@oneuptime/cli 14.0.64 → 14.0.65

package/build/dist/Index.js

@@ -127783,6 +127783,7 @@ var IconProp = /* @__PURE__ */ ((IconProp2) => {
   IconProp2["ChartPie"] = "ChartPie";
   IconProp2["Heartbeat"] = "Heartbeat";
   IconProp2["Waterfall"] = "Waterfall";
+  IconProp2["Timeline"] = "Timeline";
   IconProp2["ArrowDown"] = "ArrowDown";
   IconProp2["ArrowUp"] = "ArrowUp";
   IconProp2["ArrowLeft"] = "ArrowLeft";
@@ -350237,6 +350238,1317 @@ TeamMemberCustomField = __decorateClass([
   })
 ], TeamMemberCustomField);
 
+// ../Common/Models/DatabaseModels/CustomRole.ts
+var CustomRole = class extends DatabaseBaseModel {
+  constructor() {
+    super(...arguments);
+    this.project = void 0;
+    this.projectId = void 0;
+    this.name = void 0;
+    this.description = void 0;
+    this.slug = void 0;
+    this.permissionCount = void 0;
+    this.createdByUser = void 0;
+    this.createdByUserId = void 0;
+    this.deletedByUser = void 0;
+    this.deletedByUserId = void 0;
+  }
+};
+__name(CustomRole, "CustomRole");
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "projectId",
+    type: TableColumnType_default.Entity,
+    modelType: Project,
+    title: "Project",
+    description: "Relation to Project Resource in which this object belongs",
+    example: "My Production Project"
+  }),
+  ManyToOne(
+    () => {
+      return Project;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "CASCADE",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "projectId" })
+], CustomRole.prototype, "project", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: []
+  }),
+  Index(),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    required: true,
+    canReadOnRelationQuery: true,
+    title: "Project ID",
+    description: "ID of your OneUptime Project in which this object belongs",
+    example: "a3f9c8e2-d4b6-4a7c-9e5f-1a2b3c4d5e6f"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: false,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], CustomRole.prototype, "projectId", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ]
+  }),
+  Index(),
+  TableColumn_default({
+    required: true,
+    type: TableColumnType_default.ShortText,
+    canReadOnRelationQuery: true,
+    title: "Name",
+    description: "What the role is called, such as Incident Responder. Unique in the project, and never the name of a built-in role.",
+    example: "Incident Responder"
+  }),
+  Column({
+    nullable: false,
+    type: ColumnType_default.ShortText,
+    length: ColumnLength_default.ShortText
+  })
+], CustomRole.prototype, "name", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ]
+  }),
+  TableColumn_default({
+    required: false,
+    type: TableColumnType_default.LongText,
+    title: "Description",
+    description: "What the role is for, in a sentence or two.",
+    example: "Declares, works and resolves incidents and alerts."
+  }),
+  Column({
+    nullable: true,
+    type: ColumnType_default.LongText,
+    length: ColumnLength_default.LongText
+  })
+], CustomRole.prototype, "description", 2);
+__decorateClass([
+  Index(),
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    required: true,
+    unique: true,
+    type: TableColumnType_default.Slug,
+    computed: true,
+    title: "Slug",
+    description: "Friendly globally unique name for your object"
+  }),
+  Column({
+    nullable: false,
+    type: ColumnType_default.Slug,
+    length: ColumnLength_default.Slug,
+    unique: true
+  })
+], CustomRole.prototype, "slug", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    type: TableColumnType_default.Number,
+    required: true,
+    isDefaultValueColumn: true,
+    computed: true,
+    title: "Permission Count",
+    description: "How many permissions the role holds. OneUptime keeps it as permissions are added to the role and taken out of it.",
+    defaultValue: 0,
+    example: 6
+  }),
+  Column({
+    type: ColumnType_default.Number,
+    nullable: false,
+    default: 0
+  })
+], CustomRole.prototype, "permissionCount", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "createdByUserId",
+    type: TableColumnType_default.Entity,
+    modelType: User_default,
+    title: "Created by User",
+    description: "Relation to User who created this object (if this object was created by a User)",
+    example: "admin@company.com"
+  }),
+  ManyToOne(
+    () => {
+      return User_default;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "SET NULL",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "createdByUserId" })
+], CustomRole.prototype, "createdByUser", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    title: "Created by User ID",
+    description: "User ID who created this object (if this object was created by a User)",
