@xen-orchestra/rest-api 0.29.0 → 0.30.1

package/dist/pools/pool.controller.mjs

@@ -13,8 +13,9 @@ import { invalidParameters } from 'xo-common/api-errors.js';
 import { PassThrough } from 'node:stream';
 import { provide } from 'inversify-binding-decorators';
 import { json } from 'express';
+import { acl } from '../middlewares/acl.middleware.mjs';
 import { RestApi } from '../rest-api/rest-api.mjs';
-import { asynchronousActionResp, badRequestResp, createdResp, featureUnauthorized, internalServerErrorResp, invalidParameters as invalidParametersResp, noContentResp, notFoundResp, unauthorizedResp, } from '../open-api/common/response.common.mjs';
+import { asynchronousActionResp, badRequestResp, createdResp, featureUnauthorized, forbiddenOperationResp, internalServerErrorResp, invalidParameters as invalidParametersResp, noContentResp, notFoundResp, unauthorizedResp, } from '../open-api/common/response.common.mjs';
 import { XapiXoController } from '../abstract-classes/xapi-xo-controller.mjs';
 import { AlarmService } from '../alarms/alarm.service.mjs';
 import { genericAlarmsExample } from '../open-api/oa-examples/alarm.oa-example.mjs';
@@ -40,21 +41,33 @@ let PoolController = class PoolController extends XapiXoController {
         this.#networkService = networkService;
     }
     /**
+     * Returns all pools that match the following privilege:
+     * - resource: pool, action: read
      *
      * @example fields "auto_poweron,name_label,id"
      * @example filter "auto_poweron?"
      * @example limit 42
      */
     getPools(req, fields, ndjson, markdown, filter, limit) {
-        return this.sendObjects(Object.values(this.getObjects({ filter, limit })), req);
+        return this.sendObjects(Object.values(this.getObjects({ filter })), req, {
+            limit,
+            privilege: { action: 'read', resource: 'pool' },
+        });
     }
     /**
+     * Required privilege:
+     * - resource: pool, action: read
+     *
      * @example id "355ee47d-ff4c-4924-3db2-fd86ae629676"
      */
     getPool(id) {
         return this.getObject(id);
     }
     /**
+     * Required privilege:
+     * - resource: pool, action: create:network
+     * - resource: network, action: create
+     *
      * @example id "355ee47d-ff4c-4924-3db2-fd86ae629676"
      * @example body {
      *    "name": "awes0me_network",
@@ -130,6 +143,9 @@ let PoolController = class PoolController extends XapiXoController {
         });
     }
     /**
+     * Required privilege:
+     * - resource: pool, action: emergency-shutdown
+     *
      * @example id "355ee47d-ff4c-4924-3db2-fd86ae629677"
      */
     emergencyShutdown(id, sync) {
@@ -148,6 +164,9 @@ let PoolController = class PoolController extends XapiXoController {
         });
     }
     /**
+     * Required privilege:
+     * - resource: pool, action: rolling-reboot
+     *
      * @example id "355ee47d-ff4c-4924-3db2-fd86ae629677"
      */
     rollingReboot(id, sync) {
@@ -167,6 +186,9 @@ let PoolController = class PoolController extends XapiXoController {
         });
     }
     /**
+     * Required privilege:
+     * - resource: pool, action: rolling-update
+     *
      * @example id "355ee47d-ff4c-4924-3db2-fd86ae629677"
      */
     rollingUpdate(id, sync) {
@@ -189,6 +211,9 @@ let PoolController = class PoolController extends XapiXoController {
     /**
      *  Import an XVA VM into a pool
      *
+     * Required privilege:
+     * - resource: sr, action: import:vm
+     *
      * @example id "355ee47d-ff4c-4924-3db2-fd86ae629677"
      * @example sr "c787b75c-3e0d-70fa-d0c3-cbfd382d7e33"
      *
@@ -206,6 +231,14 @@ let PoolController = class PoolController extends XapiXoController {
         return { id: vmId };
     }
     /**
+     * Required privilege:
+     * - resource: pool, action: create:vm
+     * - resource: vm-template, action: instantiate
+     * - resource: vdi, action: create (if vdis is passed)
+     * - resource: vdi, action: boot (if install.repository is passed)
+     * - resource: vif, action: create (if vifs is passed)
+     * - resource: host, action: allow-vm (if affinity is passed)
+     *
      * @example id "355ee47d-ff4c-4924-3db2-fd86ae629677"
