From 3a5bb31bdecf89c7e0d47534822abc9f4ea3705b Mon Sep 17 00:00:00 2001 From: = Date: Tue, 14 Jan 2025 23:41:06 +0530 Subject: [PATCH] feat: updated all permission argument to actionProjectType --- .../access-approval-policy-service.ts | 12 ++-- .../access-approval-request-service.ts | 8 +-- .../services/audit-log/audit-log-service.ts | 2 +- .../certificate-authority-crl-service.ts | 2 +- .../dynamic-secret-lease-service.ts | 10 +-- .../dynamic-secret/dynamic-secret-service.ts | 18 ++--- ...project-additional-privilege-v2-service.ts | 18 ++--- ...ty-project-additional-privilege-service.ts | 16 ++--- .../permission/permission-service-types.ts | 8 +-- .../services/permission/permission-service.ts | 29 ++++---- ...oject-user-additional-privilege-service.ts | 14 ++-- .../secret-approval-policy-service.ts | 12 ++-- .../secret-approval-request-service.ts | 16 ++--- .../secret-rotation-service.ts | 10 +-- .../secret-snapshot-service.ts | 8 +-- .../ssh-certificate-template-service.ts | 8 +-- .../ssh/ssh-certificate-authority-service.ts | 14 ++-- .../services/trusted-ip/trusted-ip-service.ts | 8 +-- .../src/server/routes/v1/dashboard-router.ts | 2 +- .../certificate-authority-service.ts | 26 ++++---- .../certificate-template-service.ts | 14 ++-- .../certificate/certificate-service.ts | 8 +-- backend/src/services/cmek/cmek-service.ts | 12 ++-- .../group-project/group-project-service.ts | 10 +-- .../identity-project-service.ts | 12 ++-- .../integration-auth-service.ts | 66 +++++++++---------- .../integration/integration-service.ts | 14 ++-- backend/src/services/org/org-service.ts | 2 +- .../services/pki-alert/pki-alert-service.ts | 8 +-- .../pki-collection/pki-collection-service.ts | 14 ++-- .../project-bot/project-bot-service.ts | 4 +- .../project-env/project-env-service.ts | 8 +-- .../project-key/project-key-service.ts | 6 +- .../project-membership-service.ts | 14 ++-- .../project-role/project-role-service.ts | 12 ++-- .../src/services/project/project-service.ts | 46 ++++++------- .../secret-blind-index-service.ts | 6 +- .../secret-folder/secret-folder-service.ts | 18 ++--- .../secret-import/secret-import-service.ts | 18 ++--- .../services/secret-tag/secret-tag-service.ts | 12 ++-- .../secret-v2-bridge-service.ts | 30 ++++----- backend/src/services/secret/secret-fns.ts | 2 +- backend/src/services/secret/secret-service.ts | 30 ++++----- .../service-token/service-token-service.ts | 6 +- .../src/services/webhook/webhook-service.ts | 10 +-- 45 files changed, 310 insertions(+), 313 deletions(-) diff --git a/backend/src/ee/services/access-approval-policy/access-approval-policy-service.ts b/backend/src/ee/services/access-approval-policy/access-approval-policy-service.ts index 6531882ae..2313cdec8 100644 --- a/backend/src/ee/services/access-approval-policy/access-approval-policy-service.ts +++ b/backend/src/ee/services/access-approval-policy/access-approval-policy-service.ts @@ -93,7 +93,7 @@ export const accessApprovalPolicyServiceFactory = ({ projectId: project.id, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan( @@ -199,7 +199,7 @@ export const accessApprovalPolicyServiceFactory = ({ projectId: project.id, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); const accessApprovalPolicies = await accessApprovalPolicyDAL.find({ projectId: project.id, deletedAt: null }); @@ -250,7 +250,7 @@ export const accessApprovalPolicyServiceFactory = ({ projectId: accessApprovalPolicy.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Edit, ProjectPermissionSub.SecretApproval); @@ -334,7 +334,7 @@ export const accessApprovalPolicyServiceFactory = ({ projectId: policy.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan( ProjectPermissionActions.Delete, @@ -385,7 +385,7 @@ export const accessApprovalPolicyServiceFactory = ({ projectId: project.id, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); if (!membership) { throw new ForbiddenRequestError({ message: "You are not a member of this project" }); @@ -425,7 +425,7 @@ export const accessApprovalPolicyServiceFactory = ({ projectId: policy.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.SecretApproval); diff --git a/backend/src/ee/services/access-approval-request/access-approval-request-service.ts b/backend/src/ee/services/access-approval-request/access-approval-request-service.ts index f8f562713..163b97256 100644 --- a/backend/src/ee/services/access-approval-request/access-approval-request-service.ts +++ b/backend/src/ee/services/access-approval-request/access-approval-request-service.ts @@ -106,7 +106,7 @@ export const accessApprovalRequestServiceFactory = ({ projectId: project.id, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); if (!membership) { throw new ForbiddenRequestError({ message: "You are not a member of this project" }); @@ -280,7 +280,7 @@ export const accessApprovalRequestServiceFactory = ({ projectId: project.id, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); if (!membership) { throw new ForbiddenRequestError({ message: "You are not a member of this project" }); @@ -326,7 +326,7 @@ export const accessApprovalRequestServiceFactory = ({ projectId: accessApprovalRequest.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); if (!membership) { @@ -431,7 +431,7 @@ export const accessApprovalRequestServiceFactory = ({ projectId: project.id, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); if (!membership) { throw new ForbiddenRequestError({ message: "You are not a member of this project" }); diff --git a/backend/src/ee/services/audit-log/audit-log-service.ts b/backend/src/ee/services/audit-log/audit-log-service.ts index eb927dccc..e51c08fbe 100644 --- a/backend/src/ee/services/audit-log/audit-log-service.ts +++ b/backend/src/ee/services/audit-log/audit-log-service.ts @@ -33,7 +33,7 @@ export const auditLogServiceFactory = ({ projectId: filter.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.AuditLogs); } else { diff --git a/backend/src/ee/services/certificate-authority-crl/certificate-authority-crl-service.ts b/backend/src/ee/services/certificate-authority-crl/certificate-authority-crl-service.ts index 6f9a58ffe..b8f4ce663 100644 --- a/backend/src/ee/services/certificate-authority-crl/certificate-authority-crl-service.ts +++ b/backend/src/ee/services/certificate-authority-crl/certificate-authority-crl-service.ts @@ -73,7 +73,7 @@ export const certificateAuthorityCrlServiceFactory = ({ projectId: ca.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.CertificateManager + actionProjectType: ActionProjectType.CertificateManager }); ForbiddenError.from(permission).throwUnlessCan( diff --git a/backend/src/ee/services/dynamic-secret-lease/dynamic-secret-lease-service.ts b/backend/src/ee/services/dynamic-secret-lease/dynamic-secret-lease-service.ts index bb6d20e19..830c1aa57 100644 --- a/backend/src/ee/services/dynamic-secret-lease/dynamic-secret-lease-service.ts +++ b/backend/src/ee/services/dynamic-secret-lease/dynamic-secret-lease-service.ts @@ -73,7 +73,7 @@ export const dynamicSecretLeaseServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan( ProjectPermissionDynamicSecretActions.Lease, @@ -153,7 +153,7 @@ export const dynamicSecretLeaseServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan( ProjectPermissionDynamicSecretActions.Lease, @@ -233,7 +233,7 @@ export const dynamicSecretLeaseServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan( ProjectPermissionDynamicSecretActions.Lease, @@ -303,7 +303,7 @@ export const dynamicSecretLeaseServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan( ProjectPermissionDynamicSecretActions.Lease, @@ -346,7 +346,7 @@ export const dynamicSecretLeaseServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan( ProjectPermissionDynamicSecretActions.Lease, diff --git a/backend/src/ee/services/dynamic-secret/dynamic-secret-service.ts b/backend/src/ee/services/dynamic-secret/dynamic-secret-service.ts index 6165d66bc..631d5b6ba 100644 --- a/backend/src/ee/services/dynamic-secret/dynamic-secret-service.ts +++ b/backend/src/ee/services/dynamic-secret/dynamic-secret-service.ts @@ -79,7 +79,7 @@ export const dynamicSecretServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan( ProjectPermissionDynamicSecretActions.CreateRootCredential, @@ -151,7 +151,7 @@ export const dynamicSecretServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan( ProjectPermissionDynamicSecretActions.EditRootCredential, @@ -235,7 +235,7 @@ export const dynamicSecretServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan( ProjectPermissionDynamicSecretActions.DeleteRootCredential, @@ -296,7 +296,7 @@ export const dynamicSecretServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan( ProjectPermissionDynamicSecretActions.ReadRootCredential, @@ -347,7 +347,7 @@ export const dynamicSecretServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); // verify user has access to each env in request @@ -391,7 +391,7 @@ export const dynamicSecretServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan( ProjectPermissionDynamicSecretActions.ReadRootCredential, @@ -440,7 +440,7 @@ export const dynamicSecretServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan( ProjectPermissionDynamicSecretActions.ReadRootCredential, @@ -472,7 +472,7 @@ export const dynamicSecretServiceFactory = ({ projectId, actorAuthMethod: actor.authMethod, actorOrgId: actor.orgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); const userAccessibleFolderMappings = folderMappings.filter(({ path, environment }) => @@ -518,7 +518,7 @@ export const dynamicSecretServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); // verify user has access to each env in request diff --git a/backend/src/ee/services/identity-project-additional-privilege-v2/identity-project-additional-privilege-v2-service.ts b/backend/src/ee/services/identity-project-additional-privilege-v2/identity-project-additional-privilege-v2-service.ts index b39133ed7..3a38c0d65 100644 --- a/backend/src/ee/services/identity-project-additional-privilege-v2/identity-project-additional-privilege-v2-service.ts +++ b/backend/src/ee/services/identity-project-additional-privilege-v2/identity-project-additional-privilege-v2-service.ts @@ -61,7 +61,7 @@ export const identityProjectAdditionalPrivilegeV2ServiceFactory = ({ projectId: identityProjectMembership.