+    example: "c8f5e0a2-d4b7-4a8d-9e3f-2a3b4c5d6e7f"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], CustomRole.prototype, "createdByUserId", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "deletedByUserId",
+    type: TableColumnType_default.Entity,
+    title: "Deleted by User",
+    modelType: User_default,
+    description: "Relation to User who deleted this object (if this object was deleted by a User)",
+    example: "admin@company.com"
+  }),
+  ManyToOne(
+    () => {
+      return User_default;
+    },
+    {
+      cascade: false,
+      eager: false,
+      nullable: true,
+      onDelete: "SET NULL",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "deletedByUserId" })
+], CustomRole.prototype, "deletedByUser", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [],
+    update: []
+  }),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    title: "Deleted by User ID",
+    description: "User ID who deleted this object (if this object was deleted by a User)",
+    example: "d9a6f1b3-e5c8-4b9e-af4d-3b4c5d6e7f8a"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], CustomRole.prototype, "deletedByUserId", 2);
+CustomRole = __decorateClass([
+  TableBillingAccessControl_default({
+    create: "Scale" /* Scale */,
+    read: "Free" /* Free */,
+    update: "Scale" /* Scale */,
+    delete: "Free" /* Free */
+  }),
+  EnableDocumentation_default(),
+  EnableAuditLog_default(),
+  TenantColumn_default("projectId"),
+  TableAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    delete: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ]
+  }),
+  CrudApiEndpoint_default(new Route("/custom-role")),
+  SlugifyColumn_default("name", "slug"),
+  Entity({
+    name: "CustomRole"
+  }),
+  EnableWorkflow_default({
+    create: true,
+    delete: true,
+    update: true,
+    read: true
+  }),
+  TableMetadata_default({
+    tableName: "CustomRole",
+    singularName: "Custom Role",
+    pluralName: "Custom Roles",
+    icon: IconProp_default.Identification,
+    tableDescription: "A set of permissions you name once, such as Incident Responder, and give to teams. Changing a role changes every team that has it."
+  })
+], CustomRole);
+
+// ../Common/Models/DatabaseModels/CustomRolePermission.ts
+var CustomRolePermission = class extends DatabaseBaseModel {
+  constructor() {
+    super(...arguments);
+    this.project = void 0;
+    this.projectId = void 0;
+    this.customRole = void 0;
+    this.customRoleId = void 0;
+    this.permission = void 0;
+    this.labels = void 0;
+    this.scope = void 0;
+    this.createdByUser = void 0;
+    this.createdByUserId = void 0;
+    this.deletedByUser = void 0;
+    this.deletedByUserId = void 0;
+  }
+};
+__name(CustomRolePermission, "CustomRolePermission");
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "projectId",
+    type: TableColumnType_default.Entity,
+    modelType: Project,
+    title: "Project",
+    description: "Relation to Project Resource in which this object belongs",
+    example: "My Production Project"
+  }),
+  ManyToOne(
+    () => {
+      return Project;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "CASCADE",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "projectId" })
+], CustomRolePermission.prototype, "project", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: []
+  }),
+  Index(),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    required: true,
+    canReadOnRelationQuery: true,
+    title: "Project ID",
+    description: "ID of your OneUptime Project in which this object belongs",
+    example: "a3f9c8e2-d4b6-4a7c-9e5f-1a2b3c4d5e6f"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: false,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], CustomRolePermission.prototype, "projectId", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "customRoleId",
+    type: TableColumnType_default.Entity,
+    modelType: CustomRole,
+    title: "Custom Role",
+    description: "The custom role this permission is part of.",
+    example: "Incident Responder"
+  }),
+  ManyToOne(
+    () => {
+      return CustomRole;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "CASCADE",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "customRoleId" })
+], CustomRolePermission.prototype, "customRole", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: []
+  }),
+  Index(),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    required: true,
+    title: "Custom Role ID",
+    description: "ID of the custom role this permission is part of.",
+    example: "5f8b9c0d-e1a2-4b3c-8d5e-6f7a8b9c0d1e"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: false,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], CustomRolePermission.prototype, "customRoleId", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ]
+  }),
+  TableColumn_default({
+    required: true,
+    type: TableColumnType_default.Permission,
