@oneuptime/common 12.0.8 → 12.0.9

package/Models/DatabaseModels/NetworkTopologySuppression.ts

@@ -0,0 +1,429 @@
+import Project from "./Project";
+import User from "./User";
+import BaseModel from "./DatabaseBaseModel/DatabaseBaseModel";
+import Route from "../../Types/API/Route";
+import ColumnAccessControl from "../../Types/Database/AccessControl/ColumnAccessControl";
+import TableAccessControl from "../../Types/Database/AccessControl/TableAccessControl";
+import ColumnLength from "../../Types/Database/ColumnLength";
+import ColumnType from "../../Types/Database/ColumnType";
+import CrudApiEndpoint from "../../Types/Database/CrudApiEndpoint";
+import EnableDocumentation from "../../Types/Database/EnableDocumentation";
+import TableColumn from "../../Types/Database/TableColumn";
+import TableColumnType from "../../Types/Database/TableColumnType";
+import TableMetadata from "../../Types/Database/TableMetadata";
+import TenantColumn from "../../Types/Database/TenantColumn";
+import IconProp from "../../Types/Icon/IconProp";
+import ObjectID from "../../Types/ObjectID";
+import Permission from "../../Types/Permission";
+import { Column, Entity, Index, JoinColumn, ManyToOne } from "typeorm";
+
+/*
+ * A node the operator has taken off the topology map.
+ *
+ * Discovery keeps finding things that are real but not wanted on the map —
+ * a neighbour that belongs to the landlord's network, a phone that answers
+ * CDP, a peer nobody manages. The map already had a per-KIND toggle, but it
+ * lived in component state: it reset on refresh, applied to nobody else, and
+ * was all-or-nothing, so hiding one stranger meant hiding every unmanaged
+ * peer including the ones you wanted.
+ *
+ * This is per-node and per-project: it survives a refresh and the whole team
+ * sees the same map, which is the point of a shared map. Suppression is a
+ * DISPLAY decision only — the device, its metrics and its alerts are all
+ * untouched, and the count of what is hidden is always shown so a suppressed
+ * node can be found and restored.
+ */
+@EnableDocumentation()
+@TenantColumn("projectId")
+@TableAccessControl({
+  create: [
+    Permission.ProjectOwner,
+    Permission.ProjectAdmin,
+    Permission.ProjectMember,
+    Permission.SettingsAdmin,
+    Permission.SettingsMember,
+    Permission.CreateNetworkTopologySuppression,
+  ],
+  read: [
+    Permission.ProjectOwner,
+    Permission.ProjectAdmin,
+    Permission.ProjectMember,
+    Permission.Viewer,
+    Permission.SettingsAdmin,
+    Permission.SettingsMember,
+    Permission.SettingsViewer,
+    Permission.ReadNetworkTopologySuppression,
+  ],
+  delete: [
+    Permission.ProjectOwner,
+    Permission.ProjectAdmin,
+    Permission.ProjectMember,
+    Permission.SettingsAdmin,
+    Permission.SettingsMember,
+    Permission.DeleteNetworkTopologySuppression,
+  ],
+  update: [
+    Permission.ProjectOwner,
+    Permission.ProjectAdmin,
+    Permission.ProjectMember,
+    Permission.SettingsAdmin,
+    Permission.SettingsMember,
+    Permission.EditNetworkTopologySuppression,
+  ],
+})
+@CrudApiEndpoint(new Route("/network-topology-suppression"))
+@Index(["projectId", "nodeKey"])
+@TableMetadata({
+  tableName: "NetworkTopologySuppression",
+  singularName: "Network Topology Suppression",
+  pluralName: "Network Topology Suppressions",
+  icon: IconProp.EyeSlash,
+  tableDescription:
+    "Nodes hidden from the Network Topology map for the whole project. Display only — the device and its monitoring are untouched.",
+})
+@Entity({
+  name: "NetworkTopologySuppression",
+})
+export default class NetworkTopologySuppression extends BaseModel {
+  @ColumnAccessControl({
+    create: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.SettingsAdmin,
+      Permission.SettingsMember,
+      Permission.CreateNetworkTopologySuppression,
+    ],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.SettingsAdmin,
+      Permission.SettingsMember,
+      Permission.SettingsViewer,
+      Permission.ReadNetworkTopologySuppression,
+    ],
+    update: [],
+  })
+  @TableColumn({
+    manyToOneRelationColumn: "projectId",
+    type: TableColumnType.Entity,
+    modelType: Project,
+    title: "Project",
+    description: "Relation to Project Resource in which this object belongs",
+  })
+  @ManyToOne(
+    () => {
+      return Project;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "CASCADE",
+      orphanedRowAction: "nullify",
+    },
+  )
+  @JoinColumn({ name: "projectId" })
+  public project?: Project = undefined;
+
+  @ColumnAccessControl({
+    create: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.SettingsAdmin,
+      Permission.SettingsMember,
+      Permission.CreateNetworkTopologySuppression,
+    ],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.SettingsAdmin,
+      Permission.SettingsMember,
+      Permission.SettingsViewer,
+      Permission.ReadNetworkTopologySuppression,
+    ],
+    update: [],
+  })
+  @Index()
+  @TableColumn({
+    type: TableColumnType.ObjectID,
+    required: true,
+    canReadOnRelationQuery: true,
+    title: "Project ID",
+    description: "ID of your OneUptime Project in which this object belongs",
+  })
+  @Column({
+    type: ColumnType.ObjectID,
+    nullable: false,
+    transformer: ObjectID.getDatabaseTransformer(),
+  })
+  public projectId?: ObjectID = undefined;
+
+  @ColumnAccessControl({
+    create: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.SettingsAdmin,
+      Permission.SettingsMember,
+      Permission.CreateNetworkTopologySuppression,
+    ],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.SettingsAdmin,
+      Permission.SettingsMember,
+      Permission.SettingsViewer,
+      Permission.ReadNetworkTopologySuppression,
+    ],
+    update: [],
+  })
