mirror of
https://github.com/coder/coder.git
synced 2025-07-09 11:45:56 +00:00
dd161b172e
- Adds a template_insights pseudo-resource - Grants auditor and template admin roles read access on template_insights - Updates existing RBAC checks to check for read template_insights, falling back to template update permissions where necessary - Updates TemplateLayout to show Insights tab if can read template_insights or can update template
76 lines
2.4 KiB
Go
76 lines
2.4 KiB
Go
package codersdk
|
|
|
|
type RBACResource string
|
|
|
|
const (
|
|
ResourceWorkspace RBACResource = "workspace"
|
|
ResourceWorkspaceProxy RBACResource = "workspace_proxy"
|
|
ResourceWorkspaceExecution RBACResource = "workspace_execution"
|
|
ResourceWorkspaceApplicationConnect RBACResource = "application_connect"
|
|
ResourceAuditLog RBACResource = "audit_log"
|
|
ResourceTemplate RBACResource = "template"
|
|
ResourceGroup RBACResource = "group"
|
|
ResourceFile RBACResource = "file"
|
|
ResourceProvisionerDaemon RBACResource = "provisioner_daemon"
|
|
ResourceOrganization RBACResource = "organization"
|
|
ResourceRoleAssignment RBACResource = "assign_role"
|
|
ResourceOrgRoleAssignment RBACResource = "assign_org_role"
|
|
ResourceAPIKey RBACResource = "api_key"
|
|
ResourceUser RBACResource = "user"
|
|
ResourceUserData RBACResource = "user_data"
|
|
ResourceOrganizationMember RBACResource = "organization_member"
|
|
ResourceLicense RBACResource = "license"
|
|
ResourceDeploymentValues RBACResource = "deployment_config"
|
|
ResourceDeploymentStats RBACResource = "deployment_stats"
|
|
ResourceReplicas RBACResource = "replicas"
|
|
ResourceDebugInfo RBACResource = "debug_info"
|
|
ResourceSystem RBACResource = "system"
|
|
ResourceTemplateInsights RBACResource = "template_insights"
|
|
)
|
|
|
|
const (
|
|
ActionCreate = "create"
|
|
ActionRead = "read"
|
|
ActionUpdate = "update"
|
|
ActionDelete = "delete"
|
|
)
|
|
|
|
var (
|
|
AllRBACResources = []RBACResource{
|
|
ResourceWorkspace,
|
|
ResourceWorkspaceProxy,
|
|
ResourceWorkspaceExecution,
|
|
ResourceWorkspaceApplicationConnect,
|
|
ResourceAuditLog,
|
|
ResourceTemplate,
|
|
ResourceGroup,
|
|
ResourceFile,
|
|
ResourceProvisionerDaemon,
|
|
ResourceOrganization,
|
|
ResourceRoleAssignment,
|
|
ResourceOrgRoleAssignment,
|
|
ResourceAPIKey,
|
|
ResourceUser,
|
|
ResourceUserData,
|
|
ResourceOrganizationMember,
|
|
ResourceLicense,
|
|
ResourceDeploymentValues,
|
|
ResourceDeploymentStats,
|
|
ResourceReplicas,
|
|
ResourceDebugInfo,
|
|
ResourceSystem,
|
|
ResourceTemplateInsights,
|
|
}
|
|
|
|
AllRBACActions = []string{
|
|
ActionCreate,
|
|
ActionRead,
|
|
ActionUpdate,
|
|
ActionDelete,
|
|
}
|
|
)
|
|
|
|
func (r RBACResource) String() string {
|
|
return string(r)
|
|
}
|