@northern.tech/store 0.1.3 → 0.2.0

package/dist/usersSlice/thunks.mjs

@@ -35,38 +35,38 @@ import {
   verify2FA,
   verifyEmailComplete,
   verifyEmailStart
-} from "../chunk-YNVSU3AA.mjs";
-import "../chunk-N7G6QK2E.mjs";
-import "../chunk-G7LATUT6.mjs";
-import "../chunk-IVSYYXTC.mjs";
-import "../chunk-R2GBNXLV.mjs";
+} from "../chunk-UPMSYTWW.mjs";
+import "../chunk-ZLRZO4EY.mjs";
+import "../chunk-MJW4632R.mjs";
+import "../chunk-L4HIW3KB.mjs";
+import "../chunk-2P4VECEE.mjs";
 import "../chunk-V32GTKOS.mjs";
-import "../chunk-RQOE5OOT.mjs";
-import "../chunk-BRHSKNFC.mjs";
-import "../chunk-HVHZG2H4.mjs";
-import "../chunk-O6O3D52B.mjs";
+import "../chunk-Y47SYXII.mjs";
+import "../chunk-4U4X4KAC.mjs";
+import "../chunk-2HCZYULZ.mjs";
+import "../chunk-XJNI62IP.mjs";
 import "../chunk-H2PQQMRY.mjs";
 import "../chunk-QBKCUIWO.mjs";
-import "../chunk-DZBVTSIX.mjs";
-import "../chunk-ZIYGEXSJ.mjs";
+import "../chunk-BWFTQHNM.mjs";
+import "../chunk-QG4PT5WK.mjs";
 import "../chunk-C2YZYTJ6.mjs";
-import "../chunk-XYVPYFSM.mjs";
-import "../chunk-IPPIKGIB.mjs";
-import "../chunk-BJSH2G7W.mjs";
-import "../chunk-TD45YTYK.mjs";
-import "../chunk-7E7KJHY3.mjs";
-import "../chunk-RH6ONMG7.mjs";
+import "../chunk-RWYS5MKN.mjs";
+import "../chunk-ENLZPHTQ.mjs";
+import "../chunk-EFHEROXZ.mjs";
+import "../chunk-WS3YYLTJ.mjs";
+import "../chunk-NCI6JV5R.mjs";
+import "../chunk-ZZ6VIQ3U.mjs";
 import "../chunk-M4U5R7A4.mjs";
-import "../chunk-6667TCAJ.mjs";
-import "../chunk-HRWZJQMH.mjs";
-import "../chunk-F37LUTBX.mjs";
-import "../chunk-HXPYJ6QN.mjs";
-import "../chunk-G32LAKW4.mjs";
-import "../chunk-ZNST5R6O.mjs";
+import "../chunk-EM2HUGUY.mjs";
+import "../chunk-X65NMDPS.mjs";
+import "../chunk-OWHFMKTA.mjs";
+import "../chunk-4C6IY46N.mjs";
+import "../chunk-U6YTBIDT.mjs";
+import "../chunk-MQIKQKSW.mjs";
 import "../chunk-G4FGNSV3.mjs";
 import "../chunk-IU4OXOPA.mjs";
 import "../chunk-BOSBROA3.mjs";
-import "../chunk-G3I53JGW.mjs";
+import "../chunk-OGAMVFPS.mjs";
 import "../chunk-XWBD7VOK.mjs";
 export {
   addUserToCurrentTenant,

package/dist/utils.d.mts

@@ -19,11 +19,12 @@ declare const listItemMapper: (byId: any, ids: any, { defaultObject, cutOffSize
     cutOffSize?: number | undefined;
 }) => any;
 declare const mergePermissions: (existingPermissions: {
-    auditlog: never[];
-    deployments: never[];
-    groups: Readonly<{}>;
-    releases: Readonly<{}>;
-    userManagement: never[];
+    auditlog: string[];
+    deployments?: string[];
+    groups: Record<string, string[]>;
+    releases: Record<string, string[]>;
+    tenantManagement: string[];
+    userManagement: string[];
 } | undefined, addedPermissions: any) => any;
 declare const mapUserRolesToUiPermissions: (userRoles: any, roles: any) => any;
 declare const progress: ({ loaded, total }: {

