screwdriver-api 8.0.176 → 8.0.177

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "screwdriver-api",
-  "version": "8.0.176",
+  "version": "8.0.177",
   "description": "API server for the Screwdriver.cd service",
   "main": "index.js",
   "scripts": {

package/plugins/banners/create.js

@@ -15,6 +15,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', '!guest']
         },
+        plugins: {
+            authorization: {
+                permission: 'all'
+            }
+        },
 
         handler: async (request, h) => {
             const { bannerFactory } = request.server.app;

package/plugins/banners/remove.js

@@ -16,6 +16,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', '!guest']
         },
+        plugins: {
+            authorization: {
+                permission: 'all'
+            }
+        },
 
         handler: async (request, h) => {
             const { bannerFactory } = request.server.app;

package/plugins/banners/update.js

@@ -16,6 +16,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', '!guest']
         },
+        plugins: {
+            authorization: {
+                permission: 'all'
+            }
+        },
 
         handler: async (request, h) => {
             const { bannerFactory } = request.server.app;

package/plugins/collections/addPipelines.js

@@ -19,6 +19,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', '!guest']
         },
+        plugins: {
+            authorization: {
+                permission: 'all'
+            }
+        },
 
         handler: async (request, h) => {
             const { collectionFactory, pipelineFactory, userFactory } = request.server.app;

package/plugins/collections/create.js

@@ -15,6 +15,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', '!guest']
         },
+        plugins: {
+            authorization: {
+                permission: 'all'
+            }
+        },
 
         handler: async (request, h) => {
             // Check if the collection to be created has a type 'default'

package/plugins/collections/get.js

@@ -17,6 +17,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', '!guest']
         },
+        plugins: {
+            authorization: {
+                permission: 'read'
+            }
+        },
 
         handler: async (request, h) => {
             const { collectionFactory, pipelineFactory, userFactory } = request.server.app;

package/plugins/collections/list.js

@@ -15,6 +15,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', '!guest']
         },
+        plugins: {
+            authorization: {
+                permission: 'read'
+            }
+        },
 
         handler: async (request, h) => {
             const { userFactory, collectionFactory } = request.server.app;

package/plugins/collections/remove.js

@@ -16,6 +16,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', '!guest']
         },
+        plugins: {
+            authorization: {
+                permission: 'all'
+            }
+        },
 
         handler: async (request, h) => {
             const { collectionFactory, userFactory } = request.server.app;

package/plugins/collections/removePipelines.js

@@ -19,6 +19,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', '!guest']
         },
+        plugins: {
+            authorization: {
+                permission: 'all'
+            }
+        },
 
         handler: async (request, h) => {
             const { collectionFactory, userFactory } = request.server.app;

package/plugins/collections/update.js

@@ -16,6 +16,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', '!guest']
         },
+        plugins: {
+            authorization: {
+                permission: 'all'
+            }
+        },
 
         handler: async (request, h) => {
             // Check if the collection is to be updated as a default collection

package/plugins/commands/get.js

@@ -20,6 +20,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', 'build']
         },
+        plugins: {
+            authorization: {
+                permission: 'read'
+            }
+        },
 
         handler: async (request, h) => {
             const { commandFactory } = request.server.app;

package/plugins/commands/list.js

@@ -29,6 +29,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', 'build']
         },
+        plugins: {
+            authorization: {
+                permission: 'read'
+            }
+        },
 
         handler: async (request, h) => {
             const factory = request.server.app.commandFactory;

package/plugins/commands/listTags.js

@@ -17,6 +17,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', 'build']
         },
+        plugins: {
+            authorization: {
+                permission: 'read'
+            }
+        },
 
         handler: async (request, h) => {
             const factory = request.server.app.commandTagFactory;

package/plugins/commands/listVersions.js

@@ -18,6 +18,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', 'build']
         },
+        plugins: {
+            authorization: {
+                permission: 'read'
+            }
+        },
 
         handler: async (request, h) => {
             const factory = request.server.app.commandFactory;

package/plugins/commands/remove.js

@@ -44,6 +44,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['build', 'user', '!guest']
         },
+        plugins: {
+            authorization: {
+                permission: 'all'
+            }
+        },
 
         handler: async (request, h) => {
             const { namespace, name } = request.params;

package/plugins/commands/removeTag.js

@@ -19,6 +19,7 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['build']
         },
+
         handler: async (request, h) => {
             const { pipelineFactory, commandFactory, commandTagFactory } = request.server.app;
             const { pipelineId, isPR } = request.auth.credentials;