      * @example body {
      * "name_label": "new VM from REST API",
@@ -241,12 +274,18 @@ let PoolController = class PoolController extends XapiXoController {
         });
     }
     /**
+     * Required privilege:
+     * - resource: pool, action: read
+     *
      * @example id "355ee47d-ff4c-4924-3db2-fd86ae629677"
      */
     getStats(id, granularity) {
         return this.restApi.xoApp.getXapiPoolStats(id, granularity);
     }
     /**
+     * Required privilege:
+     * - resource: pool, action: read
+     *
      * @example id "355ee47d-ff4c-4924-3db2-fd86ae629677"
      */
     async getPoolDashboard(req, id, ndjson) {
@@ -269,6 +308,9 @@ let PoolController = class PoolController extends XapiXoController {
         }
     }
     /**
+     * Returns all alarms that match the following privilege:
+     * - resource: alarm, action: read
+     *
      * @example id "355ee47d-ff4c-4924-3db2-fd86ae629676"
      * @example fields "id,time"
      * @example filter "time:>1747053793"
@@ -278,11 +320,17 @@ let PoolController = class PoolController extends XapiXoController {
         const pool = this.getObject(id);
         const alarms = this.#alarmService.getAlarms({
             filter: `${escapeUnsafeComplexMatcher(filter) ?? ''} object:uuid:${pool.uuid}`,
+        });
+        return this.sendObjects(Object.values(alarms), req, {
+            path: 'alarms',
             limit,
+            privilege: { action: 'read', resource: 'alarm' },
         });
-        return this.sendObjects(Object.values(alarms), req, 'alarms');
     }
     /**
+     * Required privilege:
+     * - resource: pool, action: read
+     *
      * @example id "355ee47d-ff4c-4924-3db2-fd86ae629676"
      */
     async getPoolMissingPatches(id) {
@@ -291,16 +339,26 @@ let PoolController = class PoolController extends XapiXoController {
         return missingPatches;
     }
     /**
+     * Returns all messages that match the following privilege:
+     * - resource: message, action: read
+     *
      * @example id "355ee47d-ff4c-4924-3db2-fd86ae629676"
      * @example fields "name,id,$object"
      * @example filter "name:IP_CONFIGURED_PIF_CAN_UNPLUG"
      * @example limit 42
      */
     getPoolMessages(req, id, fields, ndjson, markdown, filter, limit) {
-        const messages = this.getMessagesForObject(id, { filter, limit });
-        return this.sendObjects(Object.values(messages), req, 'messages');
+        const messages = this.getMessagesForObject(id, { filter });
+        return this.sendObjects(Object.values(messages), req, {
+            path: 'messages',
+            limit,
+            privilege: { action: 'read', resource: 'message' },
+        });
     }
     /**
+     * Required privilege:
+     * - resource: pool, action: update:tags
+     *
      * @example id "355ee47d-ff4c-4924-3db2-fd86ae629676"
      * @example tag "from-rest-api"
      */
@@ -309,6 +367,9 @@ let PoolController = class PoolController extends XapiXoController {
         await pool.$call('add_tags', tag);
     }
     /**
+     * Required privilege:
+     * - resource: pool, action: update:tags
+     *
      * @example id "355ee47d-ff4c-4924-3db2-fd86ae629676"
      * @example tag "from-rest-api"
      */
@@ -317,13 +378,20 @@ let PoolController = class PoolController extends XapiXoController {
         await pool.$call('remove_tags', tag);
     }
     /**
+     * Returns all tasks that match the following privilege:
+     * - resource: task, action: read
+     *
      * @example fields "id,status,properties"
      * @example filter "status:failure"
      * @example limit 42
      */
     async getPoolTasks(req, id, fields, ndjson, markdown, filter, limit) {
-        const tasks = await this.getTasksForObject(id, { filter, limit });
-        return this.sendObjects(Object.values(tasks), req, 'tasks');
+        const tasks = await this.getTasksForObject(id, { filter });
+        return this.sendObjects(Object.values(tasks), req, {
+            path: 'tasks',
+            limit,
+            privilege: { action: 'read', resource: 'task' },
+        });
     }
     /**
      * Reconfigure the management interface for all hosts in the pool to use the given network.
