@oneuptime/common 12.0.4 → 12.0.6

package/Models/DatabaseModels/Incident.ts

@@ -1715,6 +1715,7 @@ export default class Incident extends BaseModel {
     ],
   })
   @TableColumn({
+    computed: true,
     type: TableColumnType.VeryLongText,
     title: "Notification Status Message",
     description:
@@ -1802,6 +1803,7 @@ export default class Incident extends BaseModel {
     ],
   })
   @TableColumn({
+    computed: true,
     type: TableColumnType.VeryLongText,
     title: "Notification Status Message on Postmortem Published",
     description:

package/Models/DatabaseModels/IncidentEpisode.ts

@@ -1680,6 +1680,7 @@ export default class IncidentEpisode extends BaseModel {
     update: [],
   })
   @TableColumn({
+    computed: true,
     type: TableColumnType.VeryLongText,
     title: "Subscriber Notification Status Message",
     description:

package/Models/DatabaseModels/IncidentEpisodePublicNote.ts

@@ -541,6 +541,7 @@ export default class IncidentEpisodePublicNote extends BaseModel {
     ],
   })
   @TableColumn({
+    computed: true,
     type: TableColumnType.VeryLongText,
     title: "Notification Status Message",
     description:

package/Models/DatabaseModels/IncidentEpisodeStateTimeline.ts

@@ -695,6 +695,7 @@ export default class IncidentEpisodeStateTimeline extends BaseModel {
     update: [],
   })
   @TableColumn({
+    computed: true,
     type: TableColumnType.VeryLongText,
     title: "Subscriber Notification Status Message",
     description:

package/Models/DatabaseModels/IncidentFeed.ts

@@ -93,6 +93,7 @@ export enum IncidentFeedEventType {
     "Log of the entire incident state change. This is a log of all the incident state changes, public notes, more etc.",
 })
 @Index(["incidentId", "postedAt"]) // Incident detail page: feed sorted by postedAt
+@Index(["incidentId", "aiRunId"]) // Exact AI investigation result lookup
 export default class IncidentFeed extends BaseModel {
   @ColumnAccessControl({
     create: [
@@ -253,6 +254,35 @@ export default class IncidentFeed extends BaseModel {
   })
   public incidentId?: ObjectID = undefined;
 
+  @ColumnAccessControl({
+    create: [],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.IncidentAdmin,
+      Permission.IncidentMember,
+      Permission.IncidentViewer,
+      Permission.ReadIncidentFeed,
+    ],
+    update: [],
+  })
+  @TableColumn({
+    type: TableColumnType.ObjectID,
+    required: false,
+    canReadOnRelationQuery: true,
+    title: "AI Run ID",
+    description:
+      "AI investigation run that produced this feed item when the event is a root cause.",
+  })
+  @Column({
+    type: ColumnType.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer(),
+  })
+  public aiRunId?: ObjectID = undefined;
+
   @ColumnAccessControl({
     create: [
       Permission.ProjectOwner,

package/Models/DatabaseModels/IncidentPublicNote.ts

@@ -544,6 +544,7 @@ export default class IncidentPublicNote extends BaseModel {
     ],
   })
   @TableColumn({
+    computed: true,
     type: TableColumnType.VeryLongText,
     title: "Notification Status Message",
     description:

package/Models/DatabaseModels/IncidentStateTimeline.ts

@@ -544,6 +544,7 @@ export default class IncidentStateTimeline extends BaseModel {
     ],
   })
   @TableColumn({
+    computed: true,
     type: TableColumnType.VeryLongText,
     title: "Notification Status Message",
     description:

package/Models/DatabaseModels/Index.ts

@@ -189,6 +189,7 @@ import AIRunEvent from "./AIRunEvent";
 import AIInsight from "./AIInsight";
 import LlmProvider from "./LlmProvider";
 import LlmLog from "./LlmLog";
+import DataSource from "./DataSource";
 import Project from "./Project";
 import ProjectCallSMSConfig from "./ProjectCallSMSConfig";
 import ProjectUserProfile from "./ProjectUserProfile";
@@ -764,6 +765,8 @@ const AllModelTypes: Array<{
   LlmProvider,
   LlmLog,
 