+    title: "Permission",
+    description: "A built-in role, such as IncidentMember, or a single permission, such as ReadProjectIncident. You can find the list of permissions in the Permission Reference. ProjectOwner cannot be part of a custom role.",
+    example: "IncidentMember"
+  }),
+  Column({
+    nullable: false,
+    type: ColumnType_default.ShortText,
+    length: ColumnLength_default.ShortText
+  })
+], CustomRolePermission.prototype, "permission", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ]
+  }),
+  TableColumn_default({
+    required: false,
+    type: TableColumnType_default.EntityArray,
+    modelType: Label,
+    title: "Labels",
+    description: "With the scope Labels: the labels this permission is limited to. A resource carrying at least one of them is reached.",
+    example: [{ name: "Production" }, { name: "Critical" }]
+  }),
+  ManyToMany(
+    () => {
+      return Label;
+    },
+    { eager: false }
+  ),
+  JoinTable({
+    name: "CustomRolePermissionLabel",
+    inverseJoinColumn: {
+      name: "labelId",
+      referencedColumnName: "_id"
+    },
+    joinColumn: {
+      name: "customRolePermissionId",
+      referencedColumnName: "_id"
+    }
+  })
+], CustomRolePermission.prototype, "labels", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ]
+  }),
+  TableColumn_default({
+    isDefaultValueColumn: true,
+    type: TableColumnType_default.ShortText,
+    title: "Scope",
+    description: "Which resources this permission reaches. One of: All (every resource in the project), Owned (resources the team given the role, or one of its members, owns), Labels (resources carrying one of the labels). Defaults to All.",
+    defaultValue: "All",
+    example: "All"
+  }),
+  Column({
+    nullable: false,
+    type: ColumnType_default.ShortText,
+    length: ColumnLength_default.ShortText,
+    default: PermissionScope_default.All
+  })
+], CustomRolePermission.prototype, "scope", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "createdByUserId",
+    type: TableColumnType_default.Entity,
+    modelType: User_default,
+    title: "Created by User",
+    description: "Relation to User who created this object (if this object was created by a User)",
+    example: "admin@company.com"
+  }),
+  ManyToOne(
+    () => {
+      return User_default;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "SET NULL",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "createdByUserId" })
+], CustomRolePermission.prototype, "createdByUser", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    title: "Created by User ID",
+    description: "User ID who created this object (if this object was created by a User)",
+    example: "c8f5e0a2-d4b7-4a8d-9e3f-2a3b4c5d6e7f"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], CustomRolePermission.prototype, "createdByUserId", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "deletedByUserId",
+    type: TableColumnType_default.Entity,
+    title: "Deleted by User",
+    modelType: User_default,
+    description: "Relation to User who deleted this object (if this object was deleted by a User)",
+    example: "admin@company.com"
+  }),
+  ManyToOne(
+    () => {
+      return User_default;
+    },
+    {
+      cascade: false,
+      eager: false,
+      nullable: true,
+      onDelete: "SET NULL",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "deletedByUserId" })
+], CustomRolePermission.prototype, "deletedByUser", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [],
+    update: []
+  }),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    title: "Deleted by User ID",
+    description: "User ID who deleted this object (if this object was deleted by a User)",
+    example: "d9a6f1b3-e5c8-4b9e-af4d-3b4c5d6e7f8a"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], CustomRolePermission.prototype, "deletedByUserId", 2);
+CustomRolePermission = __decorateClass([
+  TableBillingAccessControl_default({
+    create: "Scale" /* Scale */,
+    read: "Free" /* Free */,
+    update: "Scale" /* Scale */,
+    delete: "Free" /* Free */
+  }),
+  EnableDocumentation_default(),
+  TenantColumn_default("projectId"),
+  TableAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    delete: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ]
+  }),
+  CrudApiEndpoint_default(new Route("/custom-role-permission")),
+  Entity({
+    name: "CustomRolePermission"
+  }),
+  EnableWorkflow_default({
+    create: true,
+    delete: true,
+    update: true,
+    read: true
+  }),
+  TableMetadata_default({
+    tableName: "CustomRolePermission",
+    singularName: "Custom Role Permission",
+    pluralName: "Custom Role Permissions",
+    icon: IconProp_default.Lock,
+    tableDescription: "The permissions in a custom role, each with the scope and labels a team's own permission takes."