@@ -360,6 +428,7 @@ __decorate([
     Example(poolIds),
     Example(partialPools),
     Get(''),
+    Security('*', ['acl']),
     __param(0, Request()),
     __param(1, Query()),
     __param(2, Query()),
@@ -370,6 +439,8 @@ __decorate([
 __decorate([
     Example(pool),
     Get('{id}'),
+    Middlewares(acl({ resource: 'pool', action: 'read', objectId: 'params.id' })),
+    Response(forbiddenOperationResp.status, forbiddenOperationResp.description),
     Response(notFoundResp.status, notFoundResp.description),
     __param(0, Path())
 ], PoolController.prototype, "getPool", null);
@@ -377,9 +448,17 @@ __decorate([
     Example(taskLocation),
     Example(createNetwork),
     Post('{id}/actions/create_network'),
-    Middlewares(json()),
+    Middlewares([
+        json(),
+        acl([
+            // these two rights are a bit redundant, but for now this is the only way to restrict network creation on a given pool
+            { resource: 'pool', action: 'create:network', objectId: 'params.id' },
+            { resource: 'network', action: 'create', object: ({ req }) => req.body },
+        ]),
+    ]),
     Tags('networks'),
     SuccessResponse(createdResp.status, createdResp.description),
+    Response(forbiddenOperationResp.status, forbiddenOperationResp.description),
     Response(asynchronousActionResp.status, asynchronousActionResp.description),
     Response(notFoundResp.status, notFoundResp.description),
     Response(invalidParametersResp.status, invalidParametersResp.description),
@@ -421,7 +500,9 @@ __decorate([
 __decorate([
     Example(taskLocation),
     Post('{id}/actions/emergency_shutdown'),
+    Middlewares(acl({ resource: 'pool', action: 'emergency-shutdown', objectId: 'params.id' })),
     SuccessResponse(asynchronousActionResp.status, asynchronousActionResp.description),
+    Response(forbiddenOperationResp.status, forbiddenOperationResp.description),
     Response(noContentResp.status, noContentResp.description),
     Response(featureUnauthorized.status, featureUnauthorized.description),
     Response(notFoundResp.status, notFoundResp.description),
@@ -431,7 +512,9 @@ __decorate([
 __decorate([
     Example(taskLocation),
     Post('{id}/actions/rolling_reboot'),
+    Middlewares(acl({ resource: 'pool', action: 'rolling-reboot', objectId: 'params.id' })),
     SuccessResponse(asynchronousActionResp.status, asynchronousActionResp.description),
+    Response(forbiddenOperationResp.status, forbiddenOperationResp.description),
     Response(noContentResp.status, noContentResp.description),
     Response(featureUnauthorized.status, featureUnauthorized.description),
     Response(notFoundResp.status, notFoundResp.description),
@@ -441,7 +524,9 @@ __decorate([
 __decorate([
     Example(taskLocation),
     Post('{id}/actions/rolling_update'),
+    Middlewares(acl({ resource: 'pool', action: 'rolling-update', objectId: 'params.id' })),
     SuccessResponse(asynchronousActionResp.status, asynchronousActionResp.description),
+    Response(forbiddenOperationResp.status, forbiddenOperationResp.description),
     Response(noContentResp.status, noContentResp.description),
     Response(featureUnauthorized.status, featureUnauthorized.description),
     Response(notFoundResp.status, notFoundResp.description),
@@ -451,8 +536,24 @@ __decorate([
 __decorate([
     Example(importVm),
     Post('{id}/vms'),
+    Middlewares(acl([
+        {
+            resource: 'sr',
+            action: 'import:vm',
+            objectId: ({ req, restApi }) => {
+                if (req.query.sr) {
+                    return req.query.sr;
+                }
+                else {
+                    const pool = restApi.getObject(req.params.id, 'pool');
+                    return pool.default_SR;
+                }
+            },
+        },
+    ])),
     Tags('vms'),
     SuccessResponse(createdResp.status, 'VM imported'),
+    Response(forbiddenOperationResp.status, forbiddenOperationResp.description),
     Response(notFoundResp.status, notFoundResp.description),
