@xen-orchestra/acl 1.2.0 → 1.3.0

package/dist/actions/backup-repository.d.mts

@@ -1,4 +1,13 @@
 declare const _default: {
+    create: boolean;
     read: boolean;
+    forget: boolean;
+    update: {
+        enabled: boolean;
+        name: boolean;
+        options: boolean;
+        proxy: boolean;
+        url: boolean;
+    };
 };
 export default _default;

package/dist/actions/backup-repository.mjs

@@ -1,3 +1,12 @@
 export default {
+    create: true,
     read: true,
+    forget: true,
+    update: {
+        enabled: true,
+        name: true,
+        options: true,
+        proxy: true,
+        url: true,
+    },
 };

package/dist/actions/host.d.mts

@@ -1,11 +1,13 @@
 declare const _default: {
     'allow-vm': boolean;
     disable: boolean;
+    'migrate-receive': boolean;
     enable: boolean;
     evacuate: boolean;
     export: {
         logs: boolean;
     };
+    'join-pool': boolean;
     read: boolean;
     update: {
         tags: boolean;

package/dist/actions/host.mjs

@@ -1,11 +1,13 @@
 export default {
     'allow-vm': true,
     disable: true,
+    'migrate-receive': true,
     enable: true,
     evacuate: true,
     export: {
         logs: true,
     },
+    'join-pool': true,
     read: true,
     update: {
         tags: true,

package/dist/actions/index.d.mts

@@ -37,7 +37,16 @@ export declare const SUPPORTED_ACTIONS_BY_RESOURCE: {
         read: boolean;
     };
     readonly 'backup-repository': {
+        create: boolean;
         read: boolean;
+        forget: boolean;
+        update: {
+            enabled: boolean;
+            name: boolean;
+            options: boolean;
+            proxy: boolean;
+            url: boolean;
+        };
     };
     readonly group: {
         create: boolean;
@@ -54,11 +63,13 @@ export declare const SUPPORTED_ACTIONS_BY_RESOURCE: {
     readonly host: {
         'allow-vm': boolean;
         disable: boolean;
+        'migrate-receive': boolean;
         enable: boolean;
         evacuate: boolean;
         export: {
             logs: boolean;
         };
+        'join-pool': boolean;
         read: boolean;
         update: {
             tags: boolean;
@@ -77,6 +88,8 @@ export declare const SUPPORTED_ACTIONS_BY_RESOURCE: {
     };
     readonly pbd: {
         read: boolean;
+        plug: boolean;
+        unplug: boolean;
     };
     readonly pci: {
         read: boolean;
@@ -91,6 +104,7 @@ export declare const SUPPORTED_ACTIONS_BY_RESOURCE: {
         };
     };
     readonly pool: {
+        'add-host': boolean;
         create: {
             network: boolean;
             vm: boolean;
@@ -125,11 +139,15 @@ export declare const SUPPORTED_ACTIONS_BY_RESOURCE: {
     };
     readonly sr: {
         delete: boolean;
+        forget: boolean;
         import: {
             vdi: boolean;
             vm: boolean;
         };
+        'migrate-receive': boolean;
         read: boolean;
+        'reclaim-space': boolean;
+        scan: boolean;
         update: {
             tags: boolean;
         };
@@ -151,10 +169,19 @@ export declare const SUPPORTED_ACTIONS_BY_RESOURCE: {
         };
     };
     readonly vbd: {
+        connect: boolean;
+        create: boolean;
+        delete: boolean;
+        disconnect: boolean;
         read: boolean;
     };
     readonly 'vdi-snapshot': {
+        delete: boolean;
+        export: boolean;
         read: boolean;
+        update: {
+            tags: boolean;
+        };
     };
     readonly 'vdi-unmanaged': {
         read: boolean;
@@ -165,6 +192,7 @@ export declare const SUPPORTED_ACTIONS_BY_RESOURCE: {
         delete: boolean;
         'export-content': boolean;
         'import-content': boolean;
+        'migrate-send': boolean;
         read: boolean;
         update: {
             tags: boolean;
@@ -177,8 +205,18 @@ export declare const SUPPORTED_ACTIONS_BY_RESOURCE: {
         read: boolean;
     };
     readonly vif: {
-        read: boolean;
+        connect: boolean;
         create: boolean;
+        delete: boolean;
+        disconnect: boolean;
+        read: boolean;
+        update: {
+            allowedIpv4Addresses: boolean;
+            allowedIpv6Addresses: boolean;
+            lockingMode: boolean;
+            rateLimit: boolean;
+            txChecksumming: boolean;
+        };
     };
     readonly 'vm-controller': {
         read: boolean;
@@ -204,8 +242,10 @@ export declare const SUPPORTED_ACTIONS_BY_RESOURCE: {
         };
     };
     readonly vm: {
+        clone: boolean;
         delete: boolean;
         export: boolean;
+        'migrate-send': boolean;
         pause: boolean;
         read: boolean;
         reboot: {