+  })
+], CustomRolePermission);
+
+// ../Common/Models/DatabaseModels/TeamCustomRole.ts
+var TeamCustomRole = class extends DatabaseBaseModel {
+  constructor() {
+    super(...arguments);
+    this.project = void 0;
+    this.projectId = void 0;
+    this.team = void 0;
+    this.teamId = void 0;
+    this.customRole = void 0;
+    this.customRoleId = void 0;
+    this.createdByUser = void 0;
+    this.createdByUserId = void 0;
+    this.deletedByUser = void 0;
+    this.deletedByUserId = void 0;
+  }
+};
+__name(TeamCustomRole, "TeamCustomRole");
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "projectId",
+    type: TableColumnType_default.Entity,
+    modelType: Project,
+    title: "Project",
+    description: "Relation to Project Resource in which this object belongs",
+    example: "My Production Project"
+  }),
+  ManyToOne(
+    () => {
+      return Project;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "CASCADE",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "projectId" })
+], TeamCustomRole.prototype, "project", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: []
+  }),
+  Index(),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    required: true,
+    canReadOnRelationQuery: true,
+    title: "Project ID",
+    description: "ID of your OneUptime Project in which this object belongs",
+    example: "a3f9c8e2-d4b6-4a7c-9e5f-1a2b3c4d5e6f"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: false,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], TeamCustomRole.prototype, "projectId", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "teamId",
+    type: TableColumnType_default.Entity,
+    modelType: Team,
+    title: "Team",
+    description: "The team given the role.",
+    example: "Engineering Team"
+  }),
+  ManyToOne(
+    () => {
+      return Team;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "CASCADE",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "teamId" })
+], TeamCustomRole.prototype, "team", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: []
+  }),
+  Index(),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    required: true,
+    title: "Team ID",
+    description: "ID of the team given the role.",
+    example: "5f8b9c0d-e1a2-4b3c-8d5e-6f7a8b9c0d1e"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: false,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], TeamCustomRole.prototype, "teamId", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "customRoleId",
+    type: TableColumnType_default.Entity,
+    modelType: CustomRole,
+    title: "Custom Role",
+    description: "The custom role given to the team.",
+    example: "Incident Responder"
+  }),
+  ManyToOne(
+    () => {
+      return CustomRole;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "CASCADE",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "customRoleId" })
+], TeamCustomRole.prototype, "customRole", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: []
+  }),
+  Index(),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    required: true,
+    title: "Custom Role ID",
+    description: "ID of the custom role given to the team.",
+    example: "7a1b2c3d-4e5f-4a6b-8c7d-9e0f1a2b3c4d"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: false,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], TeamCustomRole.prototype, "customRoleId", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "createdByUserId",
+    type: TableColumnType_default.Entity,
+    modelType: User_default,
+    title: "Created by User",
+    description: "Relation to User who created this object (if this object was created by a User)",
+    example: "admin@company.com"
+  }),
+  ManyToOne(
+    () => {
+      return User_default;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "SET NULL",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "createdByUserId" })
+], TeamCustomRole.prototype, "createdByUser", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    title: "Created by User ID",
+    description: "User ID who created this object (if this object was created by a User)",
+    example: "c8f5e0a2-d4b7-4a8d-9e3f-2a3b4c5d6e7f"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], TeamCustomRole.prototype, "createdByUserId", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "deletedByUserId",
+    type: TableColumnType_default.Entity,
+    title: "Deleted by User",
+    modelType: User_default,
+    description: "Relation to User who deleted this object (if this object was deleted by a User)",
+    example: "admin@company.com"
+  }),
+  ManyToOne(
+    () => {
+      return User_default;
+    },
+    {
+      cascade: false,
+      eager: false,
+      nullable: true,
+      onDelete: "SET NULL",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "deletedByUserId" })
+], TeamCustomRole.prototype, "deletedByUser", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [],
+    update: []
+  }),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    title: "Deleted by User ID",
+    description: "User ID who deleted this object (if this object was deleted by a User)",
+    example: "d9a6f1b3-e5c8-4b9e-af4d-3b4c5d6e7f8a"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], TeamCustomRole.prototype, "deletedByUserId", 2);
+TeamCustomRole = __decorateClass([
+  TableBillingAccessControl_default({
+    create: "Scale" /* Scale */,
+    read: "Free" /* Free */,
+    update: "Scale" /* Scale */,
+    delete: "Free" /* Free */
+  }),
+  EnableDocumentation_default(),
+  EnableAuditLog_default({
+    rootResource: {
+      resourceType: "Team",
+      column: "teamId"
+    },
+    resourceNameRelation: "customRole"
+  }),
+  TenantColumn_default("projectId"),
+  TableAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    delete: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.DeleteProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ]
+  }),
+  CrudApiEndpoint_default(new Route("/team-custom-role")),
+  Entity({
+    name: "TeamCustomRole"
+  }),
+  Index(["teamId", "customRoleId", "projectId"], { unique: true }),
+  UniqueColumnsTogether_default(
+    ["teamId", "customRoleId", "projectId"],
+    "This team already has this role."
