awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-11 12:29:26 +00:00
Code Issues Packages Projects Releases Wiki Activity

grant permissions

Browse Source
This commit is contained in:
x032205
2025-12-07 22:26:41 -05:00
parent 2fe316c81c
commit bfb682b715
5 changed files with 104 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/src/services/approval-policy/approval-policy-service.ts
+43 -6
View File
@@ -38,6 +38,7 @@ import { ForbiddenError } from "@casl/ability";
import {
ProjectPermissionActions,
ProjectPermissionApprovalRequestActions,
ProjectPermissionApprovalRequestGrantActions,
ProjectPermissionSub
} from "@app/ee/services/permission/project-permission";
@@ -87,7 +88,7 @@ export const approvalPolicyServiceFactory = ({
if (userIdsToNotify.size === 0) return;
// TODO: Potentially link to requests in the future?
// TODO: Potentially link to requests in the future to support click redirects
await notificationService.createUserNotifications(
Array.from(userIdsToNotify).map((userId) => ({
userId,
@@ -793,20 +794,44 @@ export const approvalPolicyServiceFactory = ({
};
const listGrants = async (policyType: ApprovalPolicyType, projectId: string, actor: OrgServiceActor) => {
// TODO(andrey): Perm check
const { permission } = await permissionService.getProjectPermission({
actor: actor.type,
actorAuthMethod: actor.authMethod,
actorId: actor.id,
actorOrgId: actor.orgId,
projectId,
actionProjectType: ActionProjectType.Any
});
ForbiddenError.from(permission).throwUnlessCan(
ProjectPermissionApprovalRequestGrantActions.Read,
ProjectPermissionSub.ApprovalRequestGrants
);
const grants = await approvalRequestGrantsDAL.find({ projectId, type: policyType });
return { grants };
};
const getGrantById = async (grantId: string, actor: OrgServiceActor) => {
// TODO(andrey): Perm check
const grant = await approvalRequestGrantsDAL.findById(grantId);
if (!grant) {
throw new NotFoundError({ message: "Grant not found" });
}
const { permission } = await permissionService.getProjectPermission({
actor: actor.type,
actorAuthMethod: actor.authMethod,
actorId: actor.id,
actorOrgId: actor.orgId,
projectId: grant.projectId,
actionProjectType: ActionProjectType.Any
});
ForbiddenError.from(permission).throwUnlessCan(
ProjectPermissionApprovalRequestGrantActions.Read,
ProjectPermissionSub.ApprovalRequestGrants
);
return { grant };
};
@@ -815,13 +840,25 @@ export const approvalPolicyServiceFactory = ({
{ revocationReason }: { revocationReason?: string },
actor: OrgServiceActor
) => {
// TODO(andrey): Perm check
const grant = await approvalRequestGrantsDAL.findById(grantId);
if (!grant) {
throw new NotFoundError({ message: "Grant not found" });
}
const { permission } = await permissionService.getProjectPermission({
actor: actor.type,
actorAuthMethod: actor.authMethod,
actorId: actor.id,
actorOrgId: actor.orgId,
projectId: grant.projectId,
actionProjectType: ActionProjectType.Any
});
ForbiddenError.from(permission).throwUnlessCan(
ProjectPermissionApprovalRequestGrantActions.Revoke,
ProjectPermissionSub.ApprovalRequestGrants
);
if (grant.status !== ApprovalRequestGrantStatus.Active) {
throw new BadRequestError({ message: "Grant is not active" });
}