mirror of
https://github.com/awatertrevi/infisical.git
synced 2026-10-04 06:26:16 +00:00
feat: correct permission action names
This commit is contained in:
@@ -15,7 +15,7 @@ export enum OrgPermissionActions {
|
|||||||
Delete = "delete"
|
Delete = "delete"
|
||||||
}
|
}
|
||||||
|
|
||||||
export enum OrgPermissionChildOrgActions {
|
export enum OrgPermissionSubOrgActions {
|
||||||
Create = "create",
|
Create = "create",
|
||||||
DirectAccess = "direct-access"
|
DirectAccess = "direct-access"
|
||||||
}
|
}
|
||||||
@@ -123,7 +123,7 @@ export enum OrgPermissionSubjects {
|
|||||||
Gateway = "gateway",
|
Gateway = "gateway",
|
||||||
Relay = "relay",
|
Relay = "relay",
|
||||||
SecretShare = "secret-share",
|
SecretShare = "secret-share",
|
||||||
ChildOrganization = "child-organization"
|
SubOrganization = "sub-organization"
|
||||||
}
|
}
|
||||||
|
|
||||||
export type AppConnectionSubjectFields = {
|
export type AppConnectionSubjectFields = {
|
||||||
@@ -134,7 +134,7 @@ export type OrgPermissionSet =
|
|||||||
| [OrgPermissionActions.Create, OrgPermissionSubjects.Workspace]
|
| [OrgPermissionActions.Create, OrgPermissionSubjects.Workspace]
|
||||||
| [OrgPermissionActions.Create, OrgPermissionSubjects.Project]
|
| [OrgPermissionActions.Create, OrgPermissionSubjects.Project]
|
||||||
| [OrgPermissionActions, OrgPermissionSubjects.Role]
|
| [OrgPermissionActions, OrgPermissionSubjects.Role]
|
||||||
| [OrgPermissionChildOrgActions, OrgPermissionSubjects.ChildOrganization]
|
| [OrgPermissionSubOrgActions, OrgPermissionSubjects.SubOrganization]
|
||||||
| [OrgPermissionActions, OrgPermissionSubjects.Member]
|
| [OrgPermissionActions, OrgPermissionSubjects.Member]
|
||||||
| [OrgPermissionActions, OrgPermissionSubjects.Settings]
|
| [OrgPermissionActions, OrgPermissionSubjects.Settings]
|
||||||
| [OrgPermissionActions, OrgPermissionSubjects.IncidentAccount]
|
| [OrgPermissionActions, OrgPermissionSubjects.IncidentAccount]
|
||||||
@@ -193,8 +193,8 @@ export const OrgPermissionSchema = z.discriminatedUnion("subject", [
|
|||||||
action: CASL_ACTION_SCHEMA_NATIVE_ENUM(OrgPermissionActions).describe("Describe what action an entity can take.")
|
action: CASL_ACTION_SCHEMA_NATIVE_ENUM(OrgPermissionActions).describe("Describe what action an entity can take.")
|
||||||
}),
|
}),
|
||||||
z.object({
|
z.object({
|
||||||
subject: z.literal(OrgPermissionSubjects.ChildOrganization).describe("The entity this permission pertains to."),
|
subject: z.literal(OrgPermissionSubjects.SubOrganization).describe("The entity this permission pertains to."),
|
||||||
action: CASL_ACTION_SCHEMA_NATIVE_ENUM(OrgPermissionChildOrgActions).describe(
|
action: CASL_ACTION_SCHEMA_NATIVE_ENUM(OrgPermissionSubOrgActions).describe(
|
||||||
"Describe what action an entity can take."
|
"Describe what action an entity can take."