     Response(internalServerErrorResp.status, internalServerErrorResp.description),
     __param(0, Request()),
@@ -463,9 +564,40 @@ __decorate([
     Example(taskLocation),
     Example(createVm),
     Post('{id}/actions/create_vm'),
-    Middlewares(json()),
+    Middlewares([
+        json(),
+        acl([
+            { resource: 'pool', action: 'create:vm', objectId: 'params.id' },
+            {
+                resource: 'vm-template',
+                action: 'instantiate',
+                objectId: ({ req, restApi }) => {
+                    const pool = restApi.getXapiObject(req.params.id, 'pool');
+                    const template = pool.$xapi.getObject(req.body.template);
+                    if (template.is_default_template) {
+                        return `${pool.uuid}-${template.uuid}`;
+                    }
+                    return req.body.template;
+                },
+            },
+            {
+                resource: 'vdi',
+                action: 'boot',
+                objectId: ({ req }) => {
+                    const repository = req.body.install?.repository;
+                    if (repository !== '') {
+                        return repository;
+                    }
+                },
+            },
+            { resource: 'vdi', action: 'create', objects: ({ req }) => req.body.vdis },
+            { resource: 'vif', action: 'create', objects: ({ req }) => req.body.vifs },
+            { resource: 'host', action: 'allow-vm', objectId: 'body.affinity' },
+        ]),
+    ]),
     Tags('vms'),
     SuccessResponse(createdResp.status, createdResp.description),
+    Response(forbiddenOperationResp.status, forbiddenOperationResp.description),
     Response(asynchronousActionResp.status, asynchronousActionResp.description),
     Response(notFoundResp.status, notFoundResp.description),
     Response(internalServerErrorResp.status, internalServerErrorResp.description),
@@ -476,6 +608,8 @@ __decorate([
 __decorate([
     Example(poolStats),
     Get('{id}/stats'),
+    Middlewares(acl({ resource: 'pool', action: 'read', objectId: 'params.id' })),
+    Response(forbiddenOperationResp.status, forbiddenOperationResp.description),
     Response(notFoundResp.status, notFoundResp.description),
     Response(422, 'Invalid granularity'),
     __param(0, Path()),
@@ -484,6 +618,8 @@ __decorate([
 __decorate([
     Example(poolDashboard),
     Get('{id}/dashboard'),
+    Middlewares(acl({ resource: 'pool', action: 'read', objectId: 'params.id' })),
+    Response(forbiddenOperationResp.status, forbiddenOperationResp.description),
     Response(notFoundResp.status, notFoundResp.description),
     __param(0, Request()),
     __param(1, Path()),
@@ -492,6 +628,7 @@ __decorate([
 __decorate([
     Example(genericAlarmsExample),
     Get('{id}/alarms'),
+    Security('*', ['acl']),
     Tags('alarms'),
     Response(notFoundResp.status, notFoundResp.description),
     __param(0, Request()),
@@ -505,6 +642,8 @@ __decorate([
 __decorate([
     Example(poolMissingPatches),
     Get('{id}/missing_patches'),
+    Middlewares(acl({ resource: 'pool', action: 'read', objectId: 'params.id' })),
+    Response(forbiddenOperationResp.status, forbiddenOperationResp.description),
     Response(notFoundResp.status, notFoundResp.description),
     Response(featureUnauthorized.status, featureUnauthorized.description),
     __param(0, Path())
@@ -513,6 +652,7 @@ __decorate([
     Example(messageIds),
     Example(partialMessages),
     Get('{id}/messages'),
+    Security('*', ['acl']),
     Tags('messages'),
     Response(notFoundResp.status, notFoundResp.description),
     __param(0, Request()),
@@ -525,14 +665,18 @@ __decorate([
 ], PoolController.prototype, "getPoolMessages", null);
 __decorate([
     Put('{id}/tags/{tag}'),
+    Middlewares(acl({ resource: 'pool', action: 'update:tags', objectId: 'params.id' })),
     SuccessResponse(noContentResp.status, noContentResp.description),
+    Response(forbiddenOperationResp.status, forbiddenOperationResp.description),
