@xen-orchestra/acl 1.0.0 → 1.1.0

package/dist/actions/host.d.mts

@@ -1,5 +1,8 @@
 declare const _default: {
     'allow-vm': boolean;
+    disable: boolean;
+    enable: boolean;
+    evacuate: boolean;
     export: {
         logs: boolean;
     };

package/dist/actions/host.mjs

@@ -1,5 +1,8 @@
 export default {
     'allow-vm': true,
+    disable: true,
+    enable: true,
+    evacuate: true,
     export: {
         logs: true,
     },

package/dist/actions/index.d.mts

@@ -53,6 +53,9 @@ export declare const SUPPORTED_ACTIONS_BY_RESOURCE: {
     };
     readonly host: {
         'allow-vm': boolean;
+        disable: boolean;
+        enable: boolean;
+        evacuate: boolean;
         export: {
             logs: boolean;
         };
@@ -83,6 +86,9 @@ export declare const SUPPORTED_ACTIONS_BY_RESOURCE: {
     };
     readonly pif: {
         read: boolean;
+        update: {
+            management: boolean;
+        };
     };
     readonly pool: {
         create: {
@@ -118,6 +124,7 @@ export declare const SUPPORTED_ACTIONS_BY_RESOURCE: {
         read: boolean;
     };
     readonly sr: {
+        delete: boolean;
         import: {
             vdi: boolean;
             vm: boolean;
@@ -206,6 +213,7 @@ export declare const SUPPORTED_ACTIONS_BY_RESOURCE: {
             hard: boolean;
         };
         resume: boolean;
+        'revert-snapshot': boolean;
         shutdown: {
             clean: boolean;
             hard: boolean;

package/dist/actions/pif.d.mts

@@ -1,4 +1,7 @@
 declare const _default: {
     read: boolean;
+    update: {
+        management: boolean;
+    };
 };
 export default _default;

package/dist/actions/pif.mjs

@@ -1,3 +1,6 @@
 export default {
     read: true,
+    update: {
+        management: true,
+    },
 };

package/dist/actions/sr.d.mts

@@ -1,4 +1,5 @@
 declare const _default: {
+    delete: boolean;
     import: {
         vdi: boolean;
         vm: boolean;

package/dist/actions/sr.mjs

@@ -1,4 +1,5 @@
 export default {
+    delete: true,
     import: {
         vdi: true,
         vm: true,

package/dist/actions/vm.d.mts

@@ -8,6 +8,7 @@ declare const _default: {
         hard: boolean;
     };
     resume: boolean;
+    'revert-snapshot': boolean;
     shutdown: {
         clean: boolean;
         hard: boolean;

package/dist/actions/vm.mjs

@@ -8,6 +8,7 @@ export default {
         hard: true,
     },
     resume: true,
+    'revert-snapshot': true,
     shutdown: {
         clean: true,
         hard: true,

package/dist/generated/privilege-types.d.mts

@@ -89,7 +89,7 @@ export type GpuGroupPrivilege = {
 export type HostPrivilege = {
   id: XoAclBasePrivilege['id']
   resource: 'host'
-  action: '*' | 'allow-vm' | 'export' | '*' | 'export:logs' | 'read' | 'update' | '*' | 'update:tags'
+  action: '*' | 'allow-vm' | 'disable' | 'enable' | 'evacuate' | 'export' | '*' | 'export:logs' | 'read' | 'update' | '*' | 'update:tags'
   selector?: XoAclBasePrivilege['selector']
   effect: XoAclBasePrivilege['effect']
   roleId: XoAclBasePrivilege['roleId']
@@ -143,7 +143,7 @@ export type PgpuPrivilege = {
 export type PifPrivilege = {
   id: XoAclBasePrivilege['id']
   resource: 'pif'
-  action: '*' | 'read'
+  action: '*' | 'read' | 'update' | '*' | 'update:management'
   selector?: XoAclBasePrivilege['selector']
   effect: XoAclBasePrivilege['effect']
   roleId: XoAclBasePrivilege['roleId']
@@ -206,7 +206,7 @@ export type SmPrivilege = {
 export type SrPrivilege = {
   id: XoAclBasePrivilege['id']
   resource: 'sr'
-  action: '*' | 'import' | '*' | 'import:vdi' | 'import:vm' | 'read' | 'update' | '*' | 'update:tags'
+  action: '*' | 'delete' | 'import' | '*' | 'import:vdi' | 'import:vm' | 'read' | 'update' | '*' | 'update:tags'
   selector?: XoAclBasePrivilege['selector']
   effect: XoAclBasePrivilege['effect']
   roleId: XoAclBasePrivilege['roleId']
@@ -323,7 +323,7 @@ export type VmTemplatePrivilege = {
 export type VmPrivilege = {
   id: XoAclBasePrivilege['id']
   resource: 'vm'
-  action: '*' | 'delete' | 'export' | 'pause' | 'read' | 'reboot' | '*' | 'reboot:clean' | 'reboot:hard' | 'resume' | 'shutdown' | '*' | 'shutdown:clean' | 'shutdown:hard' | 'snapshot' | 'start' | 'suspend' | 'unpause' | 'update' | '*' | 'update:datasources' | 'update:tags'
+  action: '*' | 'delete' | 'export' | 'pause' | 'read' | 'reboot' | '*' | 'reboot:clean' | 'reboot:hard' | 'resume' | 'revert-snapshot' | 'shutdown' | '*' | 'shutdown:clean' | 'shutdown:hard' | 'snapshot' | 'start' | 'suspend' | 'unpause' | 'update' | '*' | 'update:datasources' | 'update:tags'
   selector?: XoAclBasePrivilege['selector']
   effect: XoAclBasePrivilege['effect']
   roleId: XoAclBasePrivilege['roleId']