+  @TableColumn({
+    required: true,
+    type: TableColumnType.ShortText,
+    canReadOnRelationQuery: true,
+    title: "Node Key",
+    description:
+      "The topology node id to hide. A device id for a managed device, 'unmanaged:<name>' for a discovery-protocol peer, or 'endpoint:<id>' for a discovered endpoint. Free text rather than a foreign key because two of the three are synthesised by the topology builder and have no row of their own.",
+    example: "unmanaged:ap-lobby",
+  })
+  @Column({
+    nullable: false,
+    type: ColumnType.ShortText,
+    length: ColumnLength.ShortText,
+  })
+  public nodeKey?: string = undefined;
+
+  @ColumnAccessControl({
+    create: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.SettingsAdmin,
+      Permission.SettingsMember,
+      Permission.CreateNetworkTopologySuppression,
+    ],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.SettingsAdmin,
+      Permission.SettingsMember,
+      Permission.SettingsViewer,
+      Permission.ReadNetworkTopologySuppression,
+    ],
+    update: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.SettingsAdmin,
+      Permission.SettingsMember,
+      Permission.EditNetworkTopologySuppression,
+    ],
+  })
+  @TableColumn({
+    required: false,
+    type: TableColumnType.ShortText,
+    canReadOnRelationQuery: true,
+    title: "Node Name",
+    description:
+      "What the node was called when it was hidden, so the hidden list is readable without rebuilding the graph.",
+    example: "ap-lobby",
+  })
+  @Column({
+    nullable: true,
+    type: ColumnType.ShortText,
+    length: ColumnLength.ShortText,
+  })
+  public nodeName?: string = undefined;
+
+  @ColumnAccessControl({
+    create: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.SettingsAdmin,
+      Permission.SettingsMember,
+      Permission.CreateNetworkTopologySuppression,
+    ],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.SettingsAdmin,
+      Permission.SettingsMember,
+      Permission.SettingsViewer,
+      Permission.ReadNetworkTopologySuppression,
+    ],
+    update: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.SettingsAdmin,
+      Permission.SettingsMember,
+      Permission.EditNetworkTopologySuppression,
+    ],
+  })
+  @TableColumn({
+    required: false,
+    type: TableColumnType.LongText,
+    title: "Reason",
+    description:
+      "Why this node was hidden — the note the next person needs to decide whether it should stay hidden.",
+    example: "Landlord's switch, not ours.",
+  })
+  @Column({
+    nullable: true,
+    type: ColumnType.LongText,
+  })
+  public reason?: string = undefined;
+
+  @ColumnAccessControl({
+    create: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.SettingsAdmin,
+      Permission.SettingsMember,
+      Permission.CreateNetworkTopologySuppression,
+    ],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.SettingsAdmin,
+      Permission.SettingsMember,
+      Permission.SettingsViewer,
+      Permission.ReadNetworkTopologySuppression,
+    ],
+    update: [],
+  })
+  @TableColumn({
+    manyToOneRelationColumn: "createdByUserId",
+    type: TableColumnType.Entity,
+    modelType: User,
+    title: "Created by User",
+    description:
+      "Relation to User who created this object (if this object was created by a User)",
+  })
+  @ManyToOne(
+    () => {
+      return User;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "SET NULL",
+      orphanedRowAction: "nullify",
+    },
+  )
+  @JoinColumn({ name: "createdByUserId" })
+  public createdByUser?: User = undefined;
+
+  @ColumnAccessControl({
+    create: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.SettingsAdmin,
+      Permission.SettingsMember,
+      Permission.CreateNetworkTopologySuppression,
+    ],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.SettingsAdmin,
+      Permission.SettingsMember,
+      Permission.SettingsViewer,
+      Permission.ReadNetworkTopologySuppression,
+    ],
+    update: [],
+  })
+  @TableColumn({
+    type: TableColumnType.ObjectID,
+    title: "Created by User ID",
+    description:
+      "User ID who created this object (if this object was created by a User)",
+  })
+  @Column({
+    type: ColumnType.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer(),
+  })
+  public createdByUserId?: ObjectID = undefined;
+
+  @ColumnAccessControl({
+    create: [],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.SettingsAdmin,
+      Permission.SettingsMember,
+      Permission.SettingsViewer,
+      Permission.ReadNetworkTopologySuppression,
+    ],
+    update: [],
+  })
+  @TableColumn({
+    manyToOneRelationColumn: "deletedByUserId",
+    type: TableColumnType.Entity,
+    title: "Deleted by User",
+    modelType: User,
+    description:
+      "Relation to User who deleted this object (if this object was deleted by a User)",
+  })
+  @ManyToOne(
+    () => {
+      return User;
+    },
+    {
+      cascade: false,
+      eager: false,
+      nullable: true,
+      onDelete: "SET NULL",
+      orphanedRowAction: "nullify",
+    },
+  )
+  @JoinColumn({ name: "deletedByUserId" })
+  public deletedByUser?: User = undefined;
+
+  @ColumnAccessControl({
+    create: [],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.SettingsAdmin,
+      Permission.SettingsMember,
+      Permission.SettingsViewer,
+      Permission.ReadNetworkTopologySuppression,
+    ],
+    update: [],
+  })
+  @TableColumn({
+    type: TableColumnType.ObjectID,
+    title: "Deleted by User ID",
+    description:
+      "User ID who deleted this object (if this object was deleted by a User)",
+  })
+  @Column({
+    type: ColumnType.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer(),
+  })
+  public deletedByUserId?: ObjectID = undefined;
+}