package/dist/actions/pbd.d.mts

@@ -1,4 +1,6 @@
 declare const _default: {
     read: boolean;
+    plug: boolean;
+    unplug: boolean;
 };
 export default _default;

package/dist/actions/pbd.mjs

@@ -1,3 +1,5 @@
 export default {
     read: true,
+    plug: true,
+    unplug: true,
 };

package/dist/actions/pool.d.mts

@@ -1,4 +1,5 @@
 declare const _default: {
+    'add-host': boolean;
     create: {
         network: boolean;
         vm: boolean;

package/dist/actions/pool.mjs

@@ -1,4 +1,5 @@
 export default {
+    'add-host': true,
     create: {
         network: true,
         vm: true,

package/dist/actions/sr.d.mts

@@ -1,10 +1,14 @@
 declare const _default: {
     delete: boolean;
+    forget: boolean;
     import: {
         vdi: boolean;
         vm: boolean;
     };
+    'migrate-receive': boolean;
     read: boolean;
+    'reclaim-space': boolean;
+    scan: boolean;
     update: {
         tags: boolean;
     };

package/dist/actions/sr.mjs

@@ -1,10 +1,14 @@
 export default {
     delete: true,
+    forget: true,
     import: {
         vdi: true,
         vm: true,
     },
+    'migrate-receive': true,
     read: true,
+    'reclaim-space': true,
+    scan: true,
     update: {
         tags: true,
     },

package/dist/actions/vbd.d.mts

@@ -1,4 +1,8 @@
 declare const _default: {
+    connect: boolean;
+    create: boolean;
+    delete: boolean;
+    disconnect: boolean;
     read: boolean;
 };
 export default _default;

package/dist/actions/vbd.mjs

@@ -1,3 +1,7 @@
 export default {
+    connect: true,
+    create: true,
+    delete: true,
+    disconnect: true,
     read: true,
 };

package/dist/actions/vdi-snapshot.d.mts

@@ -1,4 +1,9 @@
 declare const _default: {
+    delete: boolean;
+    export: boolean;
     read: boolean;
+    update: {
+        tags: boolean;
+    };
 };
 export default _default;

package/dist/actions/vdi-snapshot.mjs

@@ -1,3 +1,8 @@
 export default {
+    delete: true,
+    export: true,
     read: true,
+    update: {
+        tags: true,
+    },
 };

package/dist/actions/vdi.d.mts

@@ -4,6 +4,7 @@ declare const _default: {
     delete: boolean;
     'export-content': boolean;
     'import-content': boolean;
+    'migrate-send': boolean;
     read: boolean;
     update: {
         tags: boolean;

package/dist/actions/vdi.mjs

@@ -4,6 +4,7 @@ export default {
     delete: true,
     'export-content': true,
     'import-content': true,
+    'migrate-send': true,
     read: true,
     update: {
         tags: true,