package/dist/index.d.mts

@@ -23,7 +23,7 @@ export declare function hasPrivilegeOn<T extends SupportedResource>({ user, acti
 export declare function getMissingPrivileges(params: AnyPrivilegeOnParam[], userPrivileges: AnyPrivilege[]): {
     objectId: unknown;
     objectIds: unknown[] | undefined;
-    action: "create" | "delete" | "read" | "update" | "allow-vm" | "export" | "emergency-shutdown" | "rolling-reboot" | "rolling-update" | "run" | "connect" | "disconnect" | "import" | "abort" | "boot" | "export-content" | "import-content" | "instantiate" | "pause" | "reboot" | "resume" | "shutdown" | "snapshot" | "start" | "suspend" | "unpause" | "*" | "update:action" | "update:resource" | "update:effect" | "update:selector" | "update:description" | "update:groups" | "update:name" | "update:users" | "update:tags" | "export:logs" | "create:network" | "create:vm" | "import:vdi" | "import:vm" | "update:password" | "update:permission" | "update:preferences" | "update:datasources" | "reboot:clean" | "reboot:hard" | "shutdown:clean" | "shutdown:hard";
+    action: "create" | "delete" | "read" | "update" | "allow-vm" | "disable" | "enable" | "evacuate" | "export" | "emergency-shutdown" | "rolling-reboot" | "rolling-update" | "run" | "connect" | "disconnect" | "import" | "abort" | "boot" | "export-content" | "import-content" | "instantiate" | "pause" | "reboot" | "resume" | "revert-snapshot" | "shutdown" | "snapshot" | "start" | "suspend" | "unpause" | "*" | "update:action" | "update:resource" | "update:effect" | "update:selector" | "update:description" | "update:groups" | "update:name" | "update:users" | "update:tags" | "export:logs" | "update:management" | "create:network" | "create:vm" | "import:vdi" | "import:vm" | "update:password" | "update:permission" | "update:preferences" | "update:datasources" | "reboot:clean" | "reboot:hard" | "shutdown:clean" | "shutdown:hard";
     resource: "acl-privilege" | "acl-role" | "alarm" | "backup-archive" | "backup-job" | "backup-log" | "backup-repository" | "group" | "gpuGroup" | "host" | "message" | "network" | "pbd" | "pci" | "pgpu" | "pif" | "pool" | "proxy" | "restore-log" | "schedule" | "server" | "sm" | "sr" | "task" | "user" | "vbd" | "vdi-snapshot" | "vdi-unmanaged" | "vdi" | "vgpu" | "vgpuType" | "vif" | "vm-controller" | "vm-snapshot" | "vm-template" | "vm" | "vtpm";
 }[];
 export declare function hasPrivileges(params: AnyPrivilegeOnParam[], userPrivileges: AnyPrivilege[]): boolean;

package/package.json

@@ -6,7 +6,7 @@
   "main": "dist/index.mjs",
   "name": "@xen-orchestra/acl",
   "homepage": "https://github.com/vatesfr/xen-orchestra/tree/master/@xen-orchestra/acl",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "license": "AGPL-3.0-or-later",
   "private": false,
   "type": "module",
@@ -30,7 +30,7 @@
   },
   "devDependencies": {
     "@eslint/js": "^9.19.0",
-    "@vates/types": "^1.24.0",
+    "@vates/types": "^1.25.0",
     "rimraf": "^6.0.1",
     "typescript": "~5.6",
     "typescript-eslint": "^8.23.0"