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan( ProjectPermissionActions.Edit, @@ -73,7 +73,7 @@ export const identityProjectAdditionalPrivilegeV2ServiceFactory = ({ projectId: identityProjectMembership.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); // we need to validate that the privilege given is not higher than the assigning users permission @@ -143,7 +143,7 @@ export const identityProjectAdditionalPrivilegeV2ServiceFactory = ({ projectId: identityProjectMembership.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan( ProjectPermissionActions.Edit, @@ -155,7 +155,7 @@ export const identityProjectAdditionalPrivilegeV2ServiceFactory = ({ projectId: identityProjectMembership.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); // we need to validate that the privilege given is not higher than the assigning users permission @@ -225,7 +225,7 @@ export const identityProjectAdditionalPrivilegeV2ServiceFactory = ({ projectId: identityProjectMembership.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan( ProjectPermissionActions.Edit, @@ -237,7 +237,7 @@ export const identityProjectAdditionalPrivilegeV2ServiceFactory = ({ projectId: identityProjectMembership.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); const hasRequiredPriviledges = isAtLeastAsPrivileged(permission, identityRolePermission); if (!hasRequiredPriviledges) @@ -272,7 +272,7 @@ export const identityProjectAdditionalPrivilegeV2ServiceFactory = ({ projectId: identityProjectMembership.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan( ProjectPermissionActions.Read, @@ -307,7 +307,7 @@ export const identityProjectAdditionalPrivilegeV2ServiceFactory = ({ projectId: identityProjectMembership.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan( ProjectPermissionActions.Read, @@ -343,7 +343,7 @@ export const identityProjectAdditionalPrivilegeV2ServiceFactory = ({ projectId: identityProjectMembership.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan( ProjectPermissionActions.Read, diff --git a/backend/src/ee/services/identity-project-additional-privilege/identity-project-additional-privilege-service.ts b/backend/src/ee/services/identity-project-additional-privilege/identity-project-additional-privilege-service.ts index 54b88753d..16c0cc212 100644 --- a/backend/src/ee/services/identity-project-additional-privilege/identity-project-additional-privilege-service.ts +++ b/backend/src/ee/services/identity-project-additional-privilege/identity-project-additional-privilege-service.ts @@ -69,7 +69,7 @@ export const identityProjectAdditionalPrivilegeServiceFactory = ({ projectId: identityProjectMembership.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan( ProjectPermissionActions.Edit, @@ -82,7 +82,7 @@ export const identityProjectAdditionalPrivilegeServiceFactory = ({ projectId: identityProjectMembership.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); // we need to validate that the privilege given is not higher than the assigning users permission @@ -152,7 +152,7 @@ export const identityProjectAdditionalPrivilegeServiceFactory = ({ projectId: identityProjectMembership.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan( @@ -166,7 +166,7 @@ export const identityProjectAdditionalPrivilegeServiceFactory = ({ projectId: identityProjectMembership.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); // we need to validate that the privilege given is not higher than the assigning users permission @@ -253,7 +253,7 @@ export const identityProjectAdditionalPrivilegeServiceFactory = ({ projectId: identityProjectMembership.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan( ProjectPermissionActions.Edit, @@ -266,7 +266,7 @@ export const identityProjectAdditionalPrivilegeServiceFactory = ({ projectId: identityProjectMembership.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); const hasRequiredPriviledges = isAtLeastAsPrivileged(permission, identityRolePermission); if (!hasRequiredPriviledges) @@ -312,7 +312,7 @@ export const identityProjectAdditionalPrivilegeServiceFactory = ({ projectId: identityProjectMembership.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan( ProjectPermissionActions.Read, @@ -355,7 +355,7 @@ export const identityProjectAdditionalPrivilegeServiceFactory = ({ projectId: identityProjectMembership.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan( diff --git a/backend/src/ee/services/permission/permission-service-types.ts b/backend/src/ee/services/permission/permission-service-types.ts index ad307043a..570e2b6b1 100644 --- a/backend/src/ee/services/permission/permission-service-types.ts +++ b/backend/src/ee/services/permission/permission-service-types.ts @@ -15,7 +15,7 @@ export type TGetUserProjectPermissionArg = { userId: string; projectId: string; authMethod: ActorAuthMethod; - projectOperationType: ActionProjectType; + actionProjectType: ActionProjectType; userOrgId?: string; }; @@ -23,14 +23,14 @@ export type TGetIdentityProjectPermissionArg = { identityId: string; projectId: string; identityOrgId?: string; - projectOperationType: ActionProjectType; + actionProjectType: ActionProjectType; }; export type TGetServiceTokenProjectPermissionArg = { serviceTokenId: string; projectId: string; actorOrgId?: string; - projectOperationType: ActionProjectType; + actionProjectType: ActionProjectType; }; export type TGetProjectPermissionArg = { @@ -39,5 +39,5 @@ export type TGetProjectPermissionArg = { projectId: string; actorAuthMethod: ActorAuthMethod; actorOrgId?: string; - projectOperationType: ActionProjectType; + actionProjectType: ActionProjectType; }; diff --git a/backend/src/ee/services/permission/permission-service.ts b/backend/src/ee/services/permission/permission-service.ts index 5477a60ab..ddaf55d9d 100644 --- a/backend/src/ee/services/permission/permission-service.ts +++ b/backend/src/ee/services/permission/permission-service.ts @@ -205,7 +205,7 @@ export const permissionServiceFactory = ({ projectId, authMethod, userOrgId, - projectOperationType + actionProjectType }: TGetUserProjectPermissionArg): Promise> => { const userProjectPermission = await permissionDAL.getProjectPermission(userId, projectId); if (!userProjectPermission) throw new ForbiddenRequestError({ name: "User not a part of the specified project" }); @@ -227,9 +227,9 @@ export const permissionServiceFactory = ({ validateOrgSSO(authMethod, userProjectPermission.orgAuthEnforced); - if (projectOperationType !== ActionProjectType.Any && projectOperationType !== userProjectPermission.projectType) { + if (actionProjectType !== ActionProjectType.Any && actionProjectType !== userProjectPermission.projectType) { throw new BadRequestError({ - message: `The project is of type ${userProjectPermission.projectType}. Operations of type ${projectOperationType} are not allowed.` + message: `The project is of type ${userProjectPermission.projectType}. Operations of type ${actionProjectType} are not allowed.` }); } @@ -281,7 +281,7 @@ export const permissionServiceFactory = ({ identityId, projectId, identityOrgId, - projectOperationType + actionProjectType }: TGetIdentityProjectPermissionArg): Promise> => { const identityProjectPermission = await permissionDAL.getProjectIdentityPermission(identityId, projectId); if (!identityProjectPermission) @@ -301,12 +301,9 @@ export const permissionServiceFactory = ({ throw new ForbiddenRequestError({ name: "Identity is not a member of the specified organization" }); } - if ( - projectOperationType !== ActionProjectType.Any && - projectOperationType !== identityProjectPermission.projectType - ) { + if (actionProjectType !== ActionProjectType.Any && actionProjectType !== identityProjectPermission.projectType) { throw new BadRequestError({ - message: `The project is of type ${identityProjectPermission.projectType}. Operations of type ${projectOperationType} are not allowed.` + message: `The project is of type ${identityProjectPermission.projectType}. Operations of type ${actionProjectType} are not allowed.` }); } @@ -359,7 +356,7 @@ export const permissionServiceFactory = ({ serviceTokenId, projectId, actorOrgId, - projectOperationType + actionProjectType }: TGetServiceTokenProjectPermissionArg) => { const serviceToken = await serviceTokenDAL.findById(serviceTokenId); if (!serviceToken) throw new NotFoundError({ message: `Service token with ID '${serviceTokenId}' not found` }); @@ -384,9 +381,9 @@ export const permissionServiceFactory = ({ }); } - if (projectOperationType !== ActionProjectType.Any && projectOperationType !== serviceTokenProject.type) { + if (actionProjectType !== ActionProjectType.Any && actionProjectType !== serviceTokenProject.type) { throw new BadRequestError({ - message: `The project is of type ${serviceTokenProject.type}. Operations of type ${projectOperationType} are not allowed.` + message: `The project is of type ${serviceTokenProject.type}. Operations of type ${actionProjectType} are not allowed.` }); } @@ -536,7 +533,7 @@ export const permissionServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType + actionProjectType }: TGetProjectPermissionArg): Promise> => { switch (actor) { case ActorType.USER: @@ -545,21 +542,21 @@ export const permissionServiceFactory = ({ projectId, authMethod: actorAuthMethod, userOrgId: actorOrgId, - projectOperationType + actionProjectType }) as Promise>; case ActorType.SERVICE: return getServiceTokenProjectPermission({ serviceTokenId: actorId, projectId, actorOrgId, - projectOperationType + actionProjectType }) as Promise>; case ActorType.IDENTITY: return getIdentityProjectPermission({ identityId: actorId, projectId, identityOrgId: actorOrgId, - projectOperationType + actionProjectType }) as Promise>; default: throw new BadRequestError({ diff --git a/backend/src/ee/services/project-user-additional-privilege/project-user-additional-privilege-service.ts b/backend/src/ee/services/project-user-additional-privilege/project-user-additional-privilege-service.ts index 8e1d49481..14586d5e2 100644 --- a/backend/src/ee/services/project-user-additional-privilege/project-user-additional-privilege-service.ts +++ b/backend/src/ee/services/project-user-additional-privilege/project-user-additional-privilege-service.ts @@ -61,7 +61,7 @@ export const projectUserAdditionalPrivilegeServiceFactory = ({ projectId: projectMembership.