@northern.tech/store 0.1.3 → 0.2.1

package/dist/usersSlice/constants.js

@@ -1,27 +1,10 @@
 "use strict";
 var __create = Object.create;
 var __defProp = Object.defineProperty;
-var __defProps = Object.defineProperties;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropDescs = Object.getOwnPropertyDescriptors;
 var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getOwnPropSymbols = Object.getOwnPropertySymbols;
 var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __propIsEnum = Object.prototype.propertyIsEnumerable;
-var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
-var __spreadValues = (a, b) => {
-  for (var prop in b || (b = {}))
-    if (__hasOwnProp.call(b, prop))
-      __defNormalProp(a, prop, b[prop]);
-  if (__getOwnPropSymbols)
-    for (var prop of __getOwnPropSymbols(b)) {
-      if (__propIsEnum.call(b, prop))
-        __defNormalProp(a, prop, b[prop]);
-    }
-  return a;
-};
-var __spreadProps = (a, b) => __defProps(a, __getOwnPropDescs(b));
 var __export = (target, all) => {
   for (var name in all)
     __defProp(target, name, { get: all[name], enumerable: true });
@@ -57,6 +40,7 @@ __export(constants_exports, {
   rolesById: () => rolesById,
   rolesByName: () => rolesByName,
   scopedPermissionAreas: () => scopedPermissionAreas,
+  serviceProviderRolesById: () => serviceProviderRolesById,
   settingsKeys: () => settingsKeys,
   twoFAStates: () => twoFAStates,
   uiPermissionsByArea: () => uiPermissionsByArea,
@@ -84,7 +68,7 @@ var chartTypes = {
 };
 var emptyChartSelection = { software: "", group: "", chartType: chartTypes.bar.key, attribute: "artifact_name" };
 var defaultReportType = "distribution";
-var defaultReports = [__spreadProps(__spreadValues({}, emptyChartSelection), { group: null, attribute: "artifact_name", type: defaultReportType })];
+var defaultReports = [{ ...emptyChartSelection, group: null, attribute: "artifact_name", type: defaultReportType }];
 var PLANS = {
   os: {
     id: "os",
@@ -403,13 +387,14 @@ var emptyUiPermissions = Object.freeze({
   deployments: [],
   groups: Object.freeze({}),
   releases: Object.freeze({}),
+  tenantManagement: [],
   userManagement: []
 });
 var emptyRole = Object.freeze({
   name: void 0,
   description: "",
   permissions: [],
-  uiPermissions: Object.freeze(__spreadValues({}, emptyUiPermissions))
+  uiPermissions: Object.freeze({ ...emptyUiPermissions })
 });
 
 // src/deploymentsSlice/constants.ts
@@ -438,11 +423,12 @@ var deploymentStatesToSubstates = {
   pending: [deploymentSubstates.pending],
   successes: [deploymentSubstates.success, deploymentSubstates.alreadyInstalled, deploymentSubstates.noartifact]
 };
-var deploymentStatesToSubstatesWithSkipped = __spreadProps(__spreadValues({}, deploymentStatesToSubstates), {
+var deploymentStatesToSubstatesWithSkipped = {
+  ...deploymentStatesToSubstates,
   failures: [deploymentSubstates.failure],
   skipped: [deploymentSubstates.aborted, deploymentSubstates.noartifact, deploymentSubstates.alreadyInstalled, deploymentSubstates.decommissioned],
   successes: [deploymentSubstates.success]
-});
+};
 var installationSubstatesMap = {
   download: {
     title: "download",
@@ -487,8 +473,8 @@ var DEPLOYMENT_STATES = {
 var listDefaultsByState = {
   [DEPLOYMENT_STATES.inprogress]: { page: 1, perPage: 10 },
   [DEPLOYMENT_STATES.pending]: { page: 1, perPage: 10 },
-  [DEPLOYMENT_STATES.scheduled]: __spreadValues({}, DEVICE_LIST_DEFAULTS),
-  [DEPLOYMENT_STATES.finished]: __spreadValues({}, DEVICE_LIST_DEFAULTS),
+  [DEPLOYMENT_STATES.scheduled]: { ...DEVICE_LIST_DEFAULTS },
+  [DEPLOYMENT_STATES.finished]: { ...DEVICE_LIST_DEFAULTS },
   sort: { direction: SORTING_OPTIONS.desc }
 };
 var DEPLOYMENT_ROUTES = {
@@ -601,6 +587,13 @@ var auditLogsApiUrl = `${apiUrl.v1}/auditlogs`;
 var tenantadmApiUrlv1 = `${apiUrl.v1}/tenantadm`;
 var tenantadmApiUrlv2 = `${apiUrl.v2}/tenantadm`;
 var ssoIdpApiUrlv1 = `${apiUrl.v1}/useradm/sso/idp/metadata`;
