@oneuptime/common 12.0.30 → 12.0.32

package/build/dist/Types/Permission.js

@@ -74,6 +74,24 @@ var Permission;
     Permission["TelemetryAdmin"] = "TelemetryAdmin";
     Permission["TelemetryMember"] = "TelemetryMember";
     Permission["TelemetryViewer"] = "TelemetryViewer";
+    /*
+     * SIEM data is its own domain, not a fourth telemetry signal. Security
+     * events, the Sigma detection rules over them, the threat-intel feeds and
+     * their indicators, and the SecOps connector credentials all read through
+     * these three tiers and through nothing else that is handed out broadly -
+     * not ProjectMember, not the project-wide Viewer, not the Telemetry tiers.
+     *
+     * That exclusion is the whole point of the family. A SIEM holds authentication
+     * failures, privilege escalations and the analyst's own investigation trail;
+     * "everyone who can open a dashboard can read it" is not an access policy an
+     * organisation deploying one can accept. Whoever should see it is given a
+     * Security tier deliberately, the same way BillingViewer is given
+     * deliberately, and everybody else - including a Telemetry Admin with the run
+     * of every log, metric and trace in the project - sees nothing.
+     */
+    Permission["SecurityAdmin"] = "SecurityAdmin";
+    Permission["SecurityMember"] = "SecurityMember";
+    Permission["SecurityViewer"] = "SecurityViewer";
     Permission["SettingsAdmin"] = "SettingsAdmin";
     Permission["SettingsMember"] = "SettingsMember";
     Permission["SettingsViewer"] = "SettingsViewer";
@@ -494,6 +512,10 @@ var Permission;
     Permission["DeleteNetworkDeviceAutoImportRule"] = "DeleteNetworkDeviceAutoImportRule";
     Permission["EditNetworkDeviceAutoImportRule"] = "EditNetworkDeviceAutoImportRule";
     Permission["ReadNetworkDeviceAutoImportRule"] = "ReadNetworkDeviceAutoImportRule";
+    Permission["CreateNetworkDeviceOidTemplate"] = "CreateNetworkDeviceOidTemplate";
+    Permission["DeleteNetworkDeviceOidTemplate"] = "DeleteNetworkDeviceOidTemplate";
+    Permission["EditNetworkDeviceOidTemplate"] = "EditNetworkDeviceOidTemplate";
+    Permission["ReadNetworkDeviceOidTemplate"] = "ReadNetworkDeviceOidTemplate";
     // Podman Host Label Rule Permissions
     Permission["CreatePodmanHostLabelRule"] = "CreatePodmanHostLabelRule";
     Permission["DeletePodmanHostLabelRule"] = "DeletePodmanHostLabelRule";
@@ -1109,6 +1131,10 @@ var Permission;
     Permission["DeleteNetworkSiteType"] = "DeleteNetworkSiteType";
     Permission["EditNetworkSiteType"] = "EditNetworkSiteType";
     Permission["ReadNetworkSiteType"] = "ReadNetworkSiteType";
+    Permission["CreateNetworkDeviceRole"] = "CreateNetworkDeviceRole";
+    Permission["DeleteNetworkDeviceRole"] = "DeleteNetworkDeviceRole";
+    Permission["EditNetworkDeviceRole"] = "EditNetworkDeviceRole";
+    Permission["ReadNetworkDeviceRole"] = "ReadNetworkDeviceRole";
     Permission["CreateRecommendationDismissal"] = "CreateRecommendationDismissal";
     Permission["DeleteRecommendationDismissal"] = "DeleteRecommendationDismissal";
     Permission["EditRecommendationDismissal"] = "EditRecommendationDismissal";
@@ -1940,6 +1966,33 @@ export class PermissionHelper {
                 isRolePermission: true,
                 group: PermissionGroup.Telemetry,
             },
+            {
+                permission: Permission.SecurityAdmin,
+                title: "Security Admin",
+                description: "Full control over the SIEM: security events, Sigma detection rules, threat intelligence feeds and indicators, and Google SecOps connections. Security data is not readable through any other role.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: true,
+                group: PermissionGroup.Security,
+            },
+            {
+                permission: Permission.SecurityMember,
+                title: "Security Member",
+                description: "Can read security events and threat intelligence, and create, edit, and delete detection rules and threat intel feeds. Cannot configure Google SecOps connections.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: true,
+                group: PermissionGroup.Security,
+            },
+            {
+                permission: Permission.SecurityViewer,
+                title: "Security Viewer",
+                description: "Read-only access to security events, detection rules, threat intelligence feeds, and indicators.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: true,
+                group: PermissionGroup.Security,
+            },
             {
                 permission: Permission.SettingsAdmin,
                 title: "Settings Admin",
@@ -7482,6 +7535,42 @@ export class PermissionHelper {
                 isRolePermission: false,
                 group: PermissionGroup.Monitor,
             },
+            {
+                permission: Permission.CreateNetworkDeviceRole,
+                title: "Create Network Device Role",
+                description: "This permission can create Network Device Role in this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Monitor,
+            },
+            {
+                permission: Permission.DeleteNetworkDeviceRole,
+                title: "Delete Network Device Role",
+                description: "This permission can delete Network Device Role of this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: true,
+                isRolePermission: false,
+                group: PermissionGroup.Monitor,
+            },
+            {
+                permission: Permission.EditNetworkDeviceRole,
+                title: "Edit Network Device Role",
+                description: "This permission can edit Network Device Role of this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: true,
+                isRolePermission: false,
+                group: PermissionGroup.Monitor,
+            },
+            {
+                permission: Permission.ReadNetworkDeviceRole,
+                title: "Read Network Device Role",
+                description: "This permission can read Network Device Role of this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: true,
+                isRolePermission: false,
+                group: PermissionGroup.Monitor,
+            },
             {
                 permission: Permission.CreateRecommendationDismissal,
                 title: "Create Recommendation Dismissal",
@@ -10879,6 +10968,43 @@ export class PermissionHelper {
                 isRolePermission: false,
                 group: PermissionGroup.Telemetry,
             },
+            // OID Collection Template Permissions
+            {
+                permission: Permission.CreateNetworkDeviceOidTemplate,
+                title: "Create OID Collection Template",
+                description: "This permission can create OID Collection Templates in this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Telemetry,
+            },
+            {
+                permission: Permission.DeleteNetworkDeviceOidTemplate,
+                title: "Delete OID Collection Template",
+                description: "This permission can delete OID Collection Templates of this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Telemetry,
+            },
+            {
+                permission: Permission.EditNetworkDeviceOidTemplate,
+                title: "Edit OID Collection Template",
+                description: "This permission can edit OID Collection Templates of this project. Editing a template changes what every linked device collects on its next poll.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Telemetry,
+            },
+            {
+                permission: Permission.ReadNetworkDeviceOidTemplate,
+                title: "Read OID Collection Template",
+                description: "This permission can read OID Collection Templates of this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Telemetry,
+            },
             // Podman Host Label Rule Permissions
             {
                 permission: Permission.CreatePodmanHostLabelRule,