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Edit, ProjectPermissionSub.Member); const { permission: targetUserPermission } = await permissionService.getProjectPermission({ @@ -70,7 +70,7 @@ export const projectUserAdditionalPrivilegeServiceFactory = ({ projectId: projectMembership.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); // we need to validate that the privilege given is not higher than the assigning users permission @@ -148,7 +148,7 @@ export const projectUserAdditionalPrivilegeServiceFactory = ({ projectId: projectMembership.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Edit, ProjectPermissionSub.Member); const { permission: targetUserPermission } = await permissionService.getProjectPermission({ @@ -157,7 +157,7 @@ export const projectUserAdditionalPrivilegeServiceFactory = ({ projectId: projectMembership.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); // we need to validate that the privilege given is not higher than the assigning users permission @@ -234,7 +234,7 @@ export const projectUserAdditionalPrivilegeServiceFactory = ({ projectId: projectMembership.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Edit, ProjectPermissionSub.Member); @@ -271,7 +271,7 @@ export const projectUserAdditionalPrivilegeServiceFactory = ({ projectId: projectMembership.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Member); @@ -298,7 +298,7 @@ export const projectUserAdditionalPrivilegeServiceFactory = ({ projectId: projectMembership.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Member); diff --git a/backend/src/ee/services/secret-approval-policy/secret-approval-policy-service.ts b/backend/src/ee/services/secret-approval-policy/secret-approval-policy-service.ts index ef070cf34..189ba5c1f 100644 --- a/backend/src/ee/services/secret-approval-policy/secret-approval-policy-service.ts +++ b/backend/src/ee/services/secret-approval-policy/secret-approval-policy-service.ts @@ -85,7 +85,7 @@ export const secretApprovalPolicyServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan( ProjectPermissionActions.Create, @@ -199,7 +199,7 @@ export const secretApprovalPolicyServiceFactory = ({ projectId: secretApprovalPolicy.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Edit, ProjectPermissionSub.SecretApproval); @@ -294,7 +294,7 @@ export const secretApprovalPolicyServiceFactory = ({ projectId: sapPolicy.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan( ProjectPermissionActions.Delete, @@ -334,7 +334,7 @@ export const secretApprovalPolicyServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.SecretApproval); @@ -379,7 +379,7 @@ export const secretApprovalPolicyServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); return getSecretApprovalPolicy(projectId, environment, secretPath); @@ -406,7 +406,7 @@ export const secretApprovalPolicyServiceFactory = ({ projectId: sapPolicy.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.SecretApproval); diff --git a/backend/src/ee/services/secret-approval-request/secret-approval-request-service.ts b/backend/src/ee/services/secret-approval-request/secret-approval-request-service.ts index 2de136702..5b5ea6ce3 100644 --- a/backend/src/ee/services/secret-approval-request/secret-approval-request-service.ts +++ b/backend/src/ee/services/secret-approval-request/secret-approval-request-service.ts @@ -153,7 +153,7 @@ export const secretApprovalRequestServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); const count = await secretApprovalRequestDAL.findProjectRequestCount(projectId, actorId); @@ -180,7 +180,7 @@ export const secretApprovalRequestServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); const { shouldUseSecretV2Bridge } = await projectBotService.getBotKey(projectId); @@ -230,7 +230,7 @@ export const secretApprovalRequestServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); if ( !hasRole(ProjectMembershipRole.Admin) && @@ -351,7 +351,7 @@ export const secretApprovalRequestServiceFactory = ({ projectId: secretApprovalRequest.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); if ( !hasRole(ProjectMembershipRole.Admin) && @@ -418,7 +418,7 @@ export const secretApprovalRequestServiceFactory = ({ projectId: secretApprovalRequest.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); if ( !hasRole(ProjectMembershipRole.Admin) && @@ -475,7 +475,7 @@ export const secretApprovalRequestServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); if ( @@ -907,7 +907,7 @@ export const secretApprovalRequestServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan( ProjectPermissionActions.Read, @@ -1188,7 +1188,7 @@ export const secretApprovalRequestServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); const folder = await folderDAL.findBySecretPath(projectId, environment, secretPath); if (!folder) diff --git a/backend/src/ee/services/secret-rotation/secret-rotation-service.ts b/backend/src/ee/services/secret-rotation/secret-rotation-service.ts index a1c0ef673..c456e1581 100644 --- a/backend/src/ee/services/secret-rotation/secret-rotation-service.ts +++ b/backend/src/ee/services/secret-rotation/secret-rotation-service.ts @@ -59,7 +59,7 @@ export const secretRotationServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.SecretRotation); @@ -88,7 +88,7 @@ export const secretRotationServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan( ProjectPermissionActions.Create, @@ -197,7 +197,7 @@ export const secretRotationServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.SecretRotation); const { botKey, shouldUseSecretV2Bridge } = await projectBotService.getBotKey(projectId); @@ -243,7 +243,7 @@ export const secretRotationServiceFactory = ({ projectId: project.id, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Edit, ProjectPermissionSub.SecretRotation); await secretRotationQueue.removeFromQueue(doc.id, doc.interval); @@ -261,7 +261,7 @@ export const secretRotationServiceFactory = ({ projectId: doc.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan( ProjectPermissionActions.Delete, diff --git a/backend/src/ee/services/secret-snapshot/secret-snapshot-service.ts b/backend/src/ee/services/secret-snapshot/secret-snapshot-service.ts index bc7cb1a78..2e4ed0f93 100644 --- a/backend/src/ee/services/secret-snapshot/secret-snapshot-service.ts +++ b/backend/src/ee/services/secret-snapshot/secret-snapshot-service.ts @@ -89,7 +89,7 @@ export const secretSnapshotServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.SecretRollback); @@ -126,7 +126,7 @@ export const secretSnapshotServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.SecretRollback); @@ -155,7 +155,7 @@ export const secretSnapshotServiceFactory = ({ projectId: snapshot.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.SecretRollback); @@ -331,7 +331,7 @@ export const secretSnapshotServiceFactory = ({ projectId: snapshot.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan( ProjectPermissionActions.Create, diff --git a/backend/src/ee/services/ssh-certificate-template/ssh-certificate-template-service.ts b/backend/src/ee/services/ssh-certificate-template/ssh-certificate-template-service.ts index 50832cc0b..30c50cc9e 100644 --- a/backend/src/ee/services/ssh-certificate-template/ssh-certificate-template-service.ts +++ b/backend/src/ee/services/ssh-certificate-template/ssh-certificate-template-service.ts @@ -60,7 +60,7 @@ export const sshCertificateTemplateServiceFactory = ({ projectId: ca.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SSH + actionProjectType: ActionProjectType.SSH }); ForbiddenError.from(permission).throwUnlessCan( @@ -133,7 +133,7 @@ export const sshCertificateTemplateServiceFactory = ({ projectId: certTemplate.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SSH + actionProjectType: ActionProjectType.SSH }); ForbiddenError.from(permission).throwUnlessCan( @@ -202,7 +202,7 @@ export const sshCertificateTemplateServiceFactory = ({ projectId: certificateTemplate.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SSH + actionProjectType: ActionProjectType.SSH }); ForbiddenError.from(permission).throwUnlessCan( @@ -229,7 +229,7 @@ export const sshCertificateTemplateServiceFactory = ({ projectId: certTemplate.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SSH + actionProjectType: ActionProjectType.SSH }); ForbiddenError.from(permission).throwUnlessCan( diff --git a/backend/src/ee/services/ssh/ssh-certificate-authority-service.ts b/backend/src/ee/services/ssh/ssh-certificate-authority-service.ts index 08ee022c7..d7ca511e4 100644 --- a/backend/src/ee/services/ssh/ssh-certificate-authority-service.ts +++ b/backend/src/ee/services/ssh/ssh-certificate-authority-service.ts @@ -71,7 +71,7 @@ export const sshCertificateAuthorityServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SSH + actionProjectType: ActionProjectType.SSH }); ForbiddenError.from(permission).throwUnlessCan( @@ -124,7 +124,7 @@ export const sshCertificateAuthorityServiceFactory = ({ projectId: ca.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SSH + actionProjectType: ActionProjectType.SSH }); ForbiddenError.from(permission).throwUnlessCan( @@ -193,7 +193,7 @@ export const sshCertificateAuthorityServiceFactory = ({ projectId: ca.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SSH + actionProjectType: ActionProjectType.SSH }); ForbiddenError.from(permission).throwUnlessCan( @@ -232,7 +232,7 @@ export const sshCertificateAuthorityServiceFactory = ({ projectId: ca.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SSH + actionProjectType: ActionProjectType.SSH }); ForbiddenError.from(permission).throwUnlessCan( @@ -274,7 +274,7 @@ export const sshCertificateAuthorityServiceFactory = ({ projectId: sshCertificateTemplate.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SSH + actionProjectType: ActionProjectType.SSH }); ForbiddenError.from(permission).throwUnlessCan( @@ -396,7 +396,7 @@ export const sshCertificateAuthorityServiceFactory = ({ projectId: sshCertificateTemplate.