package/dist/actions/vif.d.mts

@@ -1,5 +1,15 @@
 declare const _default: {
-    read: boolean;
+    connect: boolean;
     create: boolean;
+    delete: boolean;
+    disconnect: boolean;
+    read: boolean;
+    update: {
+        allowedIpv4Addresses: boolean;
+        allowedIpv6Addresses: boolean;
+        lockingMode: boolean;
+        rateLimit: boolean;
+        txChecksumming: boolean;
+    };
 };
 export default _default;

package/dist/actions/vif.mjs

@@ -1,4 +1,14 @@
 export default {
-    read: true,
+    connect: true,
     create: true,
+    delete: true,
+    disconnect: true,
+    read: true,
+    update: {
+        allowedIpv4Addresses: true,
+        allowedIpv6Addresses: true,
+        lockingMode: true,
+        rateLimit: true,
+        txChecksumming: true,
+    },
 };

package/dist/actions/vm.d.mts

@@ -1,6 +1,8 @@
 declare const _default: {
+    clone: boolean;
     delete: boolean;
     export: boolean;
+    'migrate-send': boolean;
     pause: boolean;
     read: boolean;
     reboot: {

package/dist/actions/vm.mjs

@@ -1,6 +1,8 @@
 export default {
+    clone: true,
     delete: true,
     export: true,
+    'migrate-send': true,
     pause: true,
     read: true,
     reboot: {