package/dist/utils.d.ts

@@ -19,11 +19,12 @@ declare const listItemMapper: (byId: any, ids: any, { defaultObject, cutOffSize
     cutOffSize?: number | undefined;
 }) => any;
 declare const mergePermissions: (existingPermissions: {
-    auditlog: never[];
-    deployments: never[];
-    groups: Readonly<{}>;
-    releases: Readonly<{}>;
-    userManagement: never[];
+    auditlog: string[];
+    deployments?: string[];
+    groups: Record<string, string[]>;
+    releases: Record<string, string[]>;
+    tenantManagement: string[];
+    userManagement: string[];
 } | undefined, addedPermissions: any) => any;
 declare const mapUserRolesToUiPermissions: (userRoles: any, roles: any) => any;
 declare const progress: ({ loaded, total }: {

package/dist/utils.js

@@ -278,6 +278,7 @@ var emptyUiPermissions = Object.freeze({
   deployments: [],
   groups: Object.freeze({}),
   releases: Object.freeze({}),
+  tenantManagement: [],
   userManagement: []
 });
 var emptyRole = Object.freeze({
@@ -618,6 +619,13 @@ var auditLogsApiUrl = `${apiUrl.v1}/auditlogs`;
 var tenantadmApiUrlv1 = `${apiUrl.v1}/tenantadm`;
 var tenantadmApiUrlv2 = `${apiUrl.v2}/tenantadm`;
 var ssoIdpApiUrlv1 = `${apiUrl.v1}/useradm/sso/idp/metadata`;
+var AUDIT_LOGS_TYPES = [
+  { title: "Artifact", queryParameter: "object_type", value: "artifact" },
+  { title: "Deployment", queryParameter: "object_deployment_name", value: "deployment" },
+  { title: "Device", queryParameter: "object_id", value: "device" },
+  { title: "User", queryParameter: "object_id", value: "user" }
+];
+var SP_AUDIT_LOGS_TYPES = [AUDIT_LOGS_TYPES[3], { title: "Tenant", queryParameter: "object_id", value: "tenant" }];
 var emptyWebhook = {
   description: "",
   enabled: true,
@@ -661,10 +669,12 @@ var permissionSetIds = {
   DeployToDevices: "DeployToDevices",
   ManageDevices: "ManageDevices",
   ManageReleases: "ManageReleases",
+  ManageTenants: "ManageTenants",
   ManageUsers: "ManageUsers",
   ReadAuditLogs: "ReadAuditLogs",
   ReadDevices: "ReadDevices",
   ReadReleases: "ReadReleases",
+  ReadTenants: "ReadTenants",
   ReadUsers: "ReadUsers",
   SuperUser: "SuperUser",
   UploadArtifacts: "UploadArtifacts"
@@ -703,6 +713,7 @@ var uiPermissionsById = {
     permissionSets: {
       groups: permissionSetIds.ManageDevices,
       releases: permissionSetIds.ManageReleases,
+      tenantManagement: permissionSetIds.ManageTenants,
       userManagement: permissionSetIds.ManageUsers
     },
     title: "Manage",
@@ -716,6 +727,7 @@ var uiPermissionsById = {
       auditlog: permissionSetIds.ReadAuditLogs,
       groups: permissionSetIds.ReadDevices,
       releases: permissionSetIds.ReadReleases,
+      tenantManagement: permissionSetIds.ReadTenants,
       userManagement: permissionSetIds.ReadUsers
     },
     title: "Read",
@@ -740,6 +752,7 @@ var uiPermissionsByArea = {
   auditlog: {
     endpoints: [{ path: /\/(auditlog)/i, types: [PermissionTypes.Get], uiPermissions: [uiPermissionsById.read] }],
     explanation: "Granting access to the audit log will allow tracing changes to devices, releases and user accounts, as well as providing information about deployments.",
+    key: "auditlog",
     uiPermissions: [uiPermissionsById.read],
     title: "System audit log"
   },
@@ -750,6 +763,7 @@ var uiPermissionsByArea = {
       { path: /\/(deployments\/config)/i, types: [PermissionTypes.Get, PermissionTypes.Put], uiPermissions: [uiPermissionsById.manage] }
     ],
     explanation: "Providing deploy permissions will allow deployments to be created using the releases and devices a user has access to.",
+    key: "deployments",
     uiPermissions: [uiPermissionsById.read, uiPermissionsById.deploy],
     title: "Deployments"
   },
@@ -765,6 +779,7 @@ var uiPermissionsByArea = {
