# List of loggable service actions

resource: system:auth-client
service: authClient

# Default sensitivity for actions
defaultActionSeverity: notice

# default severity for errors
defaultErrorSeverity: error

import:
  - github.com/cortezaproject/corteza/server/system/types

props:
  - name: authClient
    type: "*types.AuthClient"
    fields: [ handle, ID ]
  - name: new
    type: "*types.AuthClient"
    fields: [ handle, ID ]
  - name: update
    type: "*types.AuthClient"
    fields: [ handle, ID ]
  - name: filter
    type: "*types.AuthClientFilter"
    fields: [ handle, deleted, sort ]

actions:
  - action: search
    log: "searched for auth clients"
    severity: info

  - action: lookup
    log: "looked-up for a {{authClient}}"
    severity: info

  - action: create
    log: "created {{authClient}}"

  - action: update
    log: "updated {{authClient}}"

  - action: delete
    log: "deleted {{authClient}}"

  - action: undelete
    log: "undeleted {{authClient}}"

  - action: exposeSecret
    log: "secret exposed"

  - action: regenerateSecret
    log: "secret regenerated"
errors:
  - error: notFound
    message: "auth client not found"
    severity: warning

  - error: invalidID
    message: "invalid ID"
    severity: warning

  - error: staleData
    message: "auth client was modified by someone else or by a workflow after you've opened it. Please refresh to see the latest updated version"
    severity: warning

  - error: missingName
    message: "missing name"

  - error: unknownGrantType
    message: "unknown grant type"

  - error: unknownScope
    message: "unknown scope"

  - error: unableToChangeDefaultClientHandle
    message: "unable to change the handle of the default auth client"
    log: "failed to update {{authClient}}; unable to change the default auth client handle"

  - error: unableToDisableDefaultClient
    message: "unable to disable the default auth client"
    log: "failed to update {{authClient}}; unable to disable the default auth client"

  - error: unableToDeleteDefaultClient
    message: "unable to delete the default auth client"
    log: "failed to update {{authClient}}; unable to delete the default auth client"

  - error: notAllowedToRead
    message: "not allowed to read this auth client"
    log: "failed to read {{authClient}}; insufficient permissions"

  - error: notAllowedToSearch
    message: "not allowed to search or list auth clients"
    log: "failed to search or list authClient; insufficient permissions"

  - error: notAllowedToCreate
    message: "not allowed to create auth clients"
    log: "failed to create authClient; insufficient permissions"

  - error: notAllowedToUpdate
    message: "not allowed to update this auth client"
    log: "failed to update {{authClient}}; insufficient permissions"

  - error: notAllowedToDelete
    message: "not allowed to delete this auth client"
    log: "failed to delete {{authClient}}; insufficient permissions"

  - error: notAllowedToUndelete
    message: "not allowed to undelete this auth client"
    log: "failed to undelete {{authClient}}; insufficient permissions"