+  ),
+  EnableWorkflow_default({
+    create: true,
+    delete: true,
+    update: true,
+    read: true
+  }),
+  TableMetadata_default({
+    tableName: "TeamCustomRole",
+    singularName: "Team Custom Role",
+    pluralName: "Team Custom Roles",
+    icon: IconProp_default.Identification,
+    tableDescription: "The custom roles a team is given. Its members can do everything the role allows."
+  })
+], TeamCustomRole);
+
 // ../Common/Models/DatabaseModels/TeamPermission.ts
 var TeamPermission = class extends DatabaseBaseModel {
   constructor() {
@@ -350253,6 +351565,12 @@ var TeamPermission = class extends DatabaseBaseModel {
     this.labels = void 0;
     this.isBlockPermission = void 0;
     this.scope = void 0;
+    this.customRole = void 0;
+    this.customRoleId = void 0;
+    this.teamCustomRole = void 0;
+    this.teamCustomRoleId = void 0;
+    this.customRolePermission = void 0;
+    this.customRolePermissionId = void 0;
   }
 };
 __name(TeamPermission, "TeamPermission");
@@ -350682,6 +352000,198 @@ __decorateClass([
     default: PermissionScope_default.All
   })
 ], TeamPermission.prototype, "scope", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "customRoleId",
+    type: TableColumnType_default.Entity,
+    modelType: CustomRole,
+    title: "Custom Role",
+    description: "The custom role this permission comes from. Empty when the permission was given to the team directly. Change it on the role.",
+    example: "Incident Responder"
+  }),
+  ManyToOne(
+    () => {
+      return CustomRole;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "CASCADE",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "customRoleId" })
+], TeamPermission.prototype, "customRole", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam
+    ],
+    update: []
+  }),
+  Index(),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    title: "Custom Role ID",
+    description: "ID of the custom role this permission comes from. Empty when the permission was given to the team directly.",
+    example: "7a1b2c3d-4e5f-4a6b-8c7d-9e0f1a2b3c4d"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], TeamPermission.prototype, "customRoleId", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "teamCustomRoleId",
+    type: TableColumnType_default.Entity,
+    modelType: TeamCustomRole,
+    title: "Team Custom Role",
+    description: "The custom role given to the team that brought this permission. Empty when the permission was given to the team directly.",
+    example: "Incident Responder"
+  }),
+  ManyToOne(
+    () => {
+      return TeamCustomRole;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "CASCADE",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "teamCustomRoleId" })
+], TeamPermission.prototype, "teamCustomRole", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam
+    ],
+    update: []
+  }),
+  Index(),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    title: "Team Custom Role ID",
+    description: "ID of the custom role given to the team that brought this permission. Empty when the permission was given to the team directly.",
+    example: "7a1b2c3d-4e5f-4a6b-8c7d-9e0f1a2b3c4d"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], TeamPermission.prototype, "teamCustomRoleId", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "customRolePermissionId",
+    type: TableColumnType_default.Entity,
+    modelType: CustomRolePermission,
+    title: "Custom Role Permission",
+    description: "The custom role's own permission this one copies. Empty when the permission was given to the team directly.",
+    example: "IncidentMember"
+  }),
+  ManyToOne(
+    () => {
+      return CustomRolePermission;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "CASCADE",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "customRolePermissionId" })
+], TeamPermission.prototype, "customRolePermission", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam
+    ],
+    update: []
+  }),