|
||||||
)
|
)
|
||||||
}),
|
}),
|
||||||
@@ -322,8 +322,8 @@ const buildAdminPermission = () => {
|
|||||||
can(OrgPermissionActions.Create, OrgPermissionSubjects.Workspace);
|
can(OrgPermissionActions.Create, OrgPermissionSubjects.Workspace);
|
||||||
can(OrgPermissionActions.Create, OrgPermissionSubjects.Project);
|
can(OrgPermissionActions.Create, OrgPermissionSubjects.Project);
|
||||||
|
|
||||||
can(OrgPermissionChildOrgActions.Create, OrgPermissionSubjects.ChildOrganization);
|
can(OrgPermissionSubOrgActions.Create, OrgPermissionSubjects.SubOrganization);
|
||||||
can(OrgPermissionChildOrgActions.DirectAccess, OrgPermissionSubjects.ChildOrganization);
|
can(OrgPermissionSubOrgActions.DirectAccess, OrgPermissionSubjects.SubOrganization);
|
||||||
|
|
||||||
// role permission
|
// role permission
|
||||||
can(OrgPermissionActions.Read, OrgPermissionSubjects.Role);
|
can(OrgPermissionActions.Read, OrgPermissionSubjects.Role);
|
||||||
|
|||||||
@@ -8,11 +8,7 @@ import { TMembershipRoleDALFactory } from "@app/services/membership/membership-r
|
|||||||
import { TOrgDALFactory } from "@app/services/org/org-dal";
|
import { TOrgDALFactory } from "@app/services/org/org-dal";
|
||||||
|
|
||||||
import { TLicenseServiceFactory } from "../license/license-service";
|
import { TLicenseServiceFactory } from "../license/license-service";
|
||||||
import {
|
import { OrgPermissionActions, OrgPermissionSubjects, OrgPermissionSubOrgActions } from "../permission/org-permission";
|
||||||
OrgPermissionActions,
|
|
||||||
OrgPermissionChildOrgActions,
|
|
||||||
OrgPermissionSubjects
|
|
||||||
} from "../permission/org-permission";
|
|
||||||
import { TPermissionServiceFactory } from "../permission/permission-service-types";
|
import { TPermissionServiceFactory } from "../permission/permission-service-types";
|
||||||
import { TCreateSubOrgDTO, TListSubOrgDTO, TUpdateSubOrgDTO } from "./sub-org-types";
|
import { TCreateSubOrgDTO, TListSubOrgDTO, TUpdateSubOrgDTO } from "./sub-org-types";
|
||||||
|
|
||||||
@@ -47,8 +43,8 @@ export const subOrgServiceFactory = ({
|
|||||||
});
|
});
|
||||||
|
|
||||||
ForbiddenError.from(permission).throwUnlessCan(
|
ForbiddenError.from(permission).throwUnlessCan(
|
||||||
OrgPermissionChildOrgActions.Create,
|
OrgPermissionSubOrgActions.Create,
|
||||||
OrgPermissionSubjects.ChildOrganization
|
OrgPermissionSubjects.SubOrganization
|
||||||
);
|
);
|
||||||
|
|
||||||
const orgLicensePlan = await licenseService.getPlan(permissionActor.rootOrgId);
|
const orgLicensePlan = await licenseService.getPlan(permissionActor.rootOrgId);
|
||||||
|
|||||||
@@ -112,7 +112,7 @@ export const integrationAuthServiceFactory = ({
|
|||||||
};
|
};
|
||||||
|
|
||||||
const listOrgIntegrationAuth = async ({ actorId, actor, actorOrgId, actorAuthMethod }: TGenericPermission) => {
|
const listOrgIntegrationAuth = async ({ actorId, actor, actorOrgId, actorAuthMethod }: TGenericPermission) => {
|
||||||
const authorizations = await integrationAuthDAL.getByOrg(actorOrgId as string);
|
const authorizations = await integrationAuthDAL.getByOrg(actorOrgId);
|
||||||
|
|
||||||
const filteredAuthorizations = await Promise.all(
|
const filteredAuthorizations = await Promise.all(
|
||||||
authorizations.map(async (auth) => {
|
authorizations.map(async (auth) => {
|
||||||
|
|||||||
Reference in New Issue
Block a user