@xen-orchestra/acl 1.0.0 → 1.2.0

package/dist/actions/host.d.mts

@@ -1,5 +1,8 @@
 declare const _default: {
     'allow-vm': boolean;
+    disable: boolean;
+    enable: boolean;
+    evacuate: boolean;
     export: {
         logs: boolean;
     };

package/dist/actions/host.mjs

@@ -1,5 +1,8 @@
 export default {
     'allow-vm': true,
+    disable: true,
+    enable: true,
+    evacuate: true,
     export: {
         logs: true,
     },

package/dist/actions/index.d.mts

@@ -53,6 +53,9 @@ export declare const SUPPORTED_ACTIONS_BY_RESOURCE: {
     };
     readonly host: {
         'allow-vm': boolean;
+        disable: boolean;
+        enable: boolean;
+        evacuate: boolean;
         export: {
             logs: boolean;
         };
@@ -83,6 +86,9 @@ export declare const SUPPORTED_ACTIONS_BY_RESOURCE: {
     };
     readonly pif: {
         read: boolean;
+        update: {
+            management: boolean;
+        };
     };
     readonly pool: {
         create: {
@@ -118,6 +124,7 @@ export declare const SUPPORTED_ACTIONS_BY_RESOURCE: {
         read: boolean;
     };
     readonly sr: {
+        delete: boolean;
         import: {
             vdi: boolean;
             vm: boolean;
@@ -206,6 +213,7 @@ export declare const SUPPORTED_ACTIONS_BY_RESOURCE: {
             hard: boolean;
         };
         resume: boolean;
+        'revert-snapshot': boolean;
         shutdown: {
             clean: boolean;
             hard: boolean;
@@ -215,8 +223,43 @@ export declare const SUPPORTED_ACTIONS_BY_RESOURCE: {
         suspend: boolean;
         unpause: boolean;
         update: {
+            affinityHost: boolean;
+            autoPoweron: boolean;
+            blockedOperations: boolean;
+            coresPerSocket: boolean;
+            cpuCap: boolean;
+            cpuMask: boolean;
+            cpuWeight: boolean;
+            cpus: boolean;
+            cpusStaticMax: boolean;
+            creation: boolean;
             datasources: boolean;
+            expNestedHvm: boolean;
+            hasVendorDevice: boolean;
+            highAvailability: boolean;
+            hvmBootFirmware: boolean;
+            memory: boolean;
+            memoryMax: boolean;
+            memoryMin: boolean;
+            memoryStaticMax: boolean;
+            nameDescription: boolean;
+            nameLabel: boolean;
+            nestedVirt: boolean;
+            nicType: boolean;
+            notes: boolean;
+            PV_args: boolean;
+            resourceSet: boolean;
+            secureBoot: boolean;
+            share: boolean;
+            startDelay: boolean;
+            suspendSr: boolean;
             tags: boolean;
+            uefiMode: boolean;
+            vga: boolean;
+            videoram: boolean;
+            viridian: boolean;
+            virtualizationMode: boolean;
+            xenStoreData: boolean;
         };
     };
     readonly vtpm: {

package/dist/actions/pif.d.mts

@@ -1,4 +1,7 @@
 declare const _default: {
     read: boolean;
+    update: {
+        management: boolean;
+    };
 };
 export default _default;

package/dist/actions/pif.mjs

@@ -1,3 +1,6 @@
 export default {
     read: true,
+    update: {
+        management: true,
+    },
 };

package/dist/actions/sr.d.mts

@@ -1,4 +1,5 @@
 declare const _default: {
+    delete: boolean;
     import: {
         vdi: boolean;
         vm: boolean;

package/dist/actions/sr.mjs

@@ -1,4 +1,5 @@
 export default {
+    delete: true,
     import: {
         vdi: true,
         vm: true,

package/dist/actions/vm.d.mts

@@ -8,6 +8,7 @@ declare const _default: {
         hard: boolean;
     };
     resume: boolean;
+    'revert-snapshot': boolean;
     shutdown: {
         clean: boolean;
         hard: boolean;
@@ -17,8 +18,43 @@ declare const _default: {
     suspend: boolean;
     unpause: boolean;
     update: {
+        affinityHost: boolean;
+        autoPoweron: boolean;
+        blockedOperations: boolean;
+        coresPerSocket: boolean;
+        cpuCap: boolean;
+        cpuMask: boolean;
+        cpuWeight: boolean;
+        cpus: boolean;
+        cpusStaticMax: boolean;
+        creation: boolean;
         datasources: boolean;
+        expNestedHvm: boolean;
+        hasVendorDevice: boolean;
+        highAvailability: boolean;
+        hvmBootFirmware: boolean;
+        memory: boolean;
+        memoryMax: boolean;
+        memoryMin: boolean;
+        memoryStaticMax: boolean;
+        nameDescription: boolean;
+        nameLabel: boolean;
+        nestedVirt: boolean;
+        nicType: boolean;
+        notes: boolean;
+        PV_args: boolean;
+        resourceSet: boolean;
+        secureBoot: boolean;
+        share: boolean;
+        startDelay: boolean;
+        suspendSr: boolean;
         tags: boolean;
+        uefiMode: boolean;
+        vga: boolean;
+        videoram: boolean;
+        viridian: boolean;
+        virtualizationMode: boolean;
+        xenStoreData: boolean;
     };
 };
 export default _default;