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SSH + actionProjectType: ActionProjectType.SSH }); ForbiddenError.from(permission).throwUnlessCan( @@ -494,7 +494,7 @@ export const sshCertificateAuthorityServiceFactory = ({ projectId: ca.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SSH + actionProjectType: ActionProjectType.SSH }); ForbiddenError.from(permission).throwUnlessCan( diff --git a/backend/src/ee/services/trusted-ip/trusted-ip-service.ts b/backend/src/ee/services/trusted-ip/trusted-ip-service.ts index ddc29cf71..c407bdc82 100644 --- a/backend/src/ee/services/trusted-ip/trusted-ip-service.ts +++ b/backend/src/ee/services/trusted-ip/trusted-ip-service.ts @@ -34,7 +34,7 @@ export const trustedIpServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.IpAllowList); const trustedIps = await trustedIpDAL.find({ @@ -59,7 +59,7 @@ export const trustedIpServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Create, ProjectPermissionSub.IpAllowList); @@ -105,7 +105,7 @@ export const trustedIpServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Create, ProjectPermissionSub.IpAllowList); @@ -151,7 +151,7 @@ export const trustedIpServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Create, ProjectPermissionSub.IpAllowList); diff --git a/backend/src/server/routes/v1/dashboard-router.ts b/backend/src/server/routes/v1/dashboard-router.ts index b8b076a90..d96c45f04 100644 --- a/backend/src/server/routes/v1/dashboard-router.ts +++ b/backend/src/server/routes/v1/dashboard-router.ts @@ -226,7 +226,7 @@ export const registerDashboardRouter = async (server: FastifyZodProvider) => { projectId, actorAuthMethod: req.permission.authMethod, actorOrgId: req.permission.orgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); const allowedDynamicSecretEnvironments = // filter envs user has access to diff --git a/backend/src/services/certificate-authority/certificate-authority-service.ts b/backend/src/services/certificate-authority/certificate-authority-service.ts index 39417e4e4..42efc4f29 100644 --- a/backend/src/services/certificate-authority/certificate-authority-service.ts +++ b/backend/src/services/certificate-authority/certificate-authority-service.ts @@ -142,7 +142,7 @@ export const certificateAuthorityServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.CertificateManager + actionProjectType: ActionProjectType.CertificateManager }); ForbiddenError.from(permission).throwUnlessCan( @@ -311,7 +311,7 @@ export const certificateAuthorityServiceFactory = ({ projectId: ca.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.CertificateManager + actionProjectType: ActionProjectType.CertificateManager }); ForbiddenError.from(permission).throwUnlessCan( ProjectPermissionActions.Read, @@ -343,7 +343,7 @@ export const certificateAuthorityServiceFactory = ({ projectId: ca.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.CertificateManager + actionProjectType: ActionProjectType.CertificateManager }); ForbiddenError.from(permission).throwUnlessCan( @@ -369,7 +369,7 @@ export const certificateAuthorityServiceFactory = ({ projectId: ca.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.CertificateManager + actionProjectType: ActionProjectType.CertificateManager }); ForbiddenError.from(permission).throwUnlessCan( @@ -395,7 +395,7 @@ export const certificateAuthorityServiceFactory = ({ projectId: ca.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.CertificateManager + actionProjectType: ActionProjectType.CertificateManager }); ForbiddenError.from(permission).throwUnlessCan( @@ -457,7 +457,7 @@ export const certificateAuthorityServiceFactory = ({ projectId: ca.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.CertificateManager + actionProjectType: ActionProjectType.CertificateManager }); ForbiddenError.from(permission).throwUnlessCan( @@ -728,7 +728,7 @@ export const certificateAuthorityServiceFactory = ({ projectId: ca.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.CertificateManager + actionProjectType: ActionProjectType.CertificateManager }); ForbiddenError.from(permission).throwUnlessCan( @@ -764,7 +764,7 @@ export const certificateAuthorityServiceFactory = ({ projectId: ca.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.CertificateManager + actionProjectType: ActionProjectType.CertificateManager }); ForbiddenError.from(permission).throwUnlessCan( @@ -845,7 +845,7 @@ export const certificateAuthorityServiceFactory = ({ projectId: ca.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.CertificateManager + actionProjectType: ActionProjectType.CertificateManager }); ForbiddenError.from(permission).throwUnlessCan( @@ -992,7 +992,7 @@ export const certificateAuthorityServiceFactory = ({ projectId: ca.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.CertificateManager + actionProjectType: ActionProjectType.CertificateManager }); ForbiddenError.from(permission).throwUnlessCan( @@ -1155,7 +1155,7 @@ export const certificateAuthorityServiceFactory = ({ projectId: ca.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.CertificateManager + actionProjectType: ActionProjectType.CertificateManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Create, ProjectPermissionSub.Certificates); @@ -1484,7 +1484,7 @@ export const certificateAuthorityServiceFactory = ({ projectId: ca.projectId, actorAuthMethod: dto.actorAuthMethod, actorOrgId: dto.actorOrgId, - projectOperationType: ActionProjectType.CertificateManager + actionProjectType: ActionProjectType.CertificateManager }); ForbiddenError.from(permission).throwUnlessCan( @@ -1842,7 +1842,7 @@ export const certificateAuthorityServiceFactory = ({ projectId: ca.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.CertificateManager + actionProjectType: ActionProjectType.CertificateManager }); ForbiddenError.from(permission).throwUnlessCan( diff --git a/backend/src/services/certificate-template/certificate-template-service.ts b/backend/src/services/certificate-template/certificate-template-service.ts index 546fd6338..9a5cd9269 100644 --- a/backend/src/services/certificate-template/certificate-template-service.ts +++ b/backend/src/services/certificate-template/certificate-template-service.ts @@ -73,7 +73,7 @@ export const certificateTemplateServiceFactory = ({ projectId: ca.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.CertificateManager + actionProjectType: ActionProjectType.CertificateManager }); ForbiddenError.from(permission).throwUnlessCan( @@ -135,7 +135,7 @@ export const certificateTemplateServiceFactory = ({ projectId: certTemplate.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.CertificateManager + actionProjectType: ActionProjectType.CertificateManager }); ForbiddenError.from(permission).throwUnlessCan( @@ -193,7 +193,7 @@ export const certificateTemplateServiceFactory = ({ projectId: certTemplate.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.CertificateManager + actionProjectType: ActionProjectType.CertificateManager }); ForbiddenError.from(permission).throwUnlessCan( @@ -220,7 +220,7 @@ export const certificateTemplateServiceFactory = ({ projectId: certTemplate.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.CertificateManager + actionProjectType: ActionProjectType.CertificateManager }); ForbiddenError.from(permission).throwUnlessCan( @@ -262,7 +262,7 @@ export const certificateTemplateServiceFactory = ({ projectId: certTemplate.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.CertificateManager + actionProjectType: ActionProjectType.CertificateManager }); ForbiddenError.from(permission).throwUnlessCan( @@ -347,7 +347,7 @@ export const certificateTemplateServiceFactory = ({ projectId: certTemplate.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.CertificateManager + actionProjectType: ActionProjectType.CertificateManager }); ForbiddenError.from(permission).throwUnlessCan( @@ -429,7 +429,7 @@ export const certificateTemplateServiceFactory = ({ projectId: certTemplate.projectId, actorAuthMethod: dto.actorAuthMethod, actorOrgId: dto.actorOrgId, - projectOperationType: ActionProjectType.CertificateManager + actionProjectType: ActionProjectType.CertificateManager }); ForbiddenError.from(permission).throwUnlessCan( diff --git a/backend/src/services/certificate/certificate-service.ts b/backend/src/services/certificate/certificate-service.ts index f6f2e5661..0ca0d64c6 100644 --- a/backend/src/services/certificate/certificate-service.ts +++ b/backend/src/services/certificate/certificate-service.ts @@ -56,7 +56,7 @@ export const certificateServiceFactory = ({ projectId: ca.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.CertificateManager + actionProjectType: ActionProjectType.CertificateManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Certificates); @@ -80,7 +80,7 @@ export const certificateServiceFactory = ({ projectId: ca.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.CertificateManager + actionProjectType: ActionProjectType.CertificateManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Delete, ProjectPermissionSub.Certificates); @@ -115,7 +115,7 @@ export const certificateServiceFactory = ({ projectId: ca.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.CertificateManager + actionProjectType: ActionProjectType.CertificateManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Delete, ProjectPermissionSub.Certificates); @@ -162,7 +162,7 @@ export const certificateServiceFactory = ({ projectId: ca.