@oneuptime/common 10.4.16 → 10.5.0

package/build/dist/Types/Permission.js

@@ -1,3 +1,4 @@
+import PermissionScope from "./Database/AccessControl/PermissionScope";
 import BadDataException from "./Exception/BadDataException";
 export var PermissionGroup;
 (function (PermissionGroup) {
@@ -213,6 +214,10 @@ var Permission;
     Permission["DeleteMonitorCustomField"] = "DeleteMonitorCustomField";
     Permission["EditMonitorCustomField"] = "EditMonitorCustomField";
     Permission["ReadMonitorCustomField"] = "ReadMonitorCustomField";
+    Permission["CreateTeamCustomField"] = "CreateTeamCustomField";
+    Permission["DeleteTeamCustomField"] = "DeleteTeamCustomField";
+    Permission["EditTeamCustomField"] = "EditTeamCustomField";
+    Permission["ReadTeamCustomField"] = "ReadTeamCustomField";
     Permission["CreateOnCallDutyPolicyCustomField"] = "CreateOnCallDutyPolicyCustomField";
     Permission["DeleteOnCallDutyPolicyCustomField"] = "DeleteOnCallDutyPolicyCustomField";
     Permission["EditOnCallDutyPolicyCustomField"] = "EditOnCallDutyPolicyCustomField";
@@ -895,10 +900,6 @@ var Permission;
     Permission["DeleteService"] = "DeleteService";
     Permission["EditService"] = "EditService";
     Permission["ReadService"] = "ReadService";
-    Permission["CreateServiceMonitor"] = "CreateServiceMonitor";
-    Permission["DeleteServiceMonitor"] = "DeleteServiceMonitor";
-    Permission["EditServiceMonitor"] = "EditServiceMonitor";
-    Permission["ReadServiceMonitor"] = "ReadServiceMonitor";
     Permission["CreateServiceTelemetryService"] = "CreateServiceTelemetryService";
     Permission["DeleteServiceTelemetryService"] = "DeleteServiceTelemetryService";
     Permission["EditServiceTelemetryService"] = "EditServiceTelemetryService";
@@ -1179,20 +1180,55 @@ export class PermissionHelper {
             return prop.isAccessControlPermission;
         }).length > 0);
     }
+    /*
+     * Returns permissions that grant access WITHOUT a label restriction.
+     * A permission row grants unrestricted access when:
+     *   - scope === All, OR
+     *   - scope is unset/undefined AND labelIds is empty (legacy: empty
+     *     labels meant no restriction regardless of the permission type).
+     *
+     * Owned-scoped rows are NOT unrestricted — they restrict to owned
+     * resources via OwnedScopePermission — but they also don't contribute
+     * a label filter, so they are excluded here. AccessControlPermission's
+     * early return treats "any unrestricted row" as a broader grant; Owned
+     * rows must not trigger that path.
+     *
+     * We intentionally do NOT consult `isAccessControlPermission` here.
+     * The UI allows attaching labels to role permissions like
+     * IncidentViewer via the role-based form (with scope=Labels); honoring
+     * that requires the filter to look at `scope` + `labelIds`, not the
+     * legacy per-permission flag.
+     */
     static getNonAccessControlPermissions(userPermissions) {
         return userPermissions
             .filter((i) => {
-            return (i.labelIds.length === 0 ||
-                !PermissionHelper.isAccessControlPermission(i.permission));
+            if (i.scope === PermissionScope.All) {
+                return true;
+            }
+            if (i.scope === PermissionScope.Owned) {
+                return false;
+            }
+            // scope === Labels OR scope === undefined (legacy default)
+            return i.labelIds.length === 0;
         })
             .map((i) => {
             return i.permission;
         });
     }
+    /*
+     * Returns permission rows that apply a label-based restriction. Rows
+     * count as label-restricting when they have at least one labelId AND
+     * the scope is `Labels` (explicitly) or unset (legacy default).
+     * All/Owned scopes are excluded — All grants unconditionally and Owned
+     * is handled separately by OwnedScopePermission.
+     */
     static getAccessControlPermissions(userPermissions) {
         return userPermissions.filter((i) => {
-            return (i.labelIds.length > 0 &&
-                PermissionHelper.isAccessControlPermission(i.permission));
+            if (i.scope === PermissionScope.All ||
+                i.scope === PermissionScope.Owned) {
+                return false;
+            }
+            return i.labelIds.length > 0;
         });
     }
     static getDescription(permission) {
@@ -5346,6 +5382,42 @@ export class PermissionHelper {
                 isRolePermission: false,
                 group: PermissionGroup.Monitor,
             },
+            {
+                permission: Permission.CreateTeamCustomField,
+                title: "Create Team Custom Field",
+                description: "This permission can create Team Custom Field this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Team,
+            },
+            {
+                permission: Permission.DeleteTeamCustomField,
+                title: "Delete Team Custom Field",
+                description: "This permission can delete Team Custom Field of this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Team,
+            },
+            {
+                permission: Permission.EditTeamCustomField,
+                title: "Edit Team Custom Field",
+                description: "This permission can edit Team Custom Field of this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Team,
+            },
+            {
+                permission: Permission.ReadTeamCustomField,
+                title: "Read Team Custom Field",
+                description: "This permission can read Team Custom Field of this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Team,
+            },
             {
                 permission: Permission.CreateIncidentCustomField,
                 title: "Create Incident Custom Field",
@@ -6617,42 +6689,6 @@ export class PermissionHelper {
                 isRolePermission: false,
                 group: PermissionGroup.ServiceCatalog,
             },
-            {
-                permission: Permission.CreateServiceMonitor,
-                title: "Create Service Monitor",
-                description: "This permission can create Service Monitor in this project.",
-                isAssignableToTenant: true,
-                isAccessControlPermission: false,
-                isRolePermission: false,
-                group: PermissionGroup.ServiceCatalog,
-            },
-            {
-                permission: Permission.DeleteServiceMonitor,
-                title: "Delete Service Monitor",
-                description: "This permission can delete Service Monitor of this project.",
-                isAssignableToTenant: true,
-                isAccessControlPermission: false,
-                isRolePermission: false,
-                group: PermissionGroup.ServiceCatalog,
-            },
-            {
-                permission: Permission.EditServiceMonitor,
-                title: "Edit Service Monitor",
-                description: "This permission can edit Service Monitor of this project.",
-                isAssignableToTenant: true,
-                isAccessControlPermission: false,
-                isRolePermission: false,
-                group: PermissionGroup.ServiceCatalog,
-            },
-            {
-                permission: Permission.ReadServiceMonitor,
-                title: "Read Service Monitor",
-                description: "This permission can read Service Monitor of this project.",
-                isAssignableToTenant: true,
-                isAccessControlPermission: false,
-                isRolePermission: false,
-                group: PermissionGroup.ServiceCatalog,
-            },
             {
                 permission: Permission.CreateServiceTelemetryService,
                 title: "Create Service Telemetry Service",