     Response(notFoundResp.status, notFoundResp.description),
     __param(0, Path()),
     __param(1, Path())
 ], PoolController.prototype, "putPoolTag", null);
 __decorate([
     Delete('{id}/tags/{tag}'),
+    Middlewares(acl({ resource: 'pool', action: 'update:tags', objectId: 'params.id' })),
     SuccessResponse(noContentResp.status, noContentResp.description),
+    Response(forbiddenOperationResp.status, forbiddenOperationResp.description),
     Response(notFoundResp.status, notFoundResp.description),
     __param(0, Path()),
     __param(1, Path())
@@ -541,6 +685,7 @@ __decorate([
     Example(taskIds),
     Example(partialTasks),
     Get('{id}/tasks'),
+    Security('*', ['acl']),
     Tags('tasks'),
     Response(notFoundResp.status, notFoundResp.description),
     __param(0, Request()),

package/dist/proxies/proxy.controller.mjs

@@ -7,10 +7,11 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-import { Example, Get, Path, Query, Request, Response, Route, Security, Tags } from 'tsoa';
+import { Example, Get, Middlewares, Path, Query, Request, Response, Route, Security, Tags } from 'tsoa';
 import { inject } from 'inversify';
 import { provide } from 'inversify-binding-decorators';
-import { badRequestResp, notFoundResp, unauthorizedResp } from '../open-api/common/response.common.mjs';
+import { acl } from '../middlewares/acl.middleware.mjs';
+import { badRequestResp, forbiddenOperationResp, notFoundResp, unauthorizedResp, } from '../open-api/common/response.common.mjs';
 import { partialProxies, proxy, proxyIds } from '../open-api/oa-examples/proxy.oa-example.mjs';
 import { XoController } from '../abstract-classes/xo-controller.mjs';
 import { RestApi } from '../rest-api/rest-api.mjs';
@@ -25,15 +26,24 @@ let ProxyController = class ProxyController extends XoController {
         return this.restApi.xoApp.getProxy(id);
     }
     /**
+     * Returns all proxies that match the following privilege:
+     * - resource: proxy, action: read
+     *
      * @example fields "vmUuid,id,name"
      * @example filter "vmUuid?"
      * @example limit 42
      */
     async getProxies(req, fields, ndjson, markdown, filter, limit) {
-        const proxies = Object.values(await this.getObjects({ filter, limit }));
-        return this.sendObjects(proxies, req);
+        const proxies = Object.values(await this.getObjects({ filter }));
+        return this.sendObjects(proxies, req, {
+            limit,
+            privilege: { action: 'read', resource: 'proxy' },
+        });
     }
     /**
+     * Required privilege:
+     * - resource: proxy, action: read
+     *
      * @example id "e625ea0c-a876-405a-b838-109d762efe88"
      */
     getProxy(id) {
@@ -44,6 +54,7 @@ __decorate([
     Example(proxyIds),
     Example(partialProxies),
     Get(''),
+    Security('*', ['acl']),
     __param(0, Request()),
     __param(1, Query()),
     __param(2, Query()),
@@ -54,6 +65,13 @@ __decorate([
 __decorate([
     Example(proxy),
     Get('{id}'),
+    Middlewares(acl({
+        resource: 'proxy',
+        action: 'read',
+        objectId: 'params.id',
+        getObject: ({ restApi }) => restApi.xoApp.getProxy,
+    })),
+    Response(forbiddenOperationResp.status, forbiddenOperationResp.description),
     Response(notFoundResp.status, notFoundResp.description),
     __param(0, Path())
 ], ProxyController.prototype, "getProxy", null);

package/dist/restore-logs/restore-log.controller.mjs

@@ -10,11 +10,11 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
 import { createLogger } from '@xen-orchestra/log';
 import { Deprecated, Example, Get, Middlewares, Path, Query, Request, Response, Route, Security, Tags } from 'tsoa';
 import { inject } from 'inversify';
-import { noSuchObject } from 'xo-common/api-errors.js';
 import { provide } from 'inversify-binding-decorators';
+import { acl, autoBindService } from '../middlewares/acl.middleware.mjs';
 import { BackupLogService } from '../backup-logs/backup-log.service.mjs';