package/dist/generated/privilege-types.d.mts

@@ -62,7 +62,7 @@ export type BackupLogPrivilege = {
 export type BackupRepositoryPrivilege = {
   id: XoAclBasePrivilege['id']
   resource: 'backup-repository'
-  action: '*' | 'read'
+  action: '*' | 'create' | 'read' | 'forget' | 'update' | '*' | 'update:enabled' | 'update:name' | 'update:options' | 'update:proxy' | 'update:url'
   selector?: XoAclBasePrivilege['selector']
   effect: XoAclBasePrivilege['effect']
   roleId: XoAclBasePrivilege['roleId']
@@ -89,7 +89,7 @@ export type GpuGroupPrivilege = {
 export type HostPrivilege = {
   id: XoAclBasePrivilege['id']
   resource: 'host'
-  action: '*' | 'allow-vm' | 'disable' | 'enable' | 'evacuate' | 'export' | '*' | 'export:logs' | 'read' | 'update' | '*' | 'update:tags'
+  action: '*' | 'allow-vm' | 'disable' | 'migrate-receive' | 'enable' | 'evacuate' | 'export' | '*' | 'export:logs' | 'join-pool' | 'read' | 'update' | '*' | 'update:tags'
   selector?: XoAclBasePrivilege['selector']
   effect: XoAclBasePrivilege['effect']
   roleId: XoAclBasePrivilege['roleId']
@@ -116,7 +116,7 @@ export type NetworkPrivilege = {
 export type PbdPrivilege = {
   id: XoAclBasePrivilege['id']
   resource: 'pbd'
-  action: '*' | 'read'
+  action: '*' | 'read' | 'plug' | 'unplug'
   selector?: XoAclBasePrivilege['selector']
   effect: XoAclBasePrivilege['effect']
   roleId: XoAclBasePrivilege['roleId']
@@ -152,7 +152,7 @@ export type PifPrivilege = {
 export type PoolPrivilege = {
   id: XoAclBasePrivilege['id']
   resource: 'pool'
-  action: '*' | 'create' | '*' | 'create:network' | 'create:vm' | 'emergency-shutdown' | 'read' | 'rolling-reboot' | 'rolling-update' | 'update' | '*' | 'update:tags'
+  action: '*' | 'add-host' | 'create' | '*' | 'create:network' | 'create:vm' | 'emergency-shutdown' | 'read' | 'rolling-reboot' | 'rolling-update' | 'update' | '*' | 'update:tags'
   selector?: XoAclBasePrivilege['selector']
   effect: XoAclBasePrivilege['effect']
   roleId: XoAclBasePrivilege['roleId']
@@ -206,7 +206,7 @@ export type SmPrivilege = {
 export type SrPrivilege = {
   id: XoAclBasePrivilege['id']
   resource: 'sr'
-  action: '*' | 'delete' | 'import' | '*' | 'import:vdi' | 'import:vm' | 'read' | 'update' | '*' | 'update:tags'
+  action: '*' | 'delete' | 'forget' | 'import' | '*' | 'import:vdi' | 'import:vm' | 'migrate-receive' | 'read' | 'reclaim-space' | 'scan' | 'update' | '*' | 'update:tags'
   selector?: XoAclBasePrivilege['selector']
   effect: XoAclBasePrivilege['effect']
   roleId: XoAclBasePrivilege['roleId']
@@ -233,7 +233,7 @@ export type UserPrivilege = {
 export type VbdPrivilege = {
   id: XoAclBasePrivilege['id']
   resource: 'vbd'
-  action: '*' | 'read'
+  action: '*' | 'connect' | 'create' | 'delete' | 'disconnect' | 'read'
   selector?: XoAclBasePrivilege['selector']
   effect: XoAclBasePrivilege['effect']
   roleId: XoAclBasePrivilege['roleId']
@@ -242,7 +242,7 @@ export type VbdPrivilege = {
 export type VdiSnapshotPrivilege = {
   id: XoAclBasePrivilege['id']
   resource: 'vdi-snapshot'
-  action: '*' | 'read'
+  action: '*' | 'delete' | 'export' | 'read' | 'update' | '*' | 'update:tags'
   selector?: XoAclBasePrivilege['selector']
   effect: XoAclBasePrivilege['effect']
   roleId: XoAclBasePrivilege['roleId']
@@ -260,7 +260,7 @@ export type VdiUnmanagedPrivilege = {
 export type VdiPrivilege = {