package/plugins/commands/removeVersion.js

@@ -16,6 +16,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['build', 'user', '!guest']
         },
+        plugins: {
+            authorization: {
+                permission: 'all'
+            }
+        },
         handler: async (request, h) => {
             const { namespace, name, version } = request.params;
             const { credentials } = request.auth;

package/plugins/commands/updateTrusted.js

@@ -16,6 +16,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['admin', '!guest']
         },
+        plugins: {
+            authorization: {
+                permission: 'all'
+            }
+        },
 
         handler: async (request, h) => {
             const { name, namespace } = request.params;

package/plugins/templates/get.js

@@ -19,6 +19,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', 'build']
         },
+        plugins: {
+            authorization: {
+                permission: 'read'
+            }
+        },
 
         handler: async (request, h) => {
             const { templateFactory } = request.server.app;

package/plugins/templates/getPipelineUsage.js

@@ -19,6 +19,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', 'build']
         },
+        plugins: {
+            authorization: {
+                permission: 'read'
+            }
+        },
 
         handler: async (request, h) => {
             const { templateFactory } = request.server.app;

package/plugins/templates/getTemplateById.js

@@ -17,6 +17,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', 'build']
         },
+        plugins: {
+            authorization: {
+                permission: 'read'
+            }
+        },
 
         handler: async (request, h) => {
             const { templateFactory } = request.server.app;

package/plugins/templates/list.js

@@ -29,6 +29,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', 'build']
         },
+        plugins: {
+            authorization: {
+                permission: 'read'
+            }
+        },
 
         handler: async (request, h) => {
             const factory = request.server.app.templateFactory;

package/plugins/templates/listTags.js

@@ -16,6 +16,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', 'build']
         },
+        plugins: {
+            authorization: {
+                permission: 'read'
+            }
+        },
 
         handler: async (request, h) => {
             const factory = request.server.app.templateTagFactory;

package/plugins/templates/listVersions.js

@@ -17,6 +17,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', 'build']
         },
+        plugins: {
+            authorization: {
+                permission: 'read'
+            }
+        },
 
         handler: async (request, h) => {
             const factory = request.server.app.templateFactory;

package/plugins/templates/listVersionsWithMetric.js

@@ -16,6 +16,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', 'build']
         },
+        plugins: {
+            authorization: {
+                permission: 'read'
+            }
+        },
 
         handler: async (request, h) => {
             const factory = request.server.app.templateFactory;

package/plugins/templates/remove.js

@@ -16,6 +16,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['build', 'user', '!guest']
         },
+        plugins: {
+            authorization: {
+                permission: 'all'
+            }
+        },
 
         handler: async (request, h) => {
             const { name } = request.params;

package/plugins/templates/removeVersion.js

@@ -17,6 +17,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['build', 'user', '!guest']
         },
+        plugins: {
+            authorization: {
+                permission: 'all'
+            }
+        },
 
         handler: async (request, h) => {
             const { name, version } = request.params;

package/plugins/templates/updateTrusted.js

@@ -16,6 +16,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['admin', '!guest']
         },
+        plugins: {
+            authorization: {
+                permission: 'all'
+            }
+        },
 
         handler: async (request, h) => {
             const { name } = request.params;

package/plugins/users/get.js

@@ -19,12 +19,22 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['admin', '!guest']
         },
+        plugins: {
+            authorization: {
+                permission: 'read'
+            }
+        },
 
         handler: async (request, h) => {
             const { username } = request.params;
             const { userFactory } = request.server.app;
             const { scmContext, includeUserToken } = request.query;
             const { credentials } = request.auth;
+            const { permission = 'all' } = credentials;
+
+            if (includeUserToken && permission !== 'all') {
+                throw boom.forbidden('All permission is required to request user token');
+            }
 
             const user = await userFactory.get({
                 username,

package/plugins/users/settings/delete.js

@@ -13,6 +13,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', '!guest']
         },
+        plugins: {
+            authorization: {
+                permission: 'all'
+            }
+        },
 
         handler: async (request, h) => {
             const { userFactory } = request.server.app;

package/plugins/users/settings/get.js

@@ -15,6 +15,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', '!guest']
         },
+        plugins: {
+            authorization: {
+                permission: 'read'
+            }
+        },
 
         handler: async (request, h) => {
             const { userFactory } = request.server.app;

package/plugins/users/settings/update.js

@@ -14,6 +14,11 @@ module.exports = () => ({
             strategies: ['token'],
             scope: ['user', '!guest']
         },
+        plugins: {
+            authorization: {
+                permission: 'all'
+            }
+        },
 
         handler: async (request, h) => {
             const { userFactory } = request.server.app;