+  DataSource,
+
   UserSession,
   UserTotpAuth,
   UserWebAuthn,

package/Models/DatabaseModels/LogSavedView.ts

@@ -19,6 +19,7 @@ import TenantColumn from "../../Types/Database/TenantColumn";
 import IconProp from "../../Types/Icon/IconProp";
 import ObjectID from "../../Types/ObjectID";
 import Permission from "../../Types/Permission";
+import { TelemetrySavedViewTimeRange } from "../../Types/Telemetry/TelemetrySavedViewState";
 import { PlanType } from "../../Types/Billing/SubscriptionPlan";
 import { Column, Entity, Index, JoinColumn, ManyToOne } from "typeorm";
 
@@ -430,6 +431,38 @@ export default class LogSavedView extends BaseModel {
   })
   public pageSize?: number = undefined;
 
+  @ColumnAccessControl({
+    create: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+    ],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+    ],
+    update: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+    ],
+  })
+  @TableColumn({
+    title: "Time Range",
+    required: false,
+    type: TableColumnType.JSON,
+    canReadOnRelationQuery: true,
+    description:
+      "Time selection for this saved view — the rolling range token (e.g. Past 1 Hour), or an absolute window when the range is Custom.",
+  })
+  @Column({
+    type: ColumnType.JSON,
+    nullable: true,
+  })
+  public timeRange?: TelemetrySavedViewTimeRange = undefined;
+
   @ColumnAccessControl({
     create: [
       Permission.ProjectOwner,

package/Models/DatabaseModels/Project.ts

@@ -1592,9 +1592,9 @@ export default class Project extends TenantModel {
     required: true,
     isDefaultValueColumn: true,
     type: TableColumnType.Boolean,
-    title: "Enable Instrumentation Fix Tasks",
+    title: "Enable Incident Instrumentation Fix Tasks",
     description:
-      "When enabled, an AI investigation that ends inconclusive (telemetry was insufficient to determine a root cause) automatically queues an AI agent task that opens a pull request adding the missing instrumentation to the implicated code paths. Requires a repository connected through the GitHub App. Pull requests are always human-reviewed — nothing merges automatically.",
+      "When enabled, an incident AI investigation that ends inconclusive (telemetry was insufficient to determine a root cause) automatically queues an AI agent task that opens a pull request adding the missing instrumentation to the implicated code paths. Requires a repository connected through the GitHub App. Pull requests are always human-reviewed — nothing merges automatically.",
     defaultValue: false,
     example: true,
   })
@@ -1603,7 +1603,7 @@ export default class Project extends TenantModel {
     default: false,
     type: ColumnType.Boolean,
   })
-  public enableInstrumentationFixTasks?: boolean = undefined;
+  public enableIncidentInstrumentationFixTasks?: boolean = undefined;
 
   @ColumnAccessControl({
     create: [],
@@ -1622,9 +1622,9 @@ export default class Project extends TenantModel {
     required: true,
     isDefaultValueColumn: true,
     type: TableColumnType.Boolean,
-    title: "Enable Automatic Code Fixes",
+    title: "Enable Alert Instrumentation Fix Tasks",
     description:
-      "When enabled, an AI investigation that ends with a confident, evidenced root cause analysis automatically queues an AI agent task that opens a draft fix pull request from that analysis — the automatic form of the 'Open Fix PR from this analysis' button. Requires a repository connected through the GitHub App and a Runner with the code-fix capability. Pull requests are always human-reviewed — nothing merges automatically.",
+      "When enabled, an alert AI investigation that ends inconclusive (telemetry was insufficient to determine a root cause) automatically queues an AI agent task that opens a pull request adding the missing instrumentation to the implicated code paths. Requires a repository connected through the GitHub App. Pull requests are always human-reviewed — nothing merges automatically.",
     defaultValue: false,
     example: true,
   })
@@ -1633,7 +1633,67 @@ export default class Project extends TenantModel {
     default: false,
     type: ColumnType.Boolean,
   })
-  public enableAutomaticCodeFixes?: boolean = undefined;
+  public enableAlertInstrumentationFixTasks?: boolean = undefined;
+
+  @ColumnAccessControl({
+    create: [],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.ReadProject,
+      Permission.UnAuthorizedSsoUser,
+      Permission.ProjectUser,
+    ],
+    update: [Permission.ProjectOwner, Permission.ProjectAdmin],
+  })
+  @TableColumn({
+    required: true,
+    isDefaultValueColumn: true,
+    type: TableColumnType.Boolean,
+    title: "Enable Automatic Incident Code Fixes",
+    description:
+      "When enabled, an incident AI investigation that ends with a confident, evidenced root cause analysis and recommends a repository code change automatically queues an AI agent task that opens a draft fix pull request from that analysis — the automatic form of the 'Open Fix PR from this analysis' button. Operational, infrastructure, external, user-error and inconclusive findings do not offer or open code-fix pull requests. Requires a repository connected through the GitHub App and a Runner with the code-fix capability. Pull requests are always human-reviewed — nothing merges automatically.",
+    defaultValue: false,
+    example: true,
+  })
+  @Column({
+    nullable: false,
+    default: false,
+    type: ColumnType.Boolean,
+  })
+  public enableAutomaticIncidentCodeFixes?: boolean = undefined;
+
+  @ColumnAccessControl({
+    create: [],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.ReadProject,
+      Permission.UnAuthorizedSsoUser,
+      Permission.ProjectUser,
+    ],
+    update: [Permission.ProjectOwner, Permission.ProjectAdmin],
+  })
+  @TableColumn({
+    required: true,
+    isDefaultValueColumn: true,
+    type: TableColumnType.Boolean,
+    title: "Enable Automatic Alert Code Fixes",
+    description:
+      "When enabled, an alert AI investigation that ends with a confident, evidenced root cause analysis and recommends a repository code change automatically queues an AI agent task that opens a draft fix pull request from that analysis — the automatic form of the 'Open Fix PR from this analysis' button. Operational, infrastructure, external, user-error and inconclusive findings do not offer or open code-fix pull requests. Requires a repository connected through the GitHub App and a Runner with the code-fix capability. Pull requests are always human-reviewed — nothing merges automatically.",
+    defaultValue: false,
+    example: true,
+  })
+  @Column({
+    nullable: false,
+    default: false,
+    type: ColumnType.Boolean,
+  })
+  public enableAutomaticAlertCodeFixes?: boolean = undefined;
 
