screwdriver-api 8.0.175 → 8.0.176

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "screwdriver-api",
-  "version": "8.0.175",
+  "version": "8.0.176",
   "description": "API server for the Screwdriver.cd service",
   "main": "index.js",
   "scripts": {

package/plugins/pipelines/admins/get.js

@@ -18,13 +18,18 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', 'admin', 'pipeline', '!guest']
         },
+        plugins: {
+            authorization: {
+                permission: 'read'
+            }
+        },
 
         handler: async (request, h) => {
             const { pipelineFactory } = request.server.app;
-            const { scope } = request.auth.credentials;
+            const { scope, permission = 'all' } = request.auth.credentials;
             const { scmContext, includeUserToken } = request.query;
 
-            if (includeUserToken && !scope.includes('admin')) {
+            if (includeUserToken && (!scope.includes('admin') || permission !== 'all')) {
                 throw boom.forbidden('Only Screwdriver admin is allowed to request user token');
             }
 

package/plugins/pipelines/admins/list.js

@@ -85,6 +85,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', 'admin']
         },
+        plugins: {
+            authorization: {
+                permission: 'read'
+            }
+        },
 
         handler: async (request, h) => {
             const { pipelineFactory, userFactory } = request.server.app;

package/plugins/pipelines/batchUpdateAdmins.js

@@ -18,6 +18,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', '!guest', 'admin']
         },
+        plugins: {
+            authorization: {
+                permission: 'all'
+            }
+        },
         handler: async (request, h) => {
             const { scmContext, username, scope } = request.auth.credentials;
             const { payload } = request;

package/plugins/pipelines/caches/delete.js

@@ -21,6 +21,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', 'pipeline', '!guest']
         },
+        plugins: {
+            authorization: {
+                permission: 'write'
+            }
+        },
 
         handler: async (request, h) => {
             const { pipelineFactory, userFactory } = request.server.app;

package/plugins/pipelines/create.js

@@ -19,6 +19,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', '!guest']
         },
+        plugins: {
+            authorization: {
+                permission: 'all'
+            }
+        },
 
         handler: async (request, h) => {
             const checkoutUrl = formatCheckoutUrl(request.payload.checkoutUrl);

package/plugins/pipelines/lastSuccessfulEvent.js

@@ -17,6 +17,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', 'build', 'pipeline']
         },
+        plugins: {
+            authorization: {
+                permission: 'read'
+            }
+        },
 
         handler: async (request, h) => {
             const { eventFactory } = request.server.app;

package/plugins/pipelines/latestBuild.js

@@ -18,6 +18,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', 'build', 'pipeline']
         },
+        plugins: {
+            authorization: {
+                permission: 'read'
+            }
+        },
 
         handler: async (request, h) => {
             const { jobFactory } = request.server.app;

package/plugins/pipelines/latestCommitEvent.js

@@ -17,6 +17,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', 'build', 'pipeline']
         },
+        plugins: {
+            authorization: {
+                permission: 'read'
+            }
+        },
 
         handler: async (request, h) => {
             const { eventFactory } = request.server.app;

package/plugins/pipelines/list.js

@@ -20,6 +20,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', 'pipeline']
         },
+        plugins: {
+            authorization: {
+                permission: 'read'
+            }
+        },
 
         handler: async (request, h) => {
             const { pipelineFactory } = request.server.app;

package/plugins/pipelines/listBuilds.js

@@ -17,6 +17,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', 'build', 'pipeline']
         },
+        plugins: {
+            authorization: {
+                permission: 'read'
+            }
+        },
 
         handler: async (request, h) => {
             const factory = request.server.app.pipelineFactory;

package/plugins/pipelines/listEvents.js

@@ -31,6 +31,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', 'build', 'pipeline']
         },
+        plugins: {
+            authorization: {
+                permission: 'read'
+            }
+        },
 
         handler: async (request, h) => {
             const factory = request.server.app.pipelineFactory;

package/plugins/pipelines/listJobs.js

@@ -19,6 +19,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', 'build', 'pipeline']
         },
+        plugins: {
+            authorization: {
+                permission: 'read'
+            }
+        },
 
         handler: async (request, h) => {
             const { pipelineFactory } = request.server.app;

package/plugins/pipelines/listSecrets.js

@@ -17,6 +17,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', 'pipeline', '!guest']
         },
+        plugins: {
+            authorization: {
+                permission: 'read'
+            }
+        },
 
         handler: async (request, h) => {
             const { pipelineFactory } = request.server.app;