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.CertificateManager + actionProjectType: ActionProjectType.CertificateManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Certificates); diff --git a/backend/src/services/cmek/cmek-service.ts b/backend/src/services/cmek/cmek-service.ts index d906c8b48..775367e6e 100644 --- a/backend/src/services/cmek/cmek-service.ts +++ b/backend/src/services/cmek/cmek-service.ts @@ -40,7 +40,7 @@ export const cmekServiceFactory = ({ kmsService, kmsDAL, permissionService, proj projectId, actorAuthMethod: actor.authMethod, actorOrgId: actor.orgId, - projectOperationType: ActionProjectType.KMS + actionProjectType: ActionProjectType.KMS }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionCmekActions.Create, ProjectPermissionSub.Cmek); @@ -66,7 +66,7 @@ export const cmekServiceFactory = ({ kmsService, kmsDAL, permissionService, proj projectId: key.projectId, actorAuthMethod: actor.authMethod, actorOrgId: actor.orgId, - projectOperationType: ActionProjectType.KMS + actionProjectType: ActionProjectType.KMS }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionCmekActions.Edit, ProjectPermissionSub.Cmek); @@ -89,7 +89,7 @@ export const cmekServiceFactory = ({ kmsService, kmsDAL, permissionService, proj projectId: key.projectId, actorAuthMethod: actor.authMethod, actorOrgId: actor.orgId, - projectOperationType: ActionProjectType.KMS + actionProjectType: ActionProjectType.KMS }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionCmekActions.Delete, ProjectPermissionSub.Cmek); @@ -115,7 +115,7 @@ export const cmekServiceFactory = ({ kmsService, kmsDAL, permissionService, proj projectId, actorAuthMethod: actor.authMethod, actorOrgId: actor.orgId, - projectOperationType: ActionProjectType.KMS + actionProjectType: ActionProjectType.KMS }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionCmekActions.Read, ProjectPermissionSub.Cmek); @@ -140,7 +140,7 @@ export const cmekServiceFactory = ({ kmsService, kmsDAL, permissionService, proj projectId: key.projectId, actorAuthMethod: actor.authMethod, actorOrgId: actor.orgId, - projectOperationType: ActionProjectType.KMS + actionProjectType: ActionProjectType.KMS }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionCmekActions.Encrypt, ProjectPermissionSub.Cmek); @@ -167,7 +167,7 @@ export const cmekServiceFactory = ({ kmsService, kmsDAL, permissionService, proj projectId: key.projectId, actorAuthMethod: actor.authMethod, actorOrgId: actor.orgId, - projectOperationType: ActionProjectType.KMS + actionProjectType: ActionProjectType.KMS }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionCmekActions.Decrypt, ProjectPermissionSub.Cmek); diff --git a/backend/src/services/group-project/group-project-service.ts b/backend/src/services/group-project/group-project-service.ts index 0c3a37728..1084dcdd9 100644 --- a/backend/src/services/group-project/group-project-service.ts +++ b/backend/src/services/group-project/group-project-service.ts @@ -75,7 +75,7 @@ export const groupProjectServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Create, ProjectPermissionSub.Groups); @@ -244,7 +244,7 @@ export const groupProjectServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Edit, ProjectPermissionSub.Groups); @@ -347,7 +347,7 @@ export const groupProjectServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Delete, ProjectPermissionSub.Groups); @@ -392,7 +392,7 @@ export const groupProjectServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Groups); @@ -420,7 +420,7 @@ export const groupProjectServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Groups); diff --git a/backend/src/services/identity-project/identity-project-service.ts b/backend/src/services/identity-project/identity-project-service.ts index b6b93d36d..36b9b0562 100644 --- a/backend/src/services/identity-project/identity-project-service.ts +++ b/backend/src/services/identity-project/identity-project-service.ts @@ -60,7 +60,7 @@ export const identityProjectServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan( ProjectPermissionActions.Create, @@ -166,7 +166,7 @@ export const identityProjectServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan( ProjectPermissionActions.Edit, @@ -262,7 +262,7 @@ export const identityProjectServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan( ProjectPermissionActions.Delete, @@ -275,7 +275,7 @@ export const identityProjectServiceFactory = ({ projectId: identityProjectMembership.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); if (!isAtLeastAsPrivileged(permission, identityRolePermission)) throw new ForbiddenRequestError({ message: "Failed to delete more privileged identity" }); @@ -302,7 +302,7 @@ export const identityProjectServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Identity); @@ -333,7 +333,7 @@ export const identityProjectServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan( diff --git a/backend/src/services/integration-auth/integration-auth-service.ts b/backend/src/services/integration-auth/integration-auth-service.ts index efbc81897..d96643a19 100644 --- a/backend/src/services/integration-auth/integration-auth-service.ts +++ b/backend/src/services/integration-auth/integration-auth-service.ts @@ -103,7 +103,7 @@ export const integrationAuthServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Integrations); const authorizations = await integrationAuthDAL.find({ projectId }); @@ -121,7 +121,7 @@ export const integrationAuthServiceFactory = ({ projectId: auth.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); return permission.can(ProjectPermissionActions.Read, ProjectPermissionSub.Integrations); @@ -139,7 +139,7 @@ export const integrationAuthServiceFactory = ({ projectId: integrationAuth.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Integrations); return integrationAuth; @@ -165,7 +165,7 @@ export const integrationAuthServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Create, ProjectPermissionSub.Integrations); @@ -275,7 +275,7 @@ export const integrationAuthServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Create, ProjectPermissionSub.Integrations); @@ -410,7 +410,7 @@ export const integrationAuthServiceFactory = ({ projectId: integrationAuth.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Edit, ProjectPermissionSub.Integrations); @@ -672,7 +672,7 @@ export const integrationAuthServiceFactory = ({ projectId: integrationAuth.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Integrations); @@ -707,7 +707,7 @@ export const integrationAuthServiceFactory = ({ projectId: integrationAuth.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Integrations); @@ -738,7 +738,7 @@ export const integrationAuthServiceFactory = ({ projectId: integrationAuth.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Integrations); const { shouldUseSecretV2Bridge, botKey } = await projectBotService.getBotKey(integrationAuth.projectId); @@ -780,7 +780,7 @@ export const integrationAuthServiceFactory = ({ projectId: integrationAuth.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Integrations); const { shouldUseSecretV2Bridge, botKey } = await projectBotService.getBotKey(integrationAuth.projectId); @@ -809,7 +809,7 @@ export const integrationAuthServiceFactory = ({ projectId: integrationAuth.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Integrations); const { shouldUseSecretV2Bridge, botKey } = await projectBotService.getBotKey(integrationAuth.projectId); @@ -884,7 +884,7 @@ export const integrationAuthServiceFactory = ({ projectId: integrationAuth.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Integrations); const { shouldUseSecretV2Bridge, botKey } = await projectBotService.getBotKey(integrationAuth.projectId); @@ -932,7 +932,7 @@ export const integrationAuthServiceFactory = ({ projectId: integrationAuth.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Integrations); const { shouldUseSecretV2Bridge, botKey } = await projectBotService.getBotKey(integrationAuth.projectId); @@ -967,7 +967,7 @@ export const integrationAuthServiceFactory = ({ projectId: integrationAuth.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Integrations); const { shouldUseSecretV2Bridge, botKey } = await projectBotService.getBotKey(integrationAuth.projectId); @@ -1026,7 +1026,7 @@ export const integrationAuthServiceFactory = ({ projectId: integrationAuth.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Integrations); const { shouldUseSecretV2Bridge, botKey } = await projectBotService.getBotKey(integrationAuth.projectId); @@ -1063,7 +1063,7 @@ export const integrationAuthServiceFactory = ({ projectId: integrationAuth.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Integrations); const { shouldUseSecretV2Bridge, botKey } = await projectBotService.getBotKey(integrationAuth.projectId); @@ -1105,7 +1105,7 @@ export const integrationAuthServiceFactory = ({ projectId: integrationAuth.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Integrations); const { shouldUseSecretV2Bridge, botKey } = await projectBotService.getBotKey(integrationAuth.projectId); @@ -1146,7 +1146,7 @@ export const integrationAuthServiceFactory = ({ projectId: integrationAuth.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Integrations); const { shouldUseSecretV2Bridge, botKey } = await projectBotService.getBotKey(integrationAuth.projectId); @@ -1187,7 +1187,7 @@ export const integrationAuthServiceFactory = ({ projectId: integrationAuth.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Integrations); const { shouldUseSecretV2Bridge, botKey } = await projectBotService.getBotKey(integrationAuth.projectId); @@ -1227,7 +1227,7 @@ export const integrationAuthServiceFactory = ({ projectId: integrationAuth.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Integrations); const { shouldUseSecretV2Bridge, botKey } = await projectBotService.getBotKey(integrationAuth.projectId); @@ -1268,7 +1268,7 @@ export const integrationAuthServiceFactory = ({ projectId: integrationAuth.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Integrations); const { shouldUseSecretV2Bridge, botKey } = await projectBotService.getBotKey(integrationAuth.projectId); @@ -1337,7 +1337,7 @@ export const integrationAuthServiceFactory = ({ projectId: integrationAuth.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Integrations); const { shouldUseSecretV2Bridge, botKey } = await projectBotService.getBotKey(integrationAuth.projectId); @@ -1412,7 +1412,7 @@ export const integrationAuthServiceFactory = ({ projectId: integrationAuth.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Integrations); const { shouldUseSecretV2Bridge, botKey } = await projectBotService.getBotKey(integrationAuth.projectId); @@ -1463,7 +1463,7 @@ export const integrationAuthServiceFactory = ({ projectId: integrationAuth.