# List of loggable service actions

resource: system:credentials
service: credentials

# Default sensitivity for actions
defaultActionSeverity: notice

# default severity for errors
defaultErrorSeverity: alert

import:
  - github.com/cortezaproject/corteza/server/system/types

props:
  - name: user
    type: "*types.User"
    fields: [ handle, email, name, username, ID ]
  - name: credentials
    type: "*types.Credential"
    fields: [ kind ]

actions:
  - action: search
    log: "searched for matching users"
    severity: info

  - action: delete
    log: "deleted {{user}}"

  - action: create
    log: "created {{user}}"

  - action: update
    log: "updated {{user}}"

errors:
  - error: notFound
    message: "credentials not found"
    severity: warning

  - error: invalidID
    message: "invalid ID"
    severity: warning

  - error: notAllowedToManage
    message: "not allowed to manage credentials for this user"
    log: "failed to manage credentials for {{user.handle}}; insufficient permissions"