package/plugins/pipelines/listStages.js

@@ -19,6 +19,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', 'build', 'pipeline']
         },
+        plugins: {
+            authorization: {
+                permission: 'read'
+            }
+        },
 
         handler: async (request, h) => {
             const { pipelineFactory, stageFactory } = request.server.app;

package/plugins/pipelines/listTriggers.js

@@ -27,6 +27,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', 'build', 'pipeline']
         },
+        plugins: {
+            authorization: {
+                permission: 'read'
+            }
+        },
 
         handler: async (request, h) => {
             const { pipelineFactory, triggerFactory } = request.server.app;

package/plugins/pipelines/metrics.js

@@ -25,6 +25,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', '!guest', 'pipeline']
         },
+        plugins: {
+            authorization: {
+                permission: 'read'
+            }
+        },
 
         handler: async (request, h) => {
             const factory = request.server.app.pipelineFactory;

package/plugins/pipelines/openPr.js

@@ -19,6 +19,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', '!guest']
         },
+        plugins: {
+            authorization: {
+                permission: 'all'
+            }
+        },
 
         handler: async (request, h) => {
             const { userFactory } = request.server.app;

package/plugins/pipelines/remove.js

@@ -17,6 +17,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', '!guest']
         },
+        plugins: {
+            authorization: {
+                permission: 'all'
+            }
+        },
 
         handler: async (request, h) => {
             const { pipelineFactory, bannerFactory } = request.server.app;

package/plugins/pipelines/startAll.js

@@ -18,6 +18,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', '!guest']
         },
+        plugins: {
+            authorization: {
+                permission: 'execute'
+            }
+        },
 
         handler: async (request, h) => {
             const { pipelineFactory, userFactory } = request.server.app;

package/plugins/pipelines/sync.js

@@ -18,6 +18,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', '!guest', 'pipeline']
         },
+        plugins: {
+            authorization: {
+                permission: 'all'
+            }
+        },
 
         handler: async (request, h) => {
             const { id } = request.params;

package/plugins/pipelines/syncPRs.js

@@ -17,6 +17,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', '!guest']
         },
+        plugins: {
+            authorization: {
+                permission: 'all'
+            }
+        },
 
         handler: async (request, h) => {
             const { id } = request.params;

package/plugins/pipelines/syncWebhooks.js

@@ -17,6 +17,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', '!guest']
         },
+        plugins: {
+            authorization: {
+                permission: 'all'
+            }
+        },
 
         handler: async (request, h) => {
             const { id } = request.params;

package/plugins/pipelines/templates/create.js

@@ -16,6 +16,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['build']
         },
+        plugins: {
+            authorization: {
+                permission: 'all'
+            }
+        },
         handler: async (request, h) => {
             const { pipelineTemplateVersionFactory, pipelineTemplateFactory } = request.server.app;
 

package/plugins/pipelines/templates/createTag.js

@@ -17,6 +17,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['build']
         },
+        plugins: {
+            authorization: {
+                permission: 'all'
+            }
+        },
         handler: async (request, h) => {
             const {
                 pipelineFactory,

package/plugins/pipelines/templates/get.js

@@ -17,6 +17,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', 'build']
         },
+        plugins: {
+            authorization: {
+                permission: 'read'
+            }
+        },
         handler: async (request, h) => {
             const { namespace, name } = request.params;
             const { pipelineTemplateFactory } = request.server.app;

package/plugins/pipelines/templates/getTemplateById.js

@@ -17,6 +17,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', 'build']
         },
+        plugins: {
+            authorization: {
+                permission: 'read'
+            }
+        },
         handler: async (request, h) => {
             const { pipelineTemplateFactory } = request.server.app;
 

package/plugins/pipelines/templates/getVersion.js

@@ -18,6 +18,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', 'build']
         },
+        plugins: {
+            authorization: {
+                permission: 'read'
+            }
+        },
         handler: async (request, h) => {
             const { namespace, name, versionOrTag } = request.params;
             const { pipelineTemplateFactory, pipelineTemplateVersionFactory, pipelineTemplateTagFactory } =

package/plugins/pipelines/templates/list.js

@@ -23,6 +23,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', 'build']
         },
+        plugins: {
+            authorization: {
+                permission: 'read'
+            }
+        },
         handler: async (request, h) => {
             const { pipelineTemplateFactory } = request.server.app;
 