package/Models/DatabaseModels/OnCallDutyPolicyFeed.ts

@@ -37,6 +37,15 @@ export enum OnCallDutyPolicyFeedEventType {
   OwnerTeamRemoved = "OwnerTeamRemoved",
   UserOverrideAdded = "UserOverrideAdded",
   UserOverrideRemoved = "UserOverrideRemoved",
+  /*
+   * A schedule attached to this policy stopped having anybody on call. Distinct
+   * from RosterHandoff, which describes one person replacing another: this is
+   * the case where nobody replaces them, so alerts escalating to that schedule
+   * will page no one. It is the only push signal for a coverage gap — without
+   * it a gap opens in silence and is only discoverable by visiting the
+   * schedule's page and looking.
+   */
+  CoverageGapStarted = "CoverageGapStarted",
 }
 
 @EnableDocumentation()

package/Models/DatabaseModels/Project.ts

@@ -1233,6 +1233,84 @@ export default class Project extends TenantModel {
   })
   public enableCallNotifications?: boolean = undefined;
 
+  /*
+   * When an on-call responder has no notification rule matching the rule type and
+   * severity of the page being routed to them, OneUptime falls back to whatever
+   * verified notification method they do have rather than delivering nothing. Turning
+   * this on restores the older behaviour: the execution is marked Error and no
+   * notification is attempted.
+   *
+   * The setting exists for projects that would rather see a loud configuration failure
+   * than an unexpected channel being used, and for projects whose responders express
+   * deliberate silence some other way. It is off by default because the behaviour it
+   * disables is the one that stops pages from being lost. Note that an explicit opt-out
+   * rule (UserNotificationRule.isOptOut) already suppresses the fallback for the exact
+   * rule type and severity the user asked to be left alone for, so this flag is only
+   * needed to opt out project-wide.
+   */
+  @ColumnAccessControl({
+    create: [],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.ReadProject,
+      Permission.UnAuthorizedSsoUser,
+      Permission.ProjectUser,
+    ],
+    update: [Permission.ProjectOwner, Permission.ManageProjectBilling],
+  })
+  @TableColumn({
+    required: true,
+    isDefaultValueColumn: true,
+    type: TableColumnType.Boolean,
+    title: "Disable On-Call Notification Fallback",
+    description:
+      "When enabled, a page routed to a responder with no matching notification rule fails instead of falling back to their verified notification methods.",
+    defaultValue: false,
+    example: false,
+  })
+  @Column({
+    nullable: false,
+    default: false,
+    type: ColumnType.Boolean,
+  })
+  public disableOnCallNotificationFallback?: boolean = undefined;
+
+  /*
+   * Throttle flag for the owner notification sent when the fallback above is used or
+   * when a responder turns out to be unreachable. An incident storm must not turn into a
+   * mail storm, so the owners are told once and the flag is cleared on the usual
+   * schedule.
+   *
+   * This is deliberately a new column rather than a reuse of
+   * lowCallAndSMSBalanceNotificationSentToOwners: that flag is shared by the SMS, Call
+   * and WhatsApp low-balance paths, and setting it here would silently suppress the
+   * billing warnings those paths depend on.
+   */
+  @ColumnAccessControl({
+    create: [],
+    read: [],
+    update: [],
+  })
+  @TableColumn({
+    required: true,
+    isDefaultValueColumn: true,
+    hideColumnInDocumentation: true,
+    type: TableColumnType.Boolean,
+    title: "On-Call Notification Fallback Used Notification Sent to Owners",
+    description:
+      "On-Call Notification Fallback Used Notification Sent to Owners",
+    defaultValue: false,
+  })
+  @Column({
+    nullable: false,