+var AUDIT_LOGS_TYPES = [
+  { title: "Artifact", queryParameter: "object_type", value: "artifact" },
+  { title: "Deployment", queryParameter: "object_deployment_name", value: "deployment" },
+  { title: "Device", queryParameter: "object_id", value: "device" },
+  { title: "User", queryParameter: "object_id", value: "user" }
+];
+var SP_AUDIT_LOGS_TYPES = [AUDIT_LOGS_TYPES[3], { title: "Tenant", queryParameter: "object_id", value: "tenant" }];
 var emptyWebhook = {
   description: "",
   enabled: true,
@@ -644,10 +637,12 @@ var permissionSetIds = {
   DeployToDevices: "DeployToDevices",
   ManageDevices: "ManageDevices",
   ManageReleases: "ManageReleases",
+  ManageTenants: "ManageTenants",
   ManageUsers: "ManageUsers",
   ReadAuditLogs: "ReadAuditLogs",
   ReadDevices: "ReadDevices",
   ReadReleases: "ReadReleases",
+  ReadTenants: "ReadTenants",
   ReadUsers: "ReadUsers",
   SuperUser: "SuperUser",
   UploadArtifacts: "UploadArtifacts"
@@ -686,6 +681,7 @@ var uiPermissionsById = {
     permissionSets: {
       groups: permissionSetIds.ManageDevices,
       releases: permissionSetIds.ManageReleases,
+      tenantManagement: permissionSetIds.ManageTenants,
       userManagement: permissionSetIds.ManageUsers
     },
     title: "Manage",
@@ -699,6 +695,7 @@ var uiPermissionsById = {
       auditlog: permissionSetIds.ReadAuditLogs,
       groups: permissionSetIds.ReadDevices,
       releases: permissionSetIds.ReadReleases,
+      tenantManagement: permissionSetIds.ReadTenants,
       userManagement: permissionSetIds.ReadUsers
     },
     title: "Read",
@@ -723,6 +720,7 @@ var uiPermissionsByArea = {
   auditlog: {
     endpoints: [{ path: /\/(auditlog)/i, types: [PermissionTypes.Get], uiPermissions: [uiPermissionsById.read] }],
     explanation: "Granting access to the audit log will allow tracing changes to devices, releases and user accounts, as well as providing information about deployments.",
+    key: "auditlog",
     uiPermissions: [uiPermissionsById.read],
     title: "System audit log"
   },
@@ -733,6 +731,7 @@ var uiPermissionsByArea = {
       { path: /\/(deployments\/config)/i, types: [PermissionTypes.Get, PermissionTypes.Put], uiPermissions: [uiPermissionsById.manage] }
     ],
     explanation: "Providing deploy permissions will allow deployments to be created using the releases and devices a user has access to.",
+    key: "deployments",
     uiPermissions: [uiPermissionsById.read, uiPermissionsById.deploy],
     title: "Deployments"
   },
@@ -748,6 +747,7 @@ var uiPermissionsByArea = {
       { path: /\/(deviceconnect\/devices)/i, types: [PermissionTypes.Get, PermissionTypes.Post], uiPermissions: [uiPermissionsById.connect] }
     ],
     explanation: "Device group management permissions control the degree to which devices in a group can be accessed and moved to other groups.",
+    key: "groups",
     scope: scopedPermissionAreas.groups.scopeType,
     uiPermissions: [uiPermissionsById.read, uiPermissionsById.manage, uiPermissionsById.deploy, uiPermissionsById.configure, uiPermissionsById.connect],
     title: "Group Management"
@@ -767,27 +767,37 @@ var uiPermissionsByArea = {
       }
     ],
     explanation: "Release permissions can be granted to allow artifact & release modifications, as well as the creation of new releases.",
+    key: "releases",
     scope: "ReleaseTags",
     uiPermissions: [uiPermissionsById.read, uiPermissionsById.manage, uiPermissionsById.upload],
     title: "Release Management"
   },
+  tenantManagement: {
+    endpoints: [
+      { path: /\/(tenantadm\/tenants)/i, types: [PermissionTypes.Get], uiPermissions: [uiPermissionsById.read] },
+      { path: /\/(tenantadm\/tenants)/i, types: [PermissionTypes.Post, PermissionTypes.Put], uiPermissions: [uiPermissionsById.manage] },
+      { path: /\/(users\/exists)/i, types: [PermissionTypes.Get], uiPermissions: [uiPermissionsById.manage] }
+    ],