   id: XoAclBasePrivilege['id']
   resource: 'vdi'
-  action: '*' | 'boot' | 'create' | 'delete' | 'export-content' | 'import-content' | 'read' | 'update' | '*' | 'update:tags'
+  action: '*' | 'boot' | 'create' | 'delete' | 'export-content' | 'import-content' | 'migrate-send' | 'read' | 'update' | '*' | 'update:tags'
   selector?: XoAclBasePrivilege['selector']
   effect: XoAclBasePrivilege['effect']
   roleId: XoAclBasePrivilege['roleId']
@@ -287,7 +287,7 @@ export type VgpuTypePrivilege = {
 export type VifPrivilege = {
   id: XoAclBasePrivilege['id']
   resource: 'vif'
-  action: '*' | 'read' | 'create'
+  action: '*' | 'connect' | 'create' | 'delete' | 'disconnect' | 'read' | 'update' | '*' | 'update:allowedIpv4Addresses' | 'update:allowedIpv6Addresses' | 'update:lockingMode' | 'update:rateLimit' | 'update:txChecksumming'
   selector?: XoAclBasePrivilege['selector']
   effect: XoAclBasePrivilege['effect']
   roleId: XoAclBasePrivilege['roleId']
@@ -323,7 +323,7 @@ export type VmTemplatePrivilege = {
 export type VmPrivilege = {
   id: XoAclBasePrivilege['id']
   resource: 'vm'
-  action: '*' | 'delete' | 'export' | 'pause' | 'read' | 'reboot' | '*' | 'reboot:clean' | 'reboot:hard' | 'resume' | 'revert-snapshot' | 'shutdown' | '*' | 'shutdown:clean' | 'shutdown:hard' | 'snapshot' | 'start' | 'suspend' | 'unpause' | 'update' | '*' | 'update:affinityHost' | 'update:autoPoweron' | 'update:blockedOperations' | 'update:coresPerSocket' | 'update:cpuCap' | 'update:cpuMask' | 'update:cpuWeight' | 'update:cpus' | 'update:cpusStaticMax' | 'update:creation' | 'update:datasources' | 'update:expNestedHvm' | 'update:hasVendorDevice' | 'update:highAvailability' | 'update:hvmBootFirmware' | 'update:memory' | 'update:memoryMax' | 'update:memoryMin' | 'update:memoryStaticMax' | 'update:nameDescription' | 'update:nameLabel' | 'update:nestedVirt' | 'update:nicType' | 'update:notes' | 'update:PV_args' | 'update:resourceSet' | 'update:secureBoot' | 'update:share' | 'update:startDelay' | 'update:suspendSr' | 'update:tags' | 'update:uefiMode' | 'update:vga' | 'update:videoram' | 'update:viridian' | 'update:virtualizationMode' | 'update:xenStoreData'
+  action: '*' | 'clone' | 'delete' | 'export' | 'migrate-send' | 'pause' | 'read' | 'reboot' | '*' | 'reboot:clean' | 'reboot:hard' | 'resume' | 'revert-snapshot' | 'shutdown' | '*' | 'shutdown:clean' | 'shutdown:hard' | 'snapshot' | 'start' | 'suspend' | 'unpause' | 'update' | '*' | 'update:affinityHost' | 'update:autoPoweron' | 'update:blockedOperations' | 'update:coresPerSocket' | 'update:cpuCap' | 'update:cpuMask' | 'update:cpuWeight' | 'update:cpus' | 'update:cpusStaticMax' | 'update:creation' | 'update:datasources' | 'update:expNestedHvm' | 'update:hasVendorDevice' | 'update:highAvailability' | 'update:hvmBootFirmware' | 'update:memory' | 'update:memoryMax' | 'update:memoryMin' | 'update:memoryStaticMax' | 'update:nameDescription' | 'update:nameLabel' | 'update:nestedVirt' | 'update:nicType' | 'update:notes' | 'update:PV_args' | 'update:resourceSet' | 'update:secureBoot' | 'update:share' | 'update:startDelay' | 'update:suspendSr' | 'update:tags' | 'update:uefiMode' | 'update:vga' | 'update:videoram' | 'update:viridian' | 'update:virtualizationMode' | 'update:xenStoreData'
   selector?: XoAclBasePrivilege['selector']
   effect: XoAclBasePrivilege['effect']
   roleId: XoAclBasePrivilege['roleId']