package/dist/actions/vm.mjs

@@ -8,6 +8,7 @@ export default {
         hard: true,
     },
     resume: true,
+    'revert-snapshot': true,
     shutdown: {
         clean: true,
         hard: true,
@@ -17,7 +18,42 @@ export default {
     suspend: true,
     unpause: true,
     update: {
+        affinityHost: true,
+        autoPoweron: true,
+        blockedOperations: true,
+        coresPerSocket: true,
+        cpuCap: true,
+        cpuMask: true,
+        cpuWeight: true,
+        cpus: true,
+        cpusStaticMax: true,
+        creation: true,
         datasources: true,
+        expNestedHvm: true,
+        hasVendorDevice: true,
+        highAvailability: true,
+        hvmBootFirmware: true,
+        memory: true,
+        memoryMax: true,
+        memoryMin: true,
+        memoryStaticMax: true,
+        nameDescription: true,
+        nameLabel: true,
+        nestedVirt: true,
+        nicType: true,
+        notes: true,
+        PV_args: true,
+        resourceSet: true,
+        secureBoot: true,
+        share: true,
+        startDelay: true,
+        suspendSr: true,
         tags: true,
+        uefiMode: true,
+        vga: true,
+        videoram: true,
+        viridian: true,
+        virtualizationMode: true,
+        xenStoreData: true,
     },
 };

package/dist/generated/privilege-types.d.mts

@@ -89,7 +89,7 @@ export type GpuGroupPrivilege = {
 export type HostPrivilege = {
   id: XoAclBasePrivilege['id']
   resource: 'host'
-  action: '*' | 'allow-vm' | 'export' | '*' | 'export:logs' | 'read' | 'update' | '*' | 'update:tags'
+  action: '*' | 'allow-vm' | 'disable' | 'enable' | 'evacuate' | 'export' | '*' | 'export:logs' | 'read' | 'update' | '*' | 'update:tags'
   selector?: XoAclBasePrivilege['selector']
   effect: XoAclBasePrivilege['effect']
   roleId: XoAclBasePrivilege['roleId']
@@ -143,7 +143,7 @@ export type PgpuPrivilege = {
 export type PifPrivilege = {
   id: XoAclBasePrivilege['id']
   resource: 'pif'
-  action: '*' | 'read'
+  action: '*' | 'read' | 'update' | '*' | 'update:management'
   selector?: XoAclBasePrivilege['selector']
   effect: XoAclBasePrivilege['effect']
   roleId: XoAclBasePrivilege['roleId']
@@ -206,7 +206,7 @@ export type SmPrivilege = {
 export type SrPrivilege = {
   id: XoAclBasePrivilege['id']
   resource: 'sr'
-  action: '*' | 'import' | '*' | 'import:vdi' | 'import:vm' | 'read' | 'update' | '*' | 'update:tags'
+  action: '*' | 'delete' | 'import' | '*' | 'import:vdi' | 'import:vm' | 'read' | 'update' | '*' | 'update:tags'
   selector?: XoAclBasePrivilege['selector']
   effect: XoAclBasePrivilege['effect']
   roleId: XoAclBasePrivilege['roleId']
@@ -323,7 +323,7 @@ export type VmTemplatePrivilege = {
 export type VmPrivilege = {
   id: XoAclBasePrivilege['id']
   resource: 'vm'
-  action: '*' | 'delete' | 'export' | 'pause' | 'read' | 'reboot' | '*' | 'reboot:clean' | 'reboot:hard' | 'resume' | 'shutdown' | '*' | 'shutdown:clean' | 'shutdown:hard' | 'snapshot' | 'start' | 'suspend' | 'unpause' | 'update' | '*' | 'update:datasources' | 'update:tags'
+  action: '*' | 'delete' | 'export' | 'pause' | 'read' | 'reboot' | '*' | 'reboot:clean' | 'reboot:hard' | 'resume' | 'revert-snapshot' | 'shutdown' | '*' | 'shutdown:clean' | 'shutdown:hard' | 'snapshot' | 'start' | 'suspend' | 'unpause' | 'update' | '*' | 'update:affinityHost' | 'update:autoPoweron' | 'update:blockedOperations' | 'update:coresPerSocket' | 'update:cpuCap' | 'update:cpuMask' | 'update:cpuWeight' | 'update:cpus' | 'update:cpusStaticMax' | 'update:creation' | 'update:datasources' | 'update:expNestedHvm' | 'update:hasVendorDevice' | 'update:highAvailability' | 'update:hvmBootFirmware' | 'update:memory' | 'update:memoryMax' | 'update:memoryMin' | 'update:memoryStaticMax' | 'update:nameDescription' | 'update:nameLabel' | 'update:nestedVirt' | 'update:nicType' | 'update:notes' | 'update:PV_args' | 'update:resourceSet' | 'update:secureBoot' | 'update:share' | 'update:startDelay' | 'update:suspendSr' | 'update:tags' | 'update:uefiMode' | 'update:vga' | 'update:videoram' | 'update:viridian' | 'update:virtualizationMode' | 'update:xenStoreData'
   selector?: XoAclBasePrivilege['selector']
   effect: XoAclBasePrivilege['effect']
   roleId: XoAclBasePrivilege['roleId']