   @ColumnAccessControl({
     create: [],
@@ -1806,7 +1866,7 @@ export default class Project extends TenantModel {
     type: TableColumnType.Number,
     title: "Daily Autonomous AI Token Limit",
     description:
-      "Maximum tokens per UTC day that autonomous AI investigations may consume for this project. When the limit is reached, new autonomous investigations are skipped until the next day — interactive AI chat is never blocked. Unset means no limit.",
+      "Fallback maximum tokens per UTC day for autonomous AI work that is not associated with an incident or alert. When the limit is reached, new autonomous work is skipped until the next day — interactive AI chat is never blocked. Unset means no limit.",
     example: 500000,
   })
   @Column({
@@ -1815,6 +1875,60 @@ export default class Project extends TenantModel {
   })
   public aiDailyAutonomousTokenLimit?: number = undefined;
 
+  @ColumnAccessControl({
+    create: [],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.ReadProject,
+      Permission.UnAuthorizedSsoUser,
+      Permission.ProjectUser,
+    ],
+    update: [Permission.ProjectOwner, Permission.ProjectAdmin],
+  })
+  @TableColumn({
+    required: false,
+    type: TableColumnType.Number,
+    title: "Daily Incident AI Token Limit",
+    description:
+      "Maximum tokens per UTC day that autonomous incident-linked AI work may consume for this project, including investigations, remediation, and follow-up fix tasks. When the limit is reached, new incident-linked AI work is skipped until the next day — interactive AI chat is never blocked. Unset means no limit.",
+    example: 500000,
+  })
+  @Column({
+    nullable: true,
+    type: ColumnType.Number,
+  })
+  public incidentAiDailyAutonomousTokenLimit?: number = undefined;
+
+  @ColumnAccessControl({
+    create: [],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.ReadProject,
+      Permission.UnAuthorizedSsoUser,
+      Permission.ProjectUser,
+    ],
+    update: [Permission.ProjectOwner, Permission.ProjectAdmin],
+  })
+  @TableColumn({
+    required: false,
+    type: TableColumnType.Number,
+    title: "Daily Alert AI Token Limit",
+    description:
+      "Maximum tokens per UTC day that autonomous alert-linked AI work may consume for this project, including investigations, remediation, and follow-up fix tasks. When the limit is reached, new alert-linked AI work is skipped until the next day — interactive AI chat is never blocked. Unset means no limit.",
+    example: 500000,
+  })
+  @Column({
+    nullable: true,
+    type: ColumnType.Number,
+  })
+  public alertAiDailyAutonomousTokenLimit?: number = undefined;
+
   @ColumnAccessControl({
     create: [],
     read: [
@@ -1833,7 +1947,7 @@ export default class Project extends TenantModel {
     type: TableColumnType.Number,
     title: "Daily AI Fix Task Limit",
     description:
-      "Maximum AI fix tasks (agent runs that open pull requests) that may be created per UTC day for this project, across every fix recipe and trigger. Unset means the default of 25 per day; 0 pauses AI fix tasks entirely.",
+      "Fallback maximum AI fix tasks (agent runs that open pull requests) that may be created per UTC day for work not associated with an incident or alert, across every fix recipe and trigger. Unset means the default of 25 per day; 0 pauses these AI fix tasks entirely.",
     example: 25,
   })
   @Column({
@@ -1842,6 +1956,60 @@ export default class Project extends TenantModel {
   })
   public aiDailyFixTaskLimit?: number = undefined;
 