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Integrations); const { shouldUseSecretV2Bridge, botKey } = await projectBotService.getBotKey(integrationAuth.projectId); @@ -1512,7 +1512,7 @@ export const integrationAuthServiceFactory = ({ projectId: integrationAuth.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Integrations); const { shouldUseSecretV2Bridge, botKey } = await projectBotService.getBotKey(integrationAuth.projectId); @@ -1581,7 +1581,7 @@ export const integrationAuthServiceFactory = ({ projectId: integrationAuth.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Integrations); const { shouldUseSecretV2Bridge, botKey } = await projectBotService.getBotKey(integrationAuth.projectId); @@ -1623,7 +1623,7 @@ export const integrationAuthServiceFactory = ({ projectId: integrationAuth.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Integrations); const { shouldUseSecretV2Bridge, botKey } = await projectBotService.getBotKey(integrationAuth.projectId); @@ -1736,7 +1736,7 @@ export const integrationAuthServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Delete, ProjectPermissionSub.Integrations); @@ -1760,7 +1760,7 @@ export const integrationAuthServiceFactory = ({ projectId: integrationAuth.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Delete, ProjectPermissionSub.Integrations); @@ -1794,7 +1794,7 @@ export const integrationAuthServiceFactory = ({ projectId: integrationAuth.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(sourcePermission).throwUnlessCan( @@ -1808,7 +1808,7 @@ export const integrationAuthServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(targetPermission).throwUnlessCan( @@ -1841,7 +1841,7 @@ export const integrationAuthServiceFactory = ({ projectId: integrationAuth.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Integrations); const { shouldUseSecretV2Bridge, botKey } = await projectBotService.getBotKey(integrationAuth.projectId); @@ -1882,7 +1882,7 @@ export const integrationAuthServiceFactory = ({ projectId: integrationAuth.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Integrations); const { shouldUseSecretV2Bridge, botKey } = await projectBotService.getBotKey(integrationAuth.projectId); diff --git a/backend/src/services/integration/integration-service.ts b/backend/src/services/integration/integration-service.ts index ada01fabc..35994433a 100644 --- a/backend/src/services/integration/integration-service.ts +++ b/backend/src/services/integration/integration-service.ts @@ -87,7 +87,7 @@ export const integrationServiceFactory = ({ projectId: integrationAuth.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Create, ProjectPermissionSub.Integrations); @@ -166,7 +166,7 @@ export const integrationServiceFactory = ({ projectId: integration.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Edit, ProjectPermissionSub.Integrations); @@ -233,7 +233,7 @@ export const integrationServiceFactory = ({ projectId: integration.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Integrations); @@ -261,7 +261,7 @@ export const integrationServiceFactory = ({ projectId: integration.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Integrations); @@ -304,7 +304,7 @@ export const integrationServiceFactory = ({ projectId: integration.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Delete, ProjectPermissionSub.Integrations); @@ -341,7 +341,7 @@ export const integrationServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Integrations); @@ -361,7 +361,7 @@ export const integrationServiceFactory = ({ projectId: integration.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Integrations); diff --git a/backend/src/services/org/org-service.ts b/backend/src/services/org/org-service.ts index 4e1020787..f660f511f 100644 --- a/backend/src/services/org/org-service.ts +++ b/backend/src/services/org/org-service.ts @@ -780,7 +780,7 @@ export const orgServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(projectPermission).throwUnlessCan( ProjectPermissionActions.Create, diff --git a/backend/src/services/pki-alert/pki-alert-service.ts b/backend/src/services/pki-alert/pki-alert-service.ts index 5f159bf13..0ddc0f3ae 100644 --- a/backend/src/services/pki-alert/pki-alert-service.ts +++ b/backend/src/services/pki-alert/pki-alert-service.ts @@ -92,7 +92,7 @@ export const pkiAlertServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.CertificateManager + actionProjectType: ActionProjectType.CertificateManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Create, ProjectPermissionSub.PkiAlerts); @@ -122,7 +122,7 @@ export const pkiAlertServiceFactory = ({ projectId: alert.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.CertificateManager + actionProjectType: ActionProjectType.CertificateManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.PkiAlerts); @@ -149,7 +149,7 @@ export const pkiAlertServiceFactory = ({ projectId: alert.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Edit, ProjectPermissionSub.PkiAlerts); @@ -182,7 +182,7 @@ export const pkiAlertServiceFactory = ({ projectId: alert.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.CertificateManager + actionProjectType: ActionProjectType.CertificateManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Delete, ProjectPermissionSub.PkiAlerts); diff --git a/backend/src/services/pki-collection/pki-collection-service.ts b/backend/src/services/pki-collection/pki-collection-service.ts index fc574df56..bee3ee621 100644 --- a/backend/src/services/pki-collection/pki-collection-service.ts +++ b/backend/src/services/pki-collection/pki-collection-service.ts @@ -68,7 +68,7 @@ export const pkiCollectionServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.CertificateManager + actionProjectType: ActionProjectType.CertificateManager }); ForbiddenError.from(permission).throwUnlessCan( @@ -101,7 +101,7 @@ export const pkiCollectionServiceFactory = ({ projectId: pkiCollection.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.CertificateManager + actionProjectType: ActionProjectType.CertificateManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.PkiCollections); @@ -126,7 +126,7 @@ export const pkiCollectionServiceFactory = ({ projectId: pkiCollection.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.CertificateManager + actionProjectType: ActionProjectType.CertificateManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Edit, ProjectPermissionSub.PkiCollections); @@ -154,7 +154,7 @@ export const pkiCollectionServiceFactory = ({ projectId: pkiCollection.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.CertificateManager + actionProjectType: ActionProjectType.CertificateManager }); ForbiddenError.from(permission).throwUnlessCan( @@ -184,7 +184,7 @@ export const pkiCollectionServiceFactory = ({ projectId: pkiCollection.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.CertificateManager + actionProjectType: ActionProjectType.CertificateManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.PkiCollections); @@ -228,7 +228,7 @@ export const pkiCollectionServiceFactory = ({ projectId: pkiCollection.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.CertificateManager + actionProjectType: ActionProjectType.CertificateManager }); ForbiddenError.from(permission).throwUnlessCan( @@ -322,7 +322,7 @@ export const pkiCollectionServiceFactory = ({ projectId: pkiCollection.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.CertificateManager + actionProjectType: ActionProjectType.CertificateManager }); ForbiddenError.from(permission).throwUnlessCan( diff --git a/backend/src/services/project-bot/project-bot-service.ts b/backend/src/services/project-bot/project-bot-service.ts index 21d679bd2..dc69cbf99 100644 --- a/backend/src/services/project-bot/project-bot-service.ts +++ b/backend/src/services/project-bot/project-bot-service.ts @@ -47,7 +47,7 @@ export const projectBotServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Integrations); @@ -114,7 +114,7 @@ export const projectBotServiceFactory = ({ projectId: bot.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Edit, ProjectPermissionSub.Integrations); diff --git a/backend/src/services/project-env/project-env-service.ts b/backend/src/services/project-env/project-env-service.ts index 902f6e62c..f9935df54 100644 --- a/backend/src/services/project-env/project-env-service.ts +++ b/backend/src/services/project-env/project-env-service.ts @@ -48,7 +48,7 @@ export const projectEnvServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Create, ProjectPermissionSub.Environments); @@ -137,7 +137,7 @@ export const projectEnvServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Edit, ProjectPermissionSub.Environments); @@ -201,7 +201,7 @@ export const projectEnvServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Delete, ProjectPermissionSub.Environments); @@ -257,7 +257,7 @@ export const projectEnvServiceFactory = ({ projectId: environment.