+    default: false,
+    type: ColumnType.Boolean,
+  })
+  public onCallFallbackUsedNotificationSentToOwners?: boolean = undefined;
+
   @ColumnAccessControl({
     create: [],
     read: [

package/Models/DatabaseModels/UserCall.ts

@@ -4,6 +4,7 @@ import BaseModel from "./DatabaseBaseModel/DatabaseBaseModel";
 import Route from "../../Types/API/Route";
 import AllowAccessIfSubscriptionIsUnpaid from "../../Types/Database/AccessControl/AllowAccessIfSubscriptionIsUnpaid";
 import ColumnAccessControl from "../../Types/Database/AccessControl/ColumnAccessControl";
+import OwnerOnlyColumn from "../../Types/Database/AccessControl/OwnerOnlyColumn";
 import TableAccessControl from "../../Types/Database/AccessControl/TableAccessControl";
 import ColumnLength from "../../Types/Database/ColumnLength";
 import ColumnType from "../../Types/Database/ColumnType";
@@ -20,6 +21,36 @@ import Phone from "../../Types/Phone";
 import Text from "../../Types/Text";
 import { Column, Entity, Index, JoinColumn, ManyToOne } from "typeorm";
 
+/*
+ * `read` names Permission.CurrentUser and nothing else. That single entry is
+ * what makes every column below owner-only, and it has to stay that way.
+ *
+ * CurrentUser is auto-granted to every authenticated caller, so on a COLUMN
+ * list it does not mean "on my own row" - column permissions are intersected
+ * by NAME and never see the query at all. The row scope lives HERE:
+ * TenantPermission.isAccessGrantedOnlyByCurrentUser is true exactly while this
+ * table list holds nothing but CurrentUser, and that is what stamps
+ * `userId = me` onto every read and refuses one that names somebody else. Add
+ * a single administrator permission to this list and the stamp stops being
+ * applied for whoever holds it - and the raw phone number and the verification
+ * code become readable on every member's row in the project.
+ *
+ * That is not hypothetical. It shipped once, and the column-level guard
+ * written to contain it was walked past by nested relation selects, by `query`
+ * filters it never inspected, and by the sort columns that are appended to the
+ * select after it had already run. Each fix produced the next defect, because
+ * this model was never designed to be read across users.
+ *
+ * An administrator who needs to know whether a colleague can be paged does not
+ * read this table. OnCallReadinessService answers that question as root and
+ * returns ReadinessMethod { methodId, methodType, maskedIdentifier,
+ * isVerified } - masked server-side by the one code path that holds the raw
+ * value - and the admin readiness surface already consumes it. The id is a
+ * foreign key rather than a secret: it lets an administrator POINT A RULE AT a
+ * method without reading the method's row, which is the thing the widening was
+ * actually reaching for. Point the next admin surface there. Widening this
+ * list is not a cheaper version of that; it is the version that leaks.
+ */
 @TenantColumn("projectId")
 @AllowAccessIfSubscriptionIsUnpaid()
 @TableAccessControl({
@@ -93,6 +124,12 @@ class UserCall extends BaseModel {
     read: [Permission.CurrentUser],
     update: [],
   })
+  /*
+   * A personal phone number, and a directly addressable delivery target -
+   * anyone holding it can ring the person at three in the morning without going
+   * anywhere near OneUptime.
+   */
+  @OwnerOnlyColumn()
   @TableColumn({
     title: "Phone",
     required: true,
@@ -271,6 +308,11 @@ class UserCall extends BaseModel {
     read: [],
     update: [],
   })
+  /*
+   * A live verification code. Reading somebody else's is claiming their
+   * notification channel.
+   */
+  @OwnerOnlyColumn()
   @TableColumn({
     title: "Verification Code",
     description: "Temporary Verification Code",

