Renamed identity auth template permissions

backend/src/ee/services/permission/org-permission.ts

@@ -34,7 +34,7 @@ export enum OrgPermissionMachineIdentityAuthTemplateActions {
   CreateTemplates = "create-templates",
   DeleteTemplates = "delete-templates",
   UnlinkTemplates = "unlink-templates",
-  UseTemplates = "use-templates"
+  AttachTemplates = "attach-templates"
 }
 
 export enum OrgPermissionAdminConsoleAction {
@@ -383,7 +383,10 @@ const buildAdminPermission = () => {
     OrgPermissionMachineIdentityAuthTemplateActions.UnlinkTemplates,
     OrgPermissionSubjects.MachineIdentityAuthTemplate
   );
-  can(OrgPermissionMachineIdentityAuthTemplateActions.UseTemplates, OrgPermissionSubjects.MachineIdentityAuthTemplate);
+  can(
+    OrgPermissionMachineIdentityAuthTemplateActions.AttachTemplates,
+    OrgPermissionSubjects.MachineIdentityAuthTemplate
+  );
 
   can(OrgPermissionSecretShareAction.ManageSettings, OrgPermissionSubjects.SecretShare);
 
@@ -425,7 +428,10 @@ const buildMemberPermission = () => {
     OrgPermissionMachineIdentityAuthTemplateActions.UnlinkTemplates,
     OrgPermissionSubjects.MachineIdentityAuthTemplate
   );
-  can(OrgPermissionMachineIdentityAuthTemplateActions.UseTemplates, OrgPermissionSubjects.MachineIdentityAuthTemplate);
+  can(
+    OrgPermissionMachineIdentityAuthTemplateActions.AttachTemplates,
+    OrgPermissionSubjects.MachineIdentityAuthTemplate
+  );
 
   return rules;
 };

backend/src/services/identity-auth-template/identity-auth-template-service.ts

@@ -360,7 +360,7 @@ export const identityAuthTemplateServiceFactory = ({
       actorOrgId
     );
     ForbiddenError.from(permission).throwUnlessCan(
-      OrgPermissionMachineIdentityAuthTemplateActions.UseTemplates,
+      OrgPermissionMachineIdentityAuthTemplateActions.AttachTemplates,
       OrgPermissionSubjects.MachineIdentityAuthTemplate
     );
 

backend/src/services/identity-ldap-auth/identity-ldap-auth-service.ts

@@ -224,7 +224,7 @@ export const identityLdapAuthServiceFactory = ({
 
     if (templateId) {
       ForbiddenError.from(permission).throwUnlessCan(
-        OrgPermissionMachineIdentityAuthTemplateActions.UseTemplates,
+        OrgPermissionMachineIdentityAuthTemplateActions.AttachTemplates,
         OrgPermissionSubjects.MachineIdentityAuthTemplate
       );
     }
@@ -386,7 +386,7 @@ export const identityLdapAuthServiceFactory = ({
 
     if (templateId) {
       ForbiddenError.from(permission).throwUnlessCan(
-        OrgPermissionMachineIdentityAuthTemplateActions.UseTemplates,
+        OrgPermissionMachineIdentityAuthTemplateActions.AttachTemplates,
         OrgPermissionSubjects.MachineIdentityAuthTemplate
       );
     }

docs/internals/permissions/organization-permissions.mdx

@@ -227,4 +227,4 @@ Supports conditions and permission inversion
 | `edit-templates`   | Modify existing identity auth templates        |
 | `delete-templates` | Remove identity auth templates                 |
 | `unlink-templates` | Unlink identity auth templates from identities |
-| `use-templates`    | Attach identity auth templates to identities   |
+| `attach-templates` | Attach identity auth templates to identities   |

frontend/src/context/OrgPermissionContext/types.ts

@@ -27,7 +27,7 @@ export enum OrgPermissionMachineIdentityAuthTemplateActions {
   EditTemplates = "edit-templates",
   DeleteTemplates = "delete-templates",
   UnlinkTemplates = "unlink-templates",
-  UseTemplates = "use-templates"
+  AttachTemplates = "attach-templates"
 }
 
 export enum OrgPermissionSubjects {

frontend/src/pages/organization/AccessManagementPage/components/OrgIdentityTab/components/IdentitySection/IdentityLdapAuthForm.tsx