package/dist/index.d.mts

@@ -23,7 +23,7 @@ export declare function hasPrivilegeOn<T extends SupportedResource>({ user, acti
 export declare function getMissingPrivileges(params: AnyPrivilegeOnParam[], userPrivileges: AnyPrivilege[]): {
     objectId: unknown;
     objectIds: unknown[] | undefined;
-    action: "create" | "delete" | "read" | "update" | "allow-vm" | "disable" | "enable" | "evacuate" | "export" | "emergency-shutdown" | "rolling-reboot" | "rolling-update" | "run" | "connect" | "disconnect" | "import" | "abort" | "boot" | "export-content" | "import-content" | "instantiate" | "pause" | "reboot" | "resume" | "revert-snapshot" | "shutdown" | "snapshot" | "start" | "suspend" | "unpause" | "*" | "update:action" | "update:resource" | "update:effect" | "update:selector" | "update:description" | "update:groups" | "update:name" | "update:users" | "update:tags" | "export:logs" | "update:management" | "create:network" | "create:vm" | "import:vdi" | "import:vm" | "update:password" | "update:permission" | "update:preferences" | "update:affinityHost" | "update:autoPoweron" | "update:blockedOperations" | "update:coresPerSocket" | "update:cpuCap" | "update:cpuMask" | "update:cpuWeight" | "update:cpus" | "update:cpusStaticMax" | "update:creation" | "update:datasources" | "update:expNestedHvm" | "update:hasVendorDevice" | "update:highAvailability" | "update:hvmBootFirmware" | "update:memory" | "update:memoryMax" | "update:memoryMin" | "update:memoryStaticMax" | "update:nameDescription" | "update:nameLabel" | "update:nestedVirt" | "update:nicType" | "update:notes" | "update:PV_args" | "update:resourceSet" | "update:secureBoot" | "update:share" | "update:startDelay" | "update:suspendSr" | "update:uefiMode" | "update:vga" | "update:videoram" | "update:viridian" | "update:virtualizationMode" | "update:xenStoreData" | "reboot:clean" | "reboot:hard" | "shutdown:clean" | "shutdown:hard";
+    action: "create" | "delete" | "read" | "update" | "forget" | "allow-vm" | "disable" | "migrate-receive" | "enable" | "evacuate" | "export" | "join-pool" | "plug" | "unplug" | "add-host" | "emergency-shutdown" | "rolling-reboot" | "rolling-update" | "run" | "connect" | "disconnect" | "import" | "reclaim-space" | "scan" | "abort" | "boot" | "export-content" | "import-content" | "migrate-send" | "instantiate" | "clone" | "pause" | "reboot" | "resume" | "revert-snapshot" | "shutdown" | "snapshot" | "start" | "suspend" | "unpause" | "*" | "update:action" | "update:resource" | "update:effect" | "update:selector" | "update:description" | "update:groups" | "update:name" | "update:users" | "update:proxy" | "update:enabled" | "update:options" | "update:url" | "update:tags" | "export:logs" | "update:management" | "create:network" | "create:vm" | "import:vdi" | "import:vm" | "update:password" | "update:permission" | "update:preferences" | "update:allowedIpv4Addresses" | "update:allowedIpv6Addresses" | "update:lockingMode" | "update:rateLimit" | "update:txChecksumming" | "update:affinityHost" | "update:autoPoweron" | "update:blockedOperations" | "update:coresPerSocket" | "update:cpuCap" | "update:cpuMask" | "update:cpuWeight" | "update:cpus" | "update:cpusStaticMax" | "update:creation" | "update:datasources" | "update:expNestedHvm" | "update:hasVendorDevice" | "update:highAvailability" | "update:hvmBootFirmware" | "update:memory" | "update:memoryMax" | "update:memoryMin" | "update:memoryStaticMax" | "update:nameDescription" | "update:nameLabel" | "update:nestedVirt" | "update:nicType" | "update:notes" | "update:PV_args" | "update:resourceSet" | "update:secureBoot" | "update:share" | "update:startDelay" | "update:suspendSr" | "update:uefiMode" | "update:vga" | "update:videoram" | "update:viridian" | "update:virtualizationMode" | "update:xenStoreData" | "reboot:clean" | "reboot:hard" | "shutdown:clean" | "shutdown:hard";
     resource: "acl-privilege" | "acl-role" | "alarm" | "backup-archive" | "backup-job" | "backup-log" | "backup-repository" | "group" | "gpuGroup" | "host" | "message" | "network" | "pbd" | "pci" | "pgpu" | "pif" | "pool" | "proxy" | "restore-log" | "schedule" | "server" | "sm" | "sr" | "task" | "user" | "vbd" | "vdi-snapshot" | "vdi-unmanaged" | "vdi" | "vgpu" | "vgpuType" | "vif" | "vm-controller" | "vm-snapshot" | "vm-template" | "vm" | "vtpm";
 }[];
 export declare function hasPrivileges(params: AnyPrivilegeOnParam[], userPrivileges: AnyPrivilege[]): boolean;

package/package.json

@@ -6,7 +6,7 @@
   "main": "dist/index.mjs",
   "name": "@xen-orchestra/acl",
   "homepage": "https://github.com/vatesfr/xen-orchestra/tree/master/@xen-orchestra/acl",
-  "version": "1.2.0",
+  "version": "1.3.0",
   "license": "AGPL-3.0-or-later",
   "private": false,
   "type": "module",
@@ -30,10 +30,10 @@
   },
   "devDependencies": {
     "@eslint/js": "^9.19.0",
-    "@vates/types": "^1.26.0",
+    "@vates/types": "^1.27.0",
     "rimraf": "^6.0.1",
     "typescript": "~5.6",
-    "typescript-eslint": "^8.23.0"
+    "typescript-eslint": "^8.61.0"
   },
   "bugs": "https://github.com/vatesfr/xen-orchestra/issues",
   "repository": {