package/plugins/pipelines/templates/listTags.js

@@ -16,6 +16,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', 'build']
         },
+        plugins: {
+            authorization: {
+                permission: 'read'
+            }
+        },
 
         handler: async (request, h) => {
             const { pipelineTemplateTagFactory } = request.server.app;

package/plugins/pipelines/templates/listVersions.js

@@ -21,6 +21,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', 'build']
         },
+        plugins: {
+            authorization: {
+                permission: 'read'
+            }
+        },
         handler: async (request, h) => {
             const { pipelineTemplateFactory, pipelineTemplateVersionFactory } = request.server.app;
             const config = {

package/plugins/pipelines/templates/remove.js

@@ -16,6 +16,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['build', 'user', '!guest']
         },
+        plugins: {
+            authorization: {
+                permission: 'all'
+            }
+        },
 
         handler: async (request, h) => {
             const { namespace, name } = request.params;

package/plugins/pipelines/templates/removeTag.js

@@ -17,6 +17,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['build']
         },
+        plugins: {
+            authorization: {
+                permission: 'all'
+            }
+        },
         handler: async (request, h) => {
             const {
                 pipelineFactory,

package/plugins/pipelines/templates/removeVersion.js

@@ -17,6 +17,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['build', 'user', '!guest']
         },
+        plugins: {
+            authorization: {
+                permission: 'all'
+            }
+        },
 
         handler: async (request, h) => {
             const { namespace, name, version } = request.params;

package/plugins/pipelines/templates/updateTrusted.js

@@ -16,6 +16,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['admin', '!guest']
         },
+        plugins: {
+            authorization: {
+                permission: 'all'
+            }
+        },
 
         handler: async (request, h) => {
             const { namespace, name } = request.params;

package/plugins/pipelines/tokens/create.js

@@ -20,6 +20,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', '!guest']
         },
+        plugins: {
+            authorization: {
+                permission: 'all'
+            }
+        },
 
         handler: async (request, h) => {
             const { pipelineFactory, tokenFactory, userFactory } = request.server.app;

package/plugins/pipelines/tokens/list.js

@@ -18,6 +18,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', '!guest']
         },
+        plugins: {
+            authorization: {
+                permission: 'read'
+            }
+        },
 
         handler: async (request, h) => {
             const { pipelineFactory, userFactory } = request.server.app;

package/plugins/pipelines/tokens/refresh.js

@@ -19,6 +19,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', '!guest']
         },
+        plugins: {
+            authorization: {
+                permission: 'all'
+            }
+        },
 
         handler: async (request, h) => {
             const { pipelineFactory, userFactory, tokenFactory } = request.server.app;

package/plugins/pipelines/tokens/remove.js

@@ -19,6 +19,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', '!guest']
         },
+        plugins: {
+            authorization: {
+                permission: 'all'
+            }
+        },
 
         handler: async (request, h) => {
             const { tokenFactory, pipelineFactory, userFactory } = request.server.app;

package/plugins/pipelines/tokens/removeAll.js

@@ -17,6 +17,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', '!guest']
         },
+        plugins: {
+            authorization: {
+                permission: 'all'
+            }
+        },
 
         handler: async (request, h) => {
             const { pipelineFactory, userFactory } = request.server.app;

package/plugins/pipelines/tokens/update.js

@@ -18,6 +18,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', '!guest']
         },
+        plugins: {
+            authorization: {
+                permission: 'all'
+            }
+        },
 
         handler: async (request, h) => {
             const { tokenFactory, userFactory, pipelineFactory } = request.server.app;

package/plugins/pipelines/update.js

@@ -74,6 +74,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', '!guest', 'pipeline']
         },
+        plugins: {
+            authorization: {
+                permission: 'all'
+            }
+        },
 
         handler: async (request, h) => {
             const { checkoutUrl, rootDir, settings, badges, state, stateChangeMessage } = request.payload;

package/plugins/pipelines/updateAdmins.js

@@ -17,6 +17,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', '!guest', 'admin']
         },
+        plugins: {
+            authorization: {
+                permission: 'all'
+            }
+        },
         handler: async (request, h) => {
             const { id } = request.params;
             const { scmContext, username, scope } = request.auth.credentials;

package/plugins/pipelines/updateBuildCluster.js

@@ -17,6 +17,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', '!guest']
         },
+        plugins: {
+            authorization: {
+                permission: 'all'
+            }
+        },
         handler: async (request, h) => {
             const buildClusterAnnotation = 'screwdriver.cd/buildCluster';
             const { payload } = request;