tenantadm`;
 var tenantadmApiUrlv2 = `${apiUrl.v2}/tenantadm`;
 var ssoIdpApiUrlv1 = `${apiUrl.v1}/useradm/sso/idp/metadata`;
+var AUDIT_LOGS_TYPES = [
+  { title: "Artifact", queryParameter: "object_type", value: "artifact" },
+  { title: "Deployment", queryParameter: "object_deployment_name", value: "deployment" },
+  { title: "Device", queryParameter: "object_id", value: "device" },
+  { title: "User", queryParameter: "object_id", value: "user" }
+];
+var SP_AUDIT_LOGS_TYPES = [AUDIT_LOGS_TYPES[3], { title: "Tenant", queryParameter: "object_id", value: "tenant" }];
 var emptyWebhook = {
   description: "",
   enabled: true,
@@ -644,10 +653,12 @@ var permissionSetIds = {
   DeployToDevices: "DeployToDevices",
   ManageDevices: "ManageDevices",
   ManageReleases: "ManageReleases",
+  ManageTenants: "ManageTenants",
   ManageUsers: "ManageUsers",
   ReadAuditLogs: "ReadAuditLogs",
   ReadDevices: "ReadDevices",
   ReadReleases: "ReadReleases",
+  ReadTenants: "ReadTenants",
   ReadUsers: "ReadUsers",
   SuperUser: "SuperUser",
   UploadArtifacts: "UploadArtifacts"
@@ -686,6 +697,7 @@ var uiPermissionsById = {
     permissionSets: {
       groups: permissionSetIds.ManageDevices,
       releases: permissionSetIds.ManageReleases,
+      tenantManagement: permissionSetIds.ManageTenants,
       userManagement: permissionSetIds.ManageUsers
     },
     title: "Manage",
@@ -699,6 +711,7 @@ var uiPermissionsById = {
       auditlog: permissionSetIds.ReadAuditLogs,
       groups: permissionSetIds.ReadDevices,
       releases: permissionSetIds.ReadReleases,
+      tenantManagement: permissionSetIds.ReadTenants,
       userManagement: permissionSetIds.ReadUsers
     },
     title: "Read",
@@ -723,6 +736,7 @@ var uiPermissionsByArea = {
   auditlog: {
     endpoints: [{ path: /\/(auditlog)/i, types: [PermissionTypes.Get], uiPermissions: [uiPermissionsById.read] }],
     explanation: "Granting access to the audit log will allow tracing changes to devices, releases and user accounts, as well as providing information about deployments.",
+    key: "auditlog",
     uiPermissions: [uiPermissionsById.read],
     title: "System audit log"
   },
@@ -733,6 +747,7 @@ var uiPermissionsByArea = {
       { path: /\/(deployments\/config)/i, types: [PermissionTypes.Get, PermissionTypes.Put], uiPermissions: [uiPermissionsById.manage] }
     ],
     explanation: "Providing deploy permissions will allow deployments to be created using the releases and devices a user has access to.",
+    key: "deployments",
     uiPermissions: [uiPermissionsById.read, uiPermissionsById.deploy],
     title: "Deployments"
   },
@@ -748,6 +763,7 @@ var uiPermissionsByArea = {
       { path: /\/(deviceconnect\/devices)/i, types: [PermissionTypes.Get, PermissionTypes.Post], uiPermissions: [uiPermissionsById.connect] }
     ],
     explanation: "Device group management permissions control the degree to which devices in a group can be accessed and moved to other groups.",
+    key: "groups",
     scope: scopedPermissionAreas.groups.scopeType,
     uiPermissions: [uiPermissionsById.read, uiPermissionsById.manage, uiPermissionsById.deploy, uiPermissionsById.configure, uiPermissionsById.connect],
     title: "Group Management"
@@ -767,16 +783,29 @@ var uiPermissionsByArea = {
       }
     ],
     explanation: "Release permissions can be granted to allow artifact & release modifications, as well as the creation of new releases.",
+    key: "releases",
     scope: "ReleaseTags",
     uiPermissions: [uiPermissionsById.read, uiPermissionsById.manage, uiPermissionsById.upload],
     title: "Release Management"
   },
+  tenantManagement: {
+    endpoints: [
+      { path: /\/(tenantadm\/tenants)/i, types: [PermissionTypes.Get], uiPermissions: [uiPermissionsById.read] },
+      { path: /\/(tenantadm\/tenants)/i, types: [PermissionTypes.Post, PermissionTypes.Put], uiPermissions: [uiPermissionsById.manage] },
+      { path: /\/(users\/exists)/i, types: [PermissionTypes.Get], uiPermissions: [uiPermissionsById.manage] }
+    ],
+    explanation: "Tenant management permissions allow listing, creating and modifying child tenants",
+    key: "tenantManagement",
+    uiPermissions: [uiPermissionsById.read, uiPermissionsById.manage],
+    title: "Tenant Management"
+  },
   userManagement: {
     endpoints: [
       { path: /\/(useradm)/i, types: [PermissionTypes.Get], uiPermissions: [uiPermissionsById.read] },
       { path: /\/(useradm)/i, types: [PermissionTypes.Post], uiPermissions: [uiPermissionsById.manage] }
     ],
     explanation: "User management permissions should be granted carefully, as these allow privilege increases for any users managed by a user with user management permissions",
+    key: "userManagement",
     uiPermissions: [uiPermissionsById.read, uiPermissionsById.manage],
     title: "User Management"
   }
@@ -845,6 +874,30 @@ var rolesById = Object.freeze({
     })
   }
 });
+var serviceProviderRolesById = {
+  admin: {
+    name: "Admin",
+    value: staticRolesByName.admin,
+    description: "Full access",
+    permissions: [],
+    uiPermissions: __spreadProps(__spreadValues({}, emptyUiPermissions), {
+      auditlog: uiPermissionsByArea.auditlog.uiPermissions.map(permissionMapper),
+      userManagement: uiPermissionsByArea.userManagement.uiPermissions.map(permissionMapper),
+      tenantManagement: uiPermissionsByArea.tenantManagement.uiPermissions.map(permissionMapper)
+    })
+  },
+  readOnly: {
+    name: "Read access",
+    value: staticRolesByName.admin,
+    description: "This role can see all linked organizations but cannot make any changes",
+    permissions: [],
+    uiPermissions: __spreadProps(__spreadValues({}, emptyUiPermissions), {
+      auditlog: [uiPermissionsById.read.value],
+      userManagement: [uiPermissionsById.read.value],
+      tenantManagement: [uiPermissionsById.read.value]
+    })
+  }
+};
 var defaultPermissionSets = {
   [permissionSetIds.Basic]: {
     name: permissionSetIds.Basic,
@@ -875,6 +928,18 @@ var defaultPermissionSets = {
       releases: { [ALL_RELEASES]: [uiPermissionsById.read.value] }
     }
   },
+  [permissionSetIds.ReadTenants]: {
+    name: permissionSetIds.ReadTenants,
+    result: {
+      tenantManagement: [uiPermissionsById.read.value]
+    }
+  },
+  [permissionSetIds.ManageTenants]: {
+    name: permissionSetIds.ManageTenants,
+    result: {
+      tenantManagement: [uiPermissionsById.manage.value]
+    }
+  },
   [permissionSetIds.ReadUsers]: {
     name: permissionSetIds.ReadUsers,
     result: {
@@ -956,6 +1021,7 @@ var READ_STATES = {
   rolesById,
   rolesByName,
   scopedPermissionAreas,
+  serviceProviderRolesById,
   settingsKeys,
   twoFAStates,
   uiPermissionsByArea,