+  @ColumnAccessControl({
+    create: [],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.ReadProject,
+      Permission.UnAuthorizedSsoUser,
+      Permission.ProjectUser,
+    ],
+    update: [Permission.ProjectOwner, Permission.ProjectAdmin],
+  })
+  @TableColumn({
+    required: false,
+    type: TableColumnType.Number,
+    title: "Daily Incident AI Fix Task Limit",
+    description:
+      "Maximum AI fix tasks derived from incidents that may be created per UTC day for this project. Unset means the default of 25 per day; 0 pauses incident AI fix tasks entirely.",
+    example: 25,
+  })
+  @Column({
+    nullable: true,
+    type: ColumnType.Number,
+  })
+  public incidentAiDailyFixTaskLimit?: number = undefined;
+
+  @ColumnAccessControl({
+    create: [],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.ReadProject,
+      Permission.UnAuthorizedSsoUser,
+      Permission.ProjectUser,
+    ],
+    update: [Permission.ProjectOwner, Permission.ProjectAdmin],
+  })
+  @TableColumn({
+    required: false,
+    type: TableColumnType.Number,
+    title: "Daily Alert AI Fix Task Limit",
+    description:
+      "Maximum AI fix tasks derived from alerts that may be created per UTC day for this project. Unset means the default of 25 per day; 0 pauses alert AI fix tasks entirely.",
+    example: 25,
+  })
+  @Column({
+    nullable: true,
+    type: ColumnType.Number,
+  })
+  public alertAiDailyFixTaskLimit?: number = undefined;
+
   @ColumnAccessControl({
     create: [],
     read: [
@@ -1976,7 +2144,7 @@ export default class Project extends TenantModel {
     type: TableColumnType.Number,
     title: "Max Concurrent Investigations",
     description:
-      "How many AI investigations may run at the same time for this project, shared across incidents and alerts. Unset means the default of 3. Minimum 1 — pause investigations with the opt-in toggles or a daily token limit of 0 instead.",
+      "Fallback maximum number of non-incident and non-alert AI investigations that may run at the same time for this project. Unset means the default of 3. Minimum 1 — pause autonomous work with its opt-in toggle or a daily token limit of 0 instead.",
     example: 3,
   })
   @Column({
@@ -1985,6 +2153,60 @@ export default class Project extends TenantModel {
   })
   public aiMaxConcurrentInvestigations?: number = undefined;
 
+  @ColumnAccessControl({
+    create: [],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.ReadProject,
+      Permission.UnAuthorizedSsoUser,
+      Permission.ProjectUser,
+    ],
+    update: [Permission.ProjectOwner, Permission.ProjectAdmin],
+  })
+  @TableColumn({
+    required: false,
+    type: TableColumnType.Number,
+    title: "Max Concurrent Incident Investigations",
+    description:
+      "How many incident AI investigations may run at the same time for this project. Unset means the default of 3. Minimum 1 — pause incident investigations with the opt-in toggle or a daily token limit of 0 instead.",
+    example: 3,
+  })
+  @Column({
+    nullable: true,
+    type: ColumnType.Number,
+  })
+  public incidentAiMaxConcurrentInvestigations?: number = undefined;
+
+  @ColumnAccessControl({
+    create: [],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.ReadProject,
+      Permission.UnAuthorizedSsoUser,
+      Permission.ProjectUser,
+    ],
+    update: [Permission.ProjectOwner, Permission.ProjectAdmin],
+  })
+  @TableColumn({
+    required: false,
+    type: TableColumnType.Number,
+    title: "Max Concurrent Alert Investigations",
+    description:
+      "How many alert AI investigations may run at the same time for this project. Unset means the default of 3. Minimum 1 — pause alert investigations with the opt-in toggle or a daily token limit of 0 instead.",
+    example: 3,
+  })
+  @Column({
+    nullable: true,
+    type: ColumnType.Number,
+  })
+  public alertAiMaxConcurrentInvestigations?: number = undefined;
+
   @ColumnAccessControl({
     create: [],
     read: [