 import { RestApi } from '../rest-api/rest-api.mjs';
-import { badRequestResp, unauthorizedResp } from '../open-api/common/response.common.mjs';
+import { badRequestResp, forbiddenOperationResp, notFoundResp, unauthorizedResp, } from '../open-api/common/response.common.mjs';
 import { XoController } from '../abstract-classes/xo-controller.mjs';
 import { partialRestoreLogs, restoreLog, restoreLogIds } from '../open-api/oa-examples/restore-log.oa-example.mjs';
 const log = createLogger('xo:rest-api:restoreLog-controller');
@@ -28,24 +28,29 @@ let RestoreLogController = class RestoreLogController extends XoController {
         const filter = log => !this.#backupLogService.isBackupLog(log);
         return this.restApi.xoApp.getBackupNgLogsSorted({ filter });
     }
-    async getCollectionObject(id) {
-        const log = await this.restApi.xoApp.getBackupNgLogs(id);
-        if (this.#backupLogService.isBackupLog(log)) {
-            throw noSuchObject('restore-log');
-        }
-        return log;
+    getCollectionObject(id) {
+        return this.#backupLogService.getRestoreLog(id);
     }
     /**
+     * Returns all restore logs that match the following privilege:
+     * - resource: restore-log, action: read
+     *
      * @example fields "jobName,status,data"
      * @example filter "status:success"
      * @example limit 42
      */
     async getRestoreLogs(req, fields, ndjson, markdown, filter, limit) {
-        const restoreLogs = await this.getObjects({ filter, limit });
-        return this.sendObjects(Object.values(restoreLogs), req);
+        const restoreLogs = await this.getObjects({ filter });
+        return this.sendObjects(Object.values(restoreLogs), req, {
+            limit,
+            privilege: { action: 'read', resource: 'restore-log' },
+        });
     }
     /**
-     * @example id "fo"
+     * Required privilege:
+     * - resource: restore-log, action: read
+     *
+     * @example id "1758180544428"
      */
     getRestoreLog(id) {
         return this.getObject(id);
@@ -55,6 +60,7 @@ __decorate([
     Example(restoreLogIds),
     Example(partialRestoreLogs),
     Get(''),
+    Security('*', ['acl']),
     __param(0, Request()),
     __param(1, Query()),
     __param(2, Query()),
@@ -65,6 +71,14 @@ __decorate([
 __decorate([
     Example(restoreLog),
     Get('{id}'),
+    Middlewares(acl({
+        resource: 'restore-log',
+        action: 'read',
+        objectId: 'params.id',
+        getObject: autoBindService(BackupLogService, 'getRestoreLog'),
+    })),
+    Response(forbiddenOperationResp.status, forbiddenOperationResp.description),
+    Response(notFoundResp.status, notFoundResp.description),
     __param(0, Path())
 ], RestoreLogController.prototype, "getRestoreLog", null);
 RestoreLogController = __decorate([
@@ -89,21 +103,24 @@ let DeprecatedRestoreController = class DeprecatedRestoreController extends XoCo
         const filter = log => !this.#backupLogService.isBackupLog(log);
         return this.restApi.xoApp.getBackupNgLogsSorted({ filter });
     }
-    async getCollectionObject(id) {
-        const log = await this.restApi.xoApp.getBackupNgLogs(id);
-        if (this.#backupLogService.isBackupLog(log)) {
-            throw noSuchObject('restore-log');
-        }
-        return log;
+    getCollectionObject(id) {
+        return this.#backupLogService.getRestoreLog(id);
     }
     /**
+     * Returns all restore logs that match the following privilege:
+     * - resource: restore-log, action: read
+     *
      * @example fields "jobName,status,data"
      * @example filter "status:success"
      * @example limit 42
      */
     async getDeprecatedRestoreLogs(req, fields, ndjson, markdown, filter, limit) {
-        const restoreLogs = await this.getObjects({ filter, limit });
-        return this.sendObjects(Object.values(restoreLogs), req, 'restore-logs');
+        const restoreLogs = await this.getObjects({ filter });
+        return this.sendObjects(Object.values(restoreLogs), req, {