       { path: /\/(deviceconnect\/devices)/i, types: [PermissionTypes.Get, PermissionTypes.Post], uiPermissions: [uiPermissionsById.connect] }
     ],
     explanation: "Device group management permissions control the degree to which devices in a group can be accessed and moved to other groups.",
+    key: "groups",
     scope: scopedPermissionAreas.groups.scopeType,
     uiPermissions: [uiPermissionsById.read, uiPermissionsById.manage, uiPermissionsById.deploy, uiPermissionsById.configure, uiPermissionsById.connect],
     title: "Group Management"
@@ -784,16 +799,29 @@ var uiPermissionsByArea = {
       }
     ],
     explanation: "Release permissions can be granted to allow artifact & release modifications, as well as the creation of new releases.",
+    key: "releases",
     scope: "ReleaseTags",
     uiPermissions: [uiPermissionsById.read, uiPermissionsById.manage, uiPermissionsById.upload],
     title: "Release Management"
   },
+  tenantManagement: {
+    endpoints: [
+      { path: /\/(tenantadm\/tenants)/i, types: [PermissionTypes.Get], uiPermissions: [uiPermissionsById.read] },
+      { path: /\/(tenantadm\/tenants)/i, types: [PermissionTypes.Post, PermissionTypes.Put], uiPermissions: [uiPermissionsById.manage] },
+      { path: /\/(users\/exists)/i, types: [PermissionTypes.Get], uiPermissions: [uiPermissionsById.manage] }
+    ],
+    explanation: "Tenant management permissions allow listing, creating and modifying child tenants",
+    key: "tenantManagement",
+    uiPermissions: [uiPermissionsById.read, uiPermissionsById.manage],
+    title: "Tenant Management"
+  },
   userManagement: {
     endpoints: [
       { path: /\/(useradm)/i, types: [PermissionTypes.Get], uiPermissions: [uiPermissionsById.read] },
       { path: /\/(useradm)/i, types: [PermissionTypes.Post], uiPermissions: [uiPermissionsById.manage] }
     ],
     explanation: "User management permissions should be granted carefully, as these allow privilege increases for any users managed by a user with user management permissions",
+    key: "userManagement",
     uiPermissions: [uiPermissionsById.read, uiPermissionsById.manage],
     title: "User Management"
   }
@@ -856,6 +884,30 @@ var rolesById = Object.freeze({
     })
   }
 });
+var serviceProviderRolesById = {
+  admin: {
+    name: "Admin",
+    value: staticRolesByName.admin,
+    description: "Full access",
+    permissions: [],
+    uiPermissions: __spreadProps(__spreadValues({}, emptyUiPermissions), {
+      auditlog: uiPermissionsByArea.auditlog.uiPermissions.map(permissionMapper),
+      userManagement: uiPermissionsByArea.userManagement.uiPermissions.map(permissionMapper),
+      tenantManagement: uiPermissionsByArea.tenantManagement.uiPermissions.map(permissionMapper)
+    })
+  },
+  readOnly: {
+    name: "Read access",
+    value: staticRolesByName.admin,
+    description: "This role can see all linked organizations but cannot make any changes",
+    permissions: [],
+    uiPermissions: __spreadProps(__spreadValues({}, emptyUiPermissions), {
+      auditlog: [uiPermissionsById.read.value],
+      userManagement: [uiPermissionsById.read.value],
+      tenantManagement: [uiPermissionsById.read.value]
+    })
+  }
+};
 var defaultPermissionSets = {
   [permissionSetIds.Basic]: {
     name: permissionSetIds.Basic,
@@ -886,6 +938,18 @@ var defaultPermissionSets = {
       releases: { [ALL_RELEASES]: [uiPermissionsById.read.value] }
     }
   },
+  [permissionSetIds.ReadTenants]: {
+    name: permissionSetIds.ReadTenants,
+    result: {
+      tenantManagement: [uiPermissionsById.read.value]
+    }
+  },
+  [permissionSetIds.ManageTenants]: {
+    name: permissionSetIds.ManageTenants,
+    result: {
+      tenantManagement: [uiPermissionsById.manage.value]
+    }
+  },
   [permissionSetIds.ReadUsers]: {
     name: permissionSetIds.ReadUsers,
     result: {