@@ -149,8 +149,8 @@ export const IdentityLdapAuthForm = ({
   const { data: templates } = useGetAvailableTemplates(MachineIdentityAuthMethod.LDAP);
   const { permission } = useOrgPermission();
 
-  const canUseTemplates = permission.can(
+  const canAttachTemplates = permission.can(
-    OrgPermissionMachineIdentityAuthTemplateActions.UseTemplates,
+    OrgPermissionMachineIdentityAuthTemplateActions.AttachTemplates,
     OrgPermissionSubjects.MachineIdentityAuthTemplate
   );
 
@@ -352,7 +352,7 @@ export const IdentityLdapAuthForm = ({
           <Tab value={IdentityFormTab.Advanced}>Advanced</Tab>
         </TabList>
         <TabPanel value={IdentityFormTab.Configuration}>
-          {canUseTemplates && (
+          {canAttachTemplates && (
             <Controller
               control={control}
               name="scope"

frontend/src/pages/organization/RoleByIDPage/components/OrgRoleModifySection.utils.ts

@@ -90,7 +90,7 @@ const machineIdentityAuthTemplatePermissionSchema = z
     [OrgPermissionMachineIdentityAuthTemplateActions.DeleteTemplates]: z.boolean().optional(),
     [OrgPermissionMachineIdentityAuthTemplateActions.CreateTemplates]: z.boolean().optional(),
     [OrgPermissionMachineIdentityAuthTemplateActions.UnlinkTemplates]: z.boolean().optional(),
-    [OrgPermissionMachineIdentityAuthTemplateActions.UseTemplates]: z.boolean().optional()
+    [OrgPermissionMachineIdentityAuthTemplateActions.AttachTemplates]: z.boolean().optional()
   })
   .optional();
 

frontend/src/pages/organization/RoleByIDPage/components/RolePermissionsSection/OrgPermissionMachineIdentityAuthTemplateRow.tsx

@@ -45,7 +45,7 @@ const PERMISSION_ACTIONS = [
     label: "Unlink Templates"
   },
   {
-    action: OrgPermissionMachineIdentityAuthTemplateActions.UseTemplates,
+    action: OrgPermissionMachineIdentityAuthTemplateActions.AttachTemplates,
     label: "Attach Templates"
   }
 ] as const;
@@ -108,7 +108,7 @@ export const OrgPermissionMachineIdentityAuthTemplateRow = ({
             [OrgPermissionMachineIdentityAuthTemplateActions.CreateTemplates]: true,
             [OrgPermissionMachineIdentityAuthTemplateActions.DeleteTemplates]: true,
             [OrgPermissionMachineIdentityAuthTemplateActions.UnlinkTemplates]: true,
-            [OrgPermissionMachineIdentityAuthTemplateActions.UseTemplates]: true
+            [OrgPermissionMachineIdentityAuthTemplateActions.AttachTemplates]: true
           },
           { shouldDirty: true }
         );
@@ -122,7 +122,7 @@ export const OrgPermissionMachineIdentityAuthTemplateRow = ({
             [OrgPermissionMachineIdentityAuthTemplateActions.CreateTemplates]: false,
             [OrgPermissionMachineIdentityAuthTemplateActions.DeleteTemplates]: false,
             [OrgPermissionMachineIdentityAuthTemplateActions.UnlinkTemplates]: false,
-            [OrgPermissionMachineIdentityAuthTemplateActions.UseTemplates]: true
+            [OrgPermissionMachineIdentityAuthTemplateActions.AttachTemplates]: true
           },
           { shouldDirty: true }
         );
@@ -138,7 +138,7 @@ export const OrgPermissionMachineIdentityAuthTemplateRow = ({
             [OrgPermissionMachineIdentityAuthTemplateActions.CreateTemplates]: false,
             [OrgPermissionMachineIdentityAuthTemplateActions.DeleteTemplates]: false,
             [OrgPermissionMachineIdentityAuthTemplateActions.UnlinkTemplates]: false,
-            [OrgPermissionMachineIdentityAuthTemplateActions.UseTemplates]: false
+            [OrgPermissionMachineIdentityAuthTemplateActions.AttachTemplates]: false
           },
           { shouldDirty: true }
         );