+    explanation: "Tenant management permissions allow listing, creating and modifying child tenants",
+    key: "tenantManagement",
+    uiPermissions: [uiPermissionsById.read, uiPermissionsById.manage],
+    title: "Tenant Management"
+  },
   userManagement: {
     endpoints: [
       { path: /\/(useradm)/i, types: [PermissionTypes.Get], uiPermissions: [uiPermissionsById.read] },
       { path: /\/(useradm)/i, types: [PermissionTypes.Post], uiPermissions: [uiPermissionsById.manage] }
     ],
     explanation: "User management permissions should be granted carefully, as these allow privilege increases for any users managed by a user with user management permissions",
+    key: "userManagement",
     uiPermissions: [uiPermissionsById.read, uiPermissionsById.manage],
     title: "User Management"
   }
 };
 var permissionMapper = (permission) => permission.value;
-var itemUiPermissionsReducer = (accu, { item, uiPermissions }) => item ? __spreadProps(__spreadValues({}, accu), { [item]: uiPermissions }) : accu;
+var itemUiPermissionsReducer = (accu, { item, uiPermissions }) => item ? { ...accu, [item]: uiPermissions } : accu;
 var checkSinglePermission = (permission, requiredPermission) => requiredPermission === permission || uiPermissionsById[permission].permissionLevel > uiPermissionsById[requiredPermission].permissionLevel;
-var checkPermissionsObject = (permissions, requiredPermission, scopedAccess, superAccess) => {
-  var _a, _b;
-  return ((_a = permissions[superAccess]) == null ? void 0 : _a.some((permission) => checkSinglePermission(permission, requiredPermission))) || ((_b = permissions[scopedAccess]) == null ? void 0 : _b.some((permission) => checkSinglePermission(permission, requiredPermission)));
-};
+var checkPermissionsObject = (permissions, requiredPermission, scopedAccess, superAccess) => permissions[superAccess]?.some((permission) => checkSinglePermission(permission, requiredPermission)) || permissions[scopedAccess]?.some((permission) => checkSinglePermission(permission, requiredPermission));
 var rolesById = Object.freeze({
   [staticRolesByName.admin]: {
     name: "Admin",
@@ -795,56 +805,87 @@ var rolesById = Object.freeze({
     description: "Full access",
     permissions: [],
     // permissions refers to the values returned from the backend
-    uiPermissions: __spreadProps(__spreadValues({}, emptyUiPermissions), {
+    uiPermissions: {
+      ...emptyUiPermissions,
       auditlog: uiPermissionsByArea.auditlog.uiPermissions.map(permissionMapper),
       deployments: uiPermissionsByArea.deployments.uiPermissions.map(permissionMapper),
       groups: { [ALL_DEVICES]: uiPermissionsByArea.groups.uiPermissions.map(permissionMapper) },
       releases: { [ALL_RELEASES]: uiPermissionsByArea.releases.uiPermissions.map(permissionMapper) },
       userManagement: uiPermissionsByArea.userManagement.uiPermissions.map(permissionMapper)
-    })
+    }
   },
   [staticRolesByName.readOnly]: {
     name: "Read Access",
     value: staticRolesByName.readOnly,
     description: "",
     permissions: [],
-    uiPermissions: __spreadProps(__spreadValues({}, emptyUiPermissions), {
+    uiPermissions: {
+      ...emptyUiPermissions,
       deployments: [uiPermissionsById.read.value],
       groups: { [ALL_DEVICES]: [uiPermissionsById.read.value] },
       releases: { [ALL_RELEASES]: [uiPermissionsById.read.value] },
       userManagement: [uiPermissionsById.read.value]
-    })
+    }
   },
   [staticRolesByName.ci]: {
     name: "Releases Manager",
     value: staticRolesByName.ci,
     description: "",
     permissions: [],
-    uiPermissions: __spreadProps(__spreadValues({}, emptyUiPermissions), {
+    uiPermissions: {
+      ...emptyUiPermissions,
       releases: { [ALL_RELEASES]: uiPermissionsByArea.releases.uiPermissions.map(permissionMapper) }
-    })
+    }
   },
   [staticRolesByName.deploymentsManager]: {
     name: "Deployments Manager",
     value: staticRolesByName.deploymentsManager,
     description: "",