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Environments); diff --git a/backend/src/services/project-key/project-key-service.ts b/backend/src/services/project-key/project-key-service.ts index f976a2ed7..b56c0a43e 100644 --- a/backend/src/services/project-key/project-key-service.ts +++ b/backend/src/services/project-key/project-key-service.ts @@ -38,7 +38,7 @@ export const projectKeyServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Edit, ProjectPermissionSub.Member); @@ -68,7 +68,7 @@ export const projectKeyServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); const latestKey = await projectKeyDAL.findLatestProjectKey(actorId, projectId); return latestKey; @@ -87,7 +87,7 @@ export const projectKeyServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Member); return projectKeyDAL.findAllProjectUserPubKeys(projectId); diff --git a/backend/src/services/project-membership/project-membership-service.ts b/backend/src/services/project-membership/project-membership-service.ts index 73bc0c696..fd1382dcf 100644 --- a/backend/src/services/project-membership/project-membership-service.ts +++ b/backend/src/services/project-membership/project-membership-service.ts @@ -84,7 +84,7 @@ export const projectMembershipServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Member); @@ -128,7 +128,7 @@ export const projectMembershipServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Member); @@ -151,7 +151,7 @@ export const projectMembershipServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Member); @@ -178,7 +178,7 @@ export const projectMembershipServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Create, ProjectPermissionSub.Member); const orgMembers = await orgDAL.findMembership({ @@ -259,7 +259,7 @@ export const projectMembershipServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Edit, ProjectPermissionSub.Member); @@ -359,7 +359,7 @@ export const projectMembershipServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Delete, ProjectPermissionSub.Member); @@ -395,7 +395,7 @@ export const projectMembershipServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Delete, ProjectPermissionSub.Member); diff --git a/backend/src/services/project-role/project-role-service.ts b/backend/src/services/project-role/project-role-service.ts index 34804c8dd..09bc6460d 100644 --- a/backend/src/services/project-role/project-role-service.ts +++ b/backend/src/services/project-role/project-role-service.ts @@ -64,7 +64,7 @@ export const projectRoleServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Create, ProjectPermissionSub.Role); const existingRole = await projectRoleDAL.findOne({ slug: data.slug, projectId }); @@ -102,7 +102,7 @@ export const projectRoleServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Role); if (roleSlug !== "custom" && Object.values(ProjectMembershipRole).includes(roleSlug as ProjectMembershipRole)) { @@ -125,7 +125,7 @@ export const projectRoleServiceFactory = ({ projectId: projectRole.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Edit, ProjectPermissionSub.Role); @@ -153,7 +153,7 @@ export const projectRoleServiceFactory = ({ projectId: projectRole.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Delete, ProjectPermissionSub.Role); @@ -195,7 +195,7 @@ export const projectRoleServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Role); const customRoles = await projectRoleDAL.find( @@ -218,7 +218,7 @@ export const projectRoleServiceFactory = ({ projectId, authMethod: actorAuthMethod, userOrgId: actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); return { permissions: packRules(permission.rules), membership }; }; diff --git a/backend/src/services/project/project-service.ts b/backend/src/services/project/project-service.ts index 285fb34e4..2d5b492f1 100644 --- a/backend/src/services/project/project-service.ts +++ b/backend/src/services/project/project-service.ts @@ -439,7 +439,7 @@ export const projectServiceFactory = ({ projectId: project.id, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Delete, ProjectPermissionSub.Project); @@ -523,7 +523,7 @@ export const projectServiceFactory = ({ projectId: project.id, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); return project; }; @@ -537,7 +537,7 @@ export const projectServiceFactory = ({ projectId: project.id, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Edit, ProjectPermissionSub.Settings); @@ -563,7 +563,7 @@ export const projectServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Edit, ProjectPermissionSub.Settings); @@ -592,7 +592,7 @@ export const projectServiceFactory = ({ projectId: project.id, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); if (!hasRole(ProjectMembershipRole.Admin)) @@ -624,7 +624,7 @@ export const projectServiceFactory = ({ projectId: project.id, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); if (!hasRole(ProjectMembershipRole.Admin)) { @@ -657,7 +657,7 @@ export const projectServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Edit, ProjectPermissionSub.Settings); @@ -679,7 +679,7 @@ export const projectServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Delete, ProjectPermissionSub.Project); @@ -717,7 +717,7 @@ export const projectServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Secrets); @@ -763,7 +763,7 @@ export const projectServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.CertificateManager + actionProjectType: ActionProjectType.CertificateManager }); ForbiddenError.from(permission).throwUnlessCan( @@ -814,7 +814,7 @@ export const projectServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.CertificateManager + actionProjectType: ActionProjectType.CertificateManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Certificates); @@ -869,7 +869,7 @@ export const projectServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.CertificateManager + actionProjectType: ActionProjectType.CertificateManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.PkiAlerts); @@ -905,7 +905,7 @@ export const projectServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.CertificateManager + actionProjectType: ActionProjectType.CertificateManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.PkiCollections); @@ -942,7 +942,7 @@ export const projectServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.CertificateManager + actionProjectType: ActionProjectType.CertificateManager }); ForbiddenError.from(permission).throwUnlessCan( @@ -973,7 +973,7 @@ export const projectServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SSH + actionProjectType: ActionProjectType.SSH }); ForbiddenError.from(permission).throwUnlessCan( @@ -1009,7 +1009,7 @@ export const projectServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SSH + actionProjectType: ActionProjectType.SSH }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.SshCertificates); @@ -1048,7 +1048,7 @@ export const projectServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SSH + actionProjectType: ActionProjectType.SSH }); ForbiddenError.from(permission).throwUnlessCan( @@ -1083,7 +1083,7 @@ export const projectServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Edit, ProjectPermissionSub.Kms); @@ -1111,7 +1111,7 @@ export const projectServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Edit, ProjectPermissionSub.Kms); @@ -1141,7 +1141,7 @@ export const projectServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Edit, ProjectPermissionSub.Kms); @@ -1164,7 +1164,7 @@ export const projectServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); if (!membership) { @@ -1197,7 +1197,7 @@ export const projectServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Settings); @@ -1246,7 +1246,7 @@ export const projectServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Edit, ProjectPermissionSub.Settings); diff --git a/backend/src/services/secret-blind-index/secret-blind-index-service.ts b/backend/src/services/secret-blind-index/secret-blind-index-service.ts index c83896cc4..1cbbbcbb8 100644 --- a/backend/src/services/secret-blind-index/secret-blind-index-service.ts +++ b/backend/src/services/secret-blind-index/secret-blind-index-service.ts @@ -37,7 +37,7 @@ export const secretBlindIndexServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); const secretCount = await secretBlindIndexDAL.countOfSecretsWithNullSecretBlindIndex(projectId); @@ -57,7 +57,7 @@ export const secretBlindIndexServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); if (!hasRole(ProjectMembershipRole.Admin)) { throw new ForbiddenRequestError({ message: "Insufficient privileges, user must be admin" }); @@ -81,7 +81,7 @@ export const secretBlindIndexServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); if (!hasRole(ProjectMembershipRole.Admin)) { throw new ForbiddenRequestError({ message: "Insufficient privileges, user must be admin" }); diff --git a/backend/src/services/secret-folder/secret-folder-service.ts b/backend/src/services/secret-folder/secret-folder-service.ts index ee4840f70..04eac4586 100644 --- a/backend/src/services/secret-folder/secret-folder-service.ts +++ b/backend/src/services/secret-folder/secret-folder-service.ts @@ -58,7 +58,7 @@ export const secretFolderServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan( @@ -157,7 +157,7 @@ export const secretFolderServiceFactory = ({ projectId: project.id, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); folders.forEach(({ environment, path: secretPath }) => { @@ -267,7 +267,7 @@ export const secretFolderServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan( @@ -348,7 +348,7 @@ export const secretFolderServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan( @@ -405,7 +405,7 @@ export const secretFolderServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); const env = await projectEnvDAL.findOne({ projectId, slug: environment }); @@ -449,7 +449,7 @@ export const secretFolderServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); const envs = await projectEnvDAL.findBySlugs(projectId, environments); @@ -491,7 +491,7 @@ export const secretFolderServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); const envs = await projectEnvDAL.findBySlugs(projectId, environments); @@ -527,7 +527,7 @@ export const secretFolderServiceFactory = ({ projectId: folder.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); const [folderWithPath] = await folderDAL.findSecretPathByFolderIds(folder.projectId, [folder.id]); @@ -556,7 +556,7 @@ export const secretFolderServiceFactory = ({ projectId, actorAuthMethod: actor.authMethod, actorOrgId: actor.orgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); const envs = await projectEnvDAL.findBySlugs(projectId, environments); diff --git a/backend/src/services/secret-import/secret-import-service.ts b/backend/src/services/secret-import/secret-import-service.ts index 4a7b7e2c3..e8fde04d1 100644 --- a/backend/src/services/secret-import/secret-import-service.ts +++ b/backend/src/services/secret-import/secret-import-service.ts @@ -79,7 +79,7 @@ export const secretImportServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); // check if user has permission to import into destination path @@ -198,7 +198,7 @@ export const secretImportServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan( @@ -294,7 +294,7 @@ export const secretImportServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan( @@ -368,7 +368,7 @@ export const secretImportServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); // check if user has permission to import into destination path @@ -448,7 +448,7 @@ export const secretImportServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan( ProjectPermissionActions.Read, @@ -484,7 +484,7 @@ export const secretImportServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan( ProjectPermissionActions.Read, @@ -534,7 +534,7 @@ export const secretImportServiceFactory = ({ projectId: folder.