package/dist/index.d.mts

@@ -23,7 +23,7 @@ export declare function hasPrivilegeOn<T extends SupportedResource>({ user, acti
 export declare function getMissingPrivileges(params: AnyPrivilegeOnParam[], userPrivileges: AnyPrivilege[]): {
     objectId: unknown;
     objectIds: unknown[] | undefined;
-    action: "create" | "delete" | "read" | "update" | "allow-vm" | "export" | "emergency-shutdown" | "rolling-reboot" | "rolling-update" | "run" | "connect" | "disconnect" | "import" | "abort" | "boot" | "export-content" | "import-content" | "instantiate" | "pause" | "reboot" | "resume" | "shutdown" | "snapshot" | "start" | "suspend" | "unpause" | "*" | "update:action" | "update:resource" | "update:effect" | "update:selector" | "update:description" | "update:groups" | "update:name" | "update:users" | "update:tags" | "export:logs" | "create:network" | "create:vm" | "import:vdi" | "import:vm" | "update:password" | "update:permission" | "update:preferences" | "update:datasources" | "reboot:clean" | "reboot:hard" | "shutdown:clean" | "shutdown:hard";
+    action: "create" | "delete" | "read" | "update" | "allow-vm" | "disable" | "enable" | "evacuate" | "export" | "emergency-shutdown" | "rolling-reboot" | "rolling-update" | "run" | "connect" | "disconnect" | "import" | "abort" | "boot" | "export-content" | "import-content" | "instantiate" | "pause" | "reboot" | "resume" | "revert-snapshot" | "shutdown" | "snapshot" | "start" | "suspend" | "unpause" | "*" | "update:action" | "update:resource" | "update:effect" | "update:selector" | "update:description" | "update:groups" | "update:name" | "update:users" | "update:tags" | "export:logs" | "update:management" | "create:network" | "create:vm" | "import:vdi" | "import:vm" | "update:password" | "update:permission" | "update:preferences" | "update:affinityHost" | "update:autoPoweron" | "update:blockedOperations" | "update:coresPerSocket" | "update:cpuCap" | "update:cpuMask" | "update:cpuWeight" | "update:cpus" | "update:cpusStaticMax" | "update:creation" | "update:datasources" | "update:expNestedHvm" | "update:hasVendorDevice" | "update:highAvailability" | "update:hvmBootFirmware" | "update:memory" | "update:memoryMax" | "update:memoryMin" | "update:memoryStaticMax" | "update:nameDescription" | "update:nameLabel" | "update:nestedVirt" | "update:nicType" | "update:notes" | "update:PV_args" | "update:resourceSet" | "update:secureBoot" | "update:share" | "update:startDelay" | "update:suspendSr" | "update:uefiMode" | "update:vga" | "update:videoram" | "update:viridian" | "update:virtualizationMode" | "update:xenStoreData" | "reboot:clean" | "reboot:hard" | "shutdown:clean" | "shutdown:hard";
     resource: "acl-privilege" | "acl-role" | "alarm" | "backup-archive" | "backup-job" | "backup-log" | "backup-repository" | "group" | "gpuGroup" | "host" | "message" | "network" | "pbd" | "pci" | "pgpu" | "pif" | "pool" | "proxy" | "restore-log" | "schedule" | "server" | "sm" | "sr" | "task" | "user" | "vbd" | "vdi-snapshot" | "vdi-unmanaged" | "vdi" | "vgpu" | "vgpuType" | "vif" | "vm-controller" | "vm-snapshot" | "vm-template" | "vm" | "vtpm";
 }[];
 export declare function hasPrivileges(params: AnyPrivilegeOnParam[], userPrivileges: AnyPrivilege[]): boolean;

package/package.json

@@ -6,7 +6,7 @@
   "main": "dist/index.mjs",
   "name": "@xen-orchestra/acl",
   "homepage": "https://github.com/vatesfr/xen-orchestra/tree/master/@xen-orchestra/acl",
-  "version": "1.0.0",
+  "version": "1.2.0",
   "license": "AGPL-3.0-or-later",
   "private": false,
   "type": "module",
@@ -30,7 +30,7 @@
   },
   "devDependencies": {
     "@eslint/js": "^9.19.0",
-    "@vates/types": "^1.24.0",
+    "@vates/types": "^1.26.0",
     "rimraf": "^6.0.1",
     "typescript": "~5.6",
     "typescript-eslint": "^8.23.0"