     permissions: [],
-    uiPermissions: __spreadProps(__spreadValues({}, emptyUiPermissions), {
+    uiPermissions: {
+      ...emptyUiPermissions,
       deployments: uiPermissionsByArea.deployments.uiPermissions.map(permissionMapper),
       groups: { [ALL_DEVICES]: [uiPermissionsById.deploy.value, uiPermissionsById.read.value] },
       releases: { [ALL_RELEASES]: [uiPermissionsById.read.value] }
-    })
+    }
   },
   [staticRolesByName.terminalAccess]: {
     name: "Troubleshooting",
     value: staticRolesByName.terminalAccess,
     description: "Access to the troubleshooting features: Remote Terminal, File Transfer, Port Forwarding",
     permissions: [],
-    uiPermissions: __spreadProps(__spreadValues({}, emptyUiPermissions), {
+    uiPermissions: {
+      ...emptyUiPermissions,
       groups: { [ALL_DEVICES]: [uiPermissionsById.connect.value] }
-    })
+    }
   }
 });
+var serviceProviderRolesById = {
+  admin: {
+    name: "Admin",
+    value: staticRolesByName.admin,
+    description: "Full access",
+    permissions: [],
+    uiPermissions: {
+      ...emptyUiPermissions,
+      auditlog: uiPermissionsByArea.auditlog.uiPermissions.map(permissionMapper),
+      userManagement: uiPermissionsByArea.userManagement.uiPermissions.map(permissionMapper),
+      tenantManagement: uiPermissionsByArea.tenantManagement.uiPermissions.map(permissionMapper)
+    }
+  },
+  readOnly: {
+    name: "Read access",
+    value: staticRolesByName.admin,
+    description: "This role can see all linked organizations but cannot make any changes",
+    permissions: [],
+    uiPermissions: {
+      ...emptyUiPermissions,
+      auditlog: [uiPermissionsById.read.value],
+      userManagement: [uiPermissionsById.read.value],
+      tenantManagement: [uiPermissionsById.read.value]
+    }
+  }
+};
 var defaultPermissionSets = {
   [permissionSetIds.Basic]: {
     name: permissionSetIds.Basic,
@@ -855,7 +896,9 @@ var defaultPermissionSets = {
   },
   [permissionSetIds.SuperUser]: {
     name: permissionSetIds.SuperUser,
-    result: __spreadValues({}, rolesById[staticRolesByName.admin].uiPermissions)
+    result: {
+      ...rolesById[staticRolesByName.admin].uiPermissions
+    }
   },
   [permissionSetIds.ManageUsers]: {
     name: permissionSetIds.ManageUsers,
@@ -875,6 +918,18 @@ var defaultPermissionSets = {
       releases: { [ALL_RELEASES]: [uiPermissionsById.read.value] }
     }
   },
+  [permissionSetIds.ReadTenants]: {
+    name: permissionSetIds.ReadTenants,
+    result: {
+      tenantManagement: [uiPermissionsById.read.value]
+    }
+  },
+  [permissionSetIds.ManageTenants]: {
+    name: permissionSetIds.ManageTenants,
+    result: {
+      tenantManagement: [uiPermissionsById.manage.value]
+    }
+  },
   [permissionSetIds.ReadUsers]: {
     name: permissionSetIds.ReadUsers,
     result: {
@@ -928,11 +983,12 @@ var defaultPermissionSets = {
 };
 var USER_LOGOUT = "USER_LOGOUT";
 var OWN_USER_ID = "me";
-var rolesByName = __spreadProps(__spreadValues({}, staticRolesByName), {
+var rolesByName = {
+  ...staticRolesByName,
   deploymentCreation: { action: "CREATE_DEPLOYMENT", object: { type: "DEVICE_GROUP", value: void 0 } },
   groupAccess: { action: "VIEW_DEVICE", object: { type: "DEVICE_GROUP", value: void 0 } },
   userManagement: { action: "http", object: { type: "any", value: `${useradmApiUrlv1}/.*` } }
-});
+};
 var twoFAStates = {
   enabled: "enabled",
   disabled: "disabled",
@@ -944,24 +1000,4 @@ var READ_STATES = {
   seen: "seen",
   unread: "unread"
 };
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  OWN_USER_ID,
-  PermissionTypes,
-  READ_STATES,
-  USER_LOGOUT,
-  checkPermissionsObject,
-  defaultPermissionSets,
-  itemUiPermissionsReducer,
-  rolesById,
-  rolesByName,
-  scopedPermissionAreas,
-  settingsKeys,
-  twoFAStates,
-  uiPermissionsByArea,
-  uiPermissionsById,
-  useradmApiUrl,
-  useradmApiUrlv1,
-  useradmApiUrlv2
-});
 //# sourceMappingURL=constants.js.map