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan( @@ -583,7 +583,7 @@ export const secretImportServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan( ProjectPermissionActions.Read, @@ -621,7 +621,7 @@ export const secretImportServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan( ProjectPermissionActions.Read, diff --git a/backend/src/services/secret-tag/secret-tag-service.ts b/backend/src/services/secret-tag/secret-tag-service.ts index c58e0f787..0a154a4be 100644 --- a/backend/src/services/secret-tag/secret-tag-service.ts +++ b/backend/src/services/secret-tag/secret-tag-service.ts @@ -30,7 +30,7 @@ export const secretTagServiceFactory = ({ secretTagDAL, permissionService }: TSe projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Create, ProjectPermissionSub.Tags); @@ -62,7 +62,7 @@ export const secretTagServiceFactory = ({ secretTagDAL, permissionService }: TSe projectId: tag.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Edit, ProjectPermissionSub.Tags); @@ -80,7 +80,7 @@ export const secretTagServiceFactory = ({ secretTagDAL, permissionService }: TSe projectId: tag.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Delete, ProjectPermissionSub.Tags); @@ -98,7 +98,7 @@ export const secretTagServiceFactory = ({ secretTagDAL, permissionService }: TSe projectId: tag.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Tags); @@ -115,7 +115,7 @@ export const secretTagServiceFactory = ({ secretTagDAL, permissionService }: TSe projectId: tag.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Tags); @@ -129,7 +129,7 @@ export const secretTagServiceFactory = ({ secretTagDAL, permissionService }: TSe projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Tags); diff --git a/backend/src/services/secret-v2-bridge/secret-v2-bridge-service.ts b/backend/src/services/secret-v2-bridge/secret-v2-bridge-service.ts index 722dd8dba..e9e04dbd8 100644 --- a/backend/src/services/secret-v2-bridge/secret-v2-bridge-service.ts +++ b/backend/src/services/secret-v2-bridge/secret-v2-bridge-service.ts @@ -198,7 +198,7 @@ export const secretV2BridgeServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); const folder = await folderDAL.findBySecretPath(projectId, environment, secretPath); @@ -326,7 +326,7 @@ export const secretV2BridgeServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); if (inputSecret.newSecretName === "") { @@ -515,7 +515,7 @@ export const secretV2BridgeServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); const folder = await folderDAL.findBySecretPath(projectId, environment, secretPath); @@ -617,7 +617,7 @@ export const secretV2BridgeServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Secrets); @@ -664,7 +664,7 @@ export const secretV2BridgeServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Secrets); @@ -748,7 +748,7 @@ export const secretV2BridgeServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); if (!isInternal) { ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Secrets); @@ -798,7 +798,7 @@ export const secretV2BridgeServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Secrets); @@ -952,7 +952,7 @@ export const secretV2BridgeServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); const folder = await folderDAL.findBySecretPath(projectId, environment, path); @@ -1109,7 +1109,7 @@ export const secretV2BridgeServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); const folder = await folderDAL.findBySecretPath(projectId, environment, secretPath); @@ -1254,7 +1254,7 @@ export const secretV2BridgeServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); const folder = await folderDAL.findBySecretPath(projectId, environment, secretPath); @@ -1465,7 +1465,7 @@ export const secretV2BridgeServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); const folder = await folderDAL.findBySecretPath(projectId, environment, secretPath); @@ -1577,7 +1577,7 @@ export const secretV2BridgeServiceFactory = ({ projectId: folder.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.SecretRollback); const { decryptor: secretManagerDecryptor } = await kmsService.createCipherPairWithDataKey({ @@ -1610,7 +1610,7 @@ export const secretV2BridgeServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); if (!hasRole(ProjectMembershipRole.Admin)) @@ -1658,7 +1658,7 @@ export const secretV2BridgeServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); const sourceFolder = await folderDAL.findBySecretPath(projectId, sourceEnvironment, sourceSecretPath); @@ -2016,7 +2016,7 @@ export const secretV2BridgeServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan( diff --git a/backend/src/services/secret/secret-fns.ts b/backend/src/services/secret/secret-fns.ts index 6f61e8569..1775d1f44 100644 --- a/backend/src/services/secret/secret-fns.ts +++ b/backend/src/services/secret/secret-fns.ts @@ -183,7 +183,7 @@ export const recursivelyGetSecretPaths = ({ projectId, actorAuthMethod: auth.actorAuthMethod, actorOrgId: auth.actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); // Filter out paths that the user does not have permission to access, and paths that are not in the current path diff --git a/backend/src/services/secret/secret-service.ts b/backend/src/services/secret/secret-service.ts index 27d4ce4b2..66e53c612 100644 --- a/backend/src/services/secret/secret-service.ts +++ b/backend/src/services/secret/secret-service.ts @@ -197,7 +197,7 @@ export const secretServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan( @@ -315,7 +315,7 @@ export const secretServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan( @@ -460,7 +460,7 @@ export const secretServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan( @@ -557,7 +557,7 @@ export const secretServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); let paths: { folderId: string; path: string }[] = []; @@ -665,7 +665,7 @@ export const secretServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan( ProjectPermissionActions.Read, @@ -765,7 +765,7 @@ export const secretServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan( ProjectPermissionActions.Create, @@ -852,7 +852,7 @@ export const secretServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan( @@ -961,7 +961,7 @@ export const secretServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan( ProjectPermissionActions.Delete, @@ -2237,7 +2237,7 @@ export const secretServiceFactory = ({ projectId: folder.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.SecretRollback); const secretVersions = await secretVersionDAL.find({ secretId }, { offset, limit, sort: [["createdAt", "desc"]] }); @@ -2273,7 +2273,7 @@ export const secretServiceFactory = ({ projectId: project.id, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan( @@ -2379,7 +2379,7 @@ export const secretServiceFactory = ({ projectId: project.id, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan( @@ -2486,7 +2486,7 @@ export const secretServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); if (!hasRole(ProjectMembershipRole.Admin)) @@ -2571,7 +2571,7 @@ export const secretServiceFactory = ({ projectId: project.id, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan( @@ -2960,7 +2960,7 @@ export const secretServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); if (!hasRole(ProjectMembershipRole.Admin)) @@ -2989,7 +2989,7 @@ export const secretServiceFactory = ({ projectId: params.projectId, actorAuthMethod: actor.authMethod, actorOrgId: actor.orgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); const secrets = secretV2BridgeService.getSecretsByFolderMappings({ ...params, userId: actor.id }, permission); diff --git a/backend/src/services/service-token/service-token-service.ts b/backend/src/services/service-token/service-token-service.ts index 77bf750ae..654917feb 100644 --- a/backend/src/services/service-token/service-token-service.ts +++ b/backend/src/services/service-token/service-token-service.ts @@ -61,7 +61,7 @@ export const serviceTokenServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Create, ProjectPermissionSub.ServiceTokens); @@ -117,7 +117,7 @@ export const serviceTokenServiceFactory = ({ projectId: serviceToken.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.SecretManager + actionProjectType: ActionProjectType.SecretManager }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Delete, ProjectPermissionSub.ServiceTokens); @@ -152,7 +152,7 @@ export const serviceTokenServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.ServiceTokens); diff --git a/backend/src/services/webhook/webhook-service.ts b/backend/src/services/webhook/webhook-service.ts index f9a5da2ba..26136aaf6 100644 --- a/backend/src/services/webhook/webhook-service.ts +++ b/backend/src/services/webhook/webhook-service.ts @@ -51,7 +51,7 @@ export const webhookServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Create, ProjectPermissionSub.Webhooks); const env = await projectEnvDAL.findOne({ projectId, slug: environment }); @@ -100,7 +100,7 @@ export const webhookServiceFactory = ({ projectId: webhook.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Edit, ProjectPermissionSub.Webhooks); @@ -118,7 +118,7 @@ export const webhookServiceFactory = ({ projectId: webhook.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Delete, ProjectPermissionSub.Webhooks); @@ -136,7 +136,7 @@ export const webhookServiceFactory = ({ projectId: webhook.projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); const project = await projectDAL.findById(webhook.projectId); @@ -180,7 +180,7 @@ export const webhookServiceFactory = ({ projectId, actorAuthMethod, actorOrgId, - projectOperationType: ActionProjectType.Any + actionProjectType: ActionProjectType.Any }); ForbiddenError.from(permission).throwUnlessCan(ProjectPermissionActions.Read, ProjectPermissionSub.Webhooks);