package/Models/DatabaseModels/ProjectCallSMSConfig.ts

@@ -413,11 +413,18 @@ export default class ProjectCallSMSConfig extends BaseModel {
     description: "Account SID for your Twilio Account",
     example: "ACxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
   })
+  /*
+   * NOT unique. One Twilio account legitimately backs more than one config —
+   * a project splitting SMS and Voice across two numbers on the same account,
+   * or two projects on a shared instance using the same account. A global
+   * UNIQUE here made the second such config fail with a bare 500 (issue #3020),
+   * across the tenant boundary as well as within a project.
+   */
   @Column({
     type: ColumnType.ShortText,
     length: ColumnLength.ShortText,
     nullable: true,
-    unique: true,
+    unique: false,
   })
   public twilioAccountSID?: string = undefined;
 
@@ -449,11 +456,12 @@ export default class ProjectCallSMSConfig extends BaseModel {
     description: "Auth Token for your Twilio Account",
     example: "your-twilio-auth-token",
   })
+  /* NOT unique, for the same reason as twilioAccountSID above. */
   @Column({
     type: ColumnType.ShortText,
     length: ColumnLength.ShortText,
     nullable: true,
-    unique: true,
+    unique: false,
   })
   public twilioAuthToken?: string = undefined;
 

package/Models/DatabaseModels/ScheduledMaintenance.ts

@@ -1426,6 +1426,7 @@ export default class ScheduledMaintenance extends BaseModel {
     ],
   })
   @TableColumn({
+    computed: true,
     type: TableColumnType.VeryLongText,
     title: "Notification Status Message On Event Scheduled",
     description:

package/Models/DatabaseModels/ScheduledMaintenancePublicNote.ts

@@ -544,6 +544,7 @@ export default class ScheduledMaintenancePublicNote extends BaseModel {
     ],
   })
   @TableColumn({
+    computed: true,
     type: TableColumnType.VeryLongText,
     title: "Notification Status Message",
     description:

package/Models/DatabaseModels/ScheduledMaintenanceStateTimeline.ts

@@ -541,6 +541,7 @@ export default class ScheduledMaintenanceStateTimeline extends BaseModel {
     ],
   })
   @TableColumn({
+    computed: true,
     type: TableColumnType.VeryLongText,
     title: "Notification Status Message",
     description:

package/Models/DatabaseModels/ScheduledMaintenanceTemplateOwnerUser.ts

@@ -239,7 +239,7 @@ export default class ScheduledMaintenanceTemplateOwnerUser extends BaseModel {
       Permission.ProjectMember,
       Permission.ScheduledMaintenanceAdmin,
       Permission.ScheduledMaintenanceMember,
-      Permission.CreateScheduledMaintenanceTemplateOwnerTeam,
+      Permission.CreateScheduledMaintenanceTemplateOwnerUser,
     ],
     read: [
       Permission.ProjectOwner,
@@ -249,7 +249,7 @@ export default class ScheduledMaintenanceTemplateOwnerUser extends BaseModel {
       Permission.ScheduledMaintenanceAdmin,
       Permission.ScheduledMaintenanceMember,
       Permission.ScheduledMaintenanceViewer,
-      Permission.ReadScheduledMaintenanceTemplateOwnerTeam,
+      Permission.ReadScheduledMaintenanceTemplateOwnerUser,
     ],
     update: [],
   })
@@ -283,7 +283,7 @@ export default class ScheduledMaintenanceTemplateOwnerUser extends BaseModel {
       Permission.ProjectMember,
       Permission.ScheduledMaintenanceAdmin,
       Permission.ScheduledMaintenanceMember,
-      Permission.CreateScheduledMaintenanceTemplateOwnerTeam,
+      Permission.CreateScheduledMaintenanceTemplateOwnerUser,
     ],
     read: [
       Permission.ProjectOwner,
@@ -293,7 +293,7 @@ export default class ScheduledMaintenanceTemplateOwnerUser extends BaseModel {
       Permission.ScheduledMaintenanceAdmin,
       Permission.ScheduledMaintenanceMember,
       Permission.ScheduledMaintenanceViewer,
-      Permission.ReadScheduledMaintenanceTemplateOwnerTeam,
+      Permission.ReadScheduledMaintenanceTemplateOwnerUser,
     ],
     update: [],
   })