+  Index(),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    title: "Custom Role Permission ID",
+    description: "ID of the custom role's own permission this one copies. Empty when the permission was given to the team directly.",
+    example: "7a1b2c3d-4e5f-4a6b-8c7d-9e0f1a2b3c4d"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], TeamPermission.prototype, "customRolePermissionId", 2);
 TeamPermission = __decorateClass([
   TableBillingAccessControl_default({
     create: "Scale" /* Scale */,
@@ -432957,7 +434467,7 @@ var WorkspaceUserAuthToken = class extends DatabaseBaseModel {
 __name(WorkspaceUserAuthToken, "WorkspaceUserAuthToken");
 __decorateClass([
   ColumnAccessControl_default({
-    create: [Permission_default.CurrentUser],
+    create: [],
     read: [Permission_default.CurrentUser],
     update: []
   }),
@@ -432983,7 +434493,7 @@ __decorateClass([
 ], WorkspaceUserAuthToken.prototype, "project", 2);
 __decorateClass([
   ColumnAccessControl_default({
-    create: [Permission_default.CurrentUser],
+    create: [],
     read: [Permission_default.CurrentUser],
     update: []
   }),
@@ -433003,7 +434513,7 @@ __decorateClass([
 ], WorkspaceUserAuthToken.prototype, "projectId", 2);
 __decorateClass([
   ColumnAccessControl_default({
-    create: [Permission_default.CurrentUser],
+    create: [],
     read: [],
     update: []
   }),
@@ -433022,7 +434532,7 @@ __decorateClass([
 ], WorkspaceUserAuthToken.prototype, "authToken", 2);
 __decorateClass([
   ColumnAccessControl_default({
-    create: [Permission_default.CurrentUser],
+    create: [],
     read: [Permission_default.CurrentUser],
     update: []
   }),
@@ -433043,7 +434553,7 @@ __decorateClass([
 ], WorkspaceUserAuthToken.prototype, "workspaceUserId", 2);
 __decorateClass([
   ColumnAccessControl_default({
-    create: [Permission_default.CurrentUser],
+    create: [],
     read: [Permission_default.CurrentUser],
     update: []
   }),
@@ -433064,7 +434574,7 @@ __decorateClass([
 ], WorkspaceUserAuthToken.prototype, "workspaceType", 2);
 __decorateClass([
   ColumnAccessControl_default({
-    create: [Permission_default.CurrentUser],
+    create: [],
     read: [Permission_default.CurrentUser],
     update: []
   }),
@@ -433083,7 +434593,7 @@ __decorateClass([
 ], WorkspaceUserAuthToken.prototype, "miscData", 2);
 __decorateClass([
   ColumnAccessControl_default({
-    create: [Permission_default.CurrentUser],
+    create: [],
     read: [Permission_default.CurrentUser],
     update: []
   }),
@@ -433109,7 +434619,7 @@ __decorateClass([
 ], WorkspaceUserAuthToken.prototype, "user", 2);
 __decorateClass([
   ColumnAccessControl_default({
-    create: [Permission_default.CurrentUser],
+    create: [],
     read: [Permission_default.CurrentUser],
     update: []
   }),
@@ -433127,7 +434637,7 @@ __decorateClass([
 ], WorkspaceUserAuthToken.prototype, "userId", 2);
 __decorateClass([
   ColumnAccessControl_default({
-    create: [Permission_default.CurrentUser],
+    create: [],
     read: [Permission_default.CurrentUser],
     update: []
   }),
@@ -433153,7 +434663,7 @@ __decorateClass([
 ], WorkspaceUserAuthToken.prototype, "createdByUser", 2);
 __decorateClass([
   ColumnAccessControl_default({
-    create: [Permission_default.CurrentUser],
+    create: [],
     read: [Permission_default.CurrentUser],
     update: []
   }),
@@ -433215,10 +434725,10 @@ __decorateClass([
 WorkspaceUserAuthToken = __decorateClass([
   TenantColumn_default("projectId"),
   TableAccessControl_default({
-    create: [Permission_default.CurrentUser],
+    create: [],
     read: [Permission_default.CurrentUser],
     delete: [Permission_default.CurrentUser],
-    update: [Permission_default.CurrentUser]
+    update: []
   }),
   CrudApiEndpoint_default(new Route("/workspace-user-auth-token")),
   Entity({
@@ -449938,6 +451448,9 @@ var AllModelTypes = [
   TeamMember,
   TeamMemberCustomField,
   TeamPermission,
+  CustomRole,
+  CustomRolePermission,
+  TeamCustomRole,
   TeamComplianceSetting,
   ApiKey,
   Label,