package/Models/DatabaseModels/UserEmail.ts

@@ -4,6 +4,7 @@ import BaseModel from "./DatabaseBaseModel/DatabaseBaseModel";
 import Route from "../../Types/API/Route";
 import AllowAccessIfSubscriptionIsUnpaid from "../../Types/Database/AccessControl/AllowAccessIfSubscriptionIsUnpaid";
 import ColumnAccessControl from "../../Types/Database/AccessControl/ColumnAccessControl";
+import OwnerOnlyColumn from "../../Types/Database/AccessControl/OwnerOnlyColumn";
 import TableAccessControl from "../../Types/Database/AccessControl/TableAccessControl";
 import ColumnLength from "../../Types/Database/ColumnLength";
 import ColumnType from "../../Types/Database/ColumnType";
@@ -20,6 +21,36 @@ import Permission from "../../Types/Permission";
 import Text from "../../Types/Text";
 import { Column, Entity, Index, JoinColumn, ManyToOne } from "typeorm";
 
+/*
+ * `read` names Permission.CurrentUser and nothing else. That single entry is
+ * what makes every column below owner-only, and it has to stay that way.
+ *
+ * CurrentUser is auto-granted to every authenticated caller, so on a COLUMN
+ * list it does not mean "on my own row" - column permissions are intersected
+ * by NAME and never see the query at all. The row scope lives HERE:
+ * TenantPermission.isAccessGrantedOnlyByCurrentUser is true exactly while this
+ * table list holds nothing but CurrentUser, and that is what stamps
+ * `userId = me` onto every read and refuses one that names somebody else. Add
+ * a single administrator permission to this list and the stamp stops being
+ * applied for whoever holds it - and the raw email address and the
+ * verification code become readable on every member's row in the project.
+ *
+ * That is not hypothetical. It shipped once, and the column-level guard
+ * written to contain it was walked past by nested relation selects, by `query`
+ * filters it never inspected, and by the sort columns that are appended to the
+ * select after it had already run. Each fix produced the next defect, because
+ * this model was never designed to be read across users.
+ *
+ * An administrator who needs to know whether a colleague can be paged does not
+ * read this table. OnCallReadinessService answers that question as root and
+ * returns ReadinessMethod { methodId, methodType, maskedIdentifier,
+ * isVerified } - masked server-side by the one code path that holds the raw
+ * value - and the admin readiness surface already consumes it. The id is a
+ * foreign key rather than a secret: it lets an administrator POINT A RULE AT a
+ * method without reading the method's row, which is the thing the widening was
+ * actually reaching for. Point the next admin surface there. Widening this
+ * list is not a cheaper version of that; it is the version that leaks.
+ */
 @TenantColumn("projectId")
 @AllowAccessIfSubscriptionIsUnpaid()
 @TableAccessControl({
@@ -93,6 +124,13 @@ class UserEmail extends BaseModel {
     read: [Permission.CurrentUser],
     update: [],
   })
+  /*
+   * A personal email address, and a directly addressable delivery target. An
+   * administrator auditing somebody's on-call setup needs to know THAT an email
+   * method exists and whether it is verified; they do not need the address, and
+   * handing it over turns a rules audit into a contact-details export.
+   */
+  @OwnerOnlyColumn()
   @TableColumn({
     title: "Email",
     required: true,
@@ -272,6 +310,12 @@ class UserEmail extends BaseModel {
     read: [],
     update: [],
   })
+  /*
+   * A live verification code. Reading somebody else's is claiming their
+   * notification channel, so this one is not a privacy question but an account
+   * takeover one.
+   */
+  @OwnerOnlyColumn()
   @TableColumn({
     title: "Verification Code",
     description: "Temporary Verification Code",