+            path: 'restore-logs',
+            limit,
+            privilege: { action: 'read', resource: 'restore-log' },
+        });
     }
     /**
      * @example id "1758180544428"

package/dist/schedules/schedule.controller.mjs

@@ -7,10 +7,11 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-import { Example, Get, Path, Post, Query, Request, Response, Route, Security, SuccessResponse, Tags } from 'tsoa';
+import { Example, Get, Middlewares, Path, Post, Query, Request, Response, Route, Security, SuccessResponse, Tags, } from 'tsoa';
 import { inject } from 'inversify';
 import { provide } from 'inversify-binding-decorators';
-import { asynchronousActionResp, badRequestResp, featureUnauthorized, internalServerErrorResp, noContentResp, notFoundResp, unauthorizedResp, } from '../open-api/common/response.common.mjs';
+import { acl } from '../middlewares/acl.middleware.mjs';
+import { asynchronousActionResp, badRequestResp, featureUnauthorized, forbiddenOperationResp, internalServerErrorResp, noContentResp, notFoundResp, unauthorizedResp, } from '../open-api/common/response.common.mjs';
 import { partialSchedules, schedule, scheduleIds } from '../open-api/oa-examples/schedule.oa-example.mjs';
 import { taskLocation } from '../open-api/oa-examples/task.oa-example.mjs';
 import { XoController } from '../abstract-classes/xo-controller.mjs';
@@ -27,20 +28,34 @@ let ScheduleController = class ScheduleController extends XoController {
         return this.restApi.xoApp.getSchedule(id);
     }
     /**
+     * Returns all schedules that match the following privilege:
+     * - resource: schedule, action: read
+     *
      * @example fields "enabled,jobId,cron,id"
      * @example filter "enabled?"
      * @example limit 42
      */
     async getSchedules(req, fields, ndjson, markdown, filter, limit) {
-        return this.sendObjects(Object.values(await this.getObjects({ filter, limit })), req);
+        return this.sendObjects(Object.values(await this.getObjects({ filter })), req, {
+            limit,
+            privilege: { action: 'read', resource: 'schedule' },
+        });
     }
     /**
+     *
+     * Required privilege:
+     * - resource: schedule, action: read
+     *
      * @example id "cf7249f8-d20b-494f-97f4-b1f32f94e780"
      */
     async getSchedule(id) {
         return this.getObject(id);
     }
     /**
+     *
+     * Required privilege:
+     * - resource: schedule, action: run
+     *
      * @example id "cf7249f8-d20b-494f-97f4-b1f32f94e780"
      */
     async runSchedule(id, sync) {
@@ -62,6 +77,7 @@ __decorate([
     Example(scheduleIds),
     Example(partialSchedules),
     Get(''),
+    Security('*', ['acl']),
     __param(0, Request()),
     __param(1, Query()),
     __param(2, Query()),
@@ -72,15 +88,29 @@ __decorate([
 __decorate([
     Example(schedule),
     Get('{id}'),
+    Middlewares(acl({
+        resource: 'schedule',
+        action: 'read',
+        objectId: 'params.id',
+        getObject: ({ restApi }) => id => restApi.xoApp.getSchedule(id),
+    })),
+    Response(forbiddenOperationResp.status, forbiddenOperationResp.description),
     Response(notFoundResp.status, notFoundResp.description),
     __param(0, Path())
 ], ScheduleController.prototype, "getSchedule", null);
 __decorate([
     Example(taskLocation),
     Post('{id}/actions/run'),
+    Middlewares(acl({
+        resource: 'schedule',
+        action: 'run',
+        objectId: 'params.id',
+        getObject: ({ restApi }) => id => restApi.xoApp.getSchedule(id),
+    })),
     SuccessResponse(asynchronousActionResp.status, asynchronousActionResp.description),
     Response(noContentResp.status, noContentResp.description),
     Response(featureUnauthorized.status, featureUnauthorized.description),
+    Response(forbiddenOperationResp.status, forbiddenOperationResp.description),
     Response(notFoundResp.status, notFoundResp.description),
     Response(internalServerErrorResp.status, internalServerErrorResp.description),
     __param(0, Path()),