package/Models/DatabaseModels/StatusPage.ts

@@ -1183,6 +1183,7 @@ export default class StatusPage extends BaseModel {
     description:
       "Password required to unlock a private status page. This value is stored as a secure hash.",
     hashed: true,
+    hashSaltColumn: "masterPasswordSalt",
     type: TableColumnType.HashedString,
     placeholder: "Enter a new master password",
   })
@@ -1194,6 +1195,33 @@ export default class StatusPage extends BaseModel {
   })
   public masterPassword?: HashedString = undefined;
 
+  /*
+   * Per-status-page salt mixed into `masterPassword`. Written by the database
+   * write path on every master-password write and never exposed to API
+   * callers. Nullable so existing unsalted hashes can be verified and
+   * upgraded after a successful unlock.
+   */
+  @ColumnAccessControl({
+    create: [],
+    read: [],
+    update: [],
+  })
+  @TableColumn({
+    title: "Master Password Salt",
+    description:
+      "Per-status-page random salt mixed into this status page's master password hash.",
+    computed: true,
+    type: TableColumnType.ShortText,
+    hideColumnInDocumentation: true,
+  })
+  @Column({
+    type: ColumnType.ShortText,
+    length: ColumnLength.ShortText,
+    unique: false,
+    nullable: true,
+  })
+  public masterPasswordSalt?: string = undefined;
+
   @ColumnAccessControl({
     create: [
       Permission.ProjectOwner,

package/Models/DatabaseModels/StatusPageAnnouncement.ts

@@ -713,6 +713,7 @@ export default class StatusPageAnnouncement extends BaseModel {
     ],
   })
   @TableColumn({
+    computed: true,
     type: TableColumnType.VeryLongText,
     title: "Notification Status Message",
     description:

package/Models/DatabaseModels/User.ts

@@ -6,6 +6,7 @@ import JobRole from "../../Types/Company/JobRole";
 import AllowAccessIfSubscriptionIsUnpaid from "../../Types/Database/AccessControl/AllowAccessIfSubscriptionIsUnpaid";
 import ColumnAccessControl from "../../Types/Database/AccessControl/ColumnAccessControl";
 import TableAccessControl from "../../Types/Database/AccessControl/TableAccessControl";
+import AllowUserQueryWithoutTenant from "../../Types/Database/AllowUserQueryWithoutTenant";
 import ColumnLength from "../../Types/Database/ColumnLength";
 import ColumnType from "../../Types/Database/ColumnType";
 import CrudApiEndpoint from "../../Types/Database/CrudApiEndpoint";
@@ -48,6 +49,7 @@ import { Column, Entity, Index, JoinColumn, ManyToOne } from "typeorm";
   icon: IconProp.User,
   tableDescription: "A signed up or invited OneUptime user.",
 })
+@AllowUserQueryWithoutTenant(true)
 @CurrentUserCanAccessRecordBy("_id")
 class User extends UserModel {
   @ColumnAccessControl({

package/Models/DatabaseModels/UserOnCallLog.ts

@@ -18,6 +18,7 @@ import CanAccessIfCanReadOn from "../../Types/Database/CanAccessIfCanReadOn";
 import ColumnLength from "../../Types/Database/ColumnLength";
 import ColumnType from "../../Types/Database/ColumnType";
 import CrudApiEndpoint from "../../Types/Database/CrudApiEndpoint";
+import CurrentUserCanAccessRecordBy from "../../Types/Database/CurrentUserCanAccessRecordBy";
 import EnableDocumentation from "../../Types/Database/EnableDocumentation";
 import TableColumn from "../../Types/Database/TableColumn";
 import TableColumnType from "../../Types/Database/TableColumnType";
@@ -36,6 +37,7 @@ import Alert from "./Alert";
 
 @EnableDocumentation()
 @CanAccessIfCanReadOn("onCallDutyPolicy")
+@CurrentUserCanAccessRecordBy("userId")
 @TenantColumn("projectId")
 @TableBillingAccessControl({
   create: PlanType.Growth,