# List of loggable service actions

resource: system:role
service: role

# Default sensitivity for actions
defaultActionSeverity: notice

# default severity for errors
defaultErrorSeverity: alert

import:
  - github.com/cortezaproject/corteza/server/system/types

props:
  - name: member
    type: "*types.User"
    fields: [ handle, email, name, ID ]
  - name: group
    type: "*types.UserGroup"
    fields: [ handle, ID ]
  - name: role
    type: "*types.Role"
    fields: [ handle, name, ID ]
  - name: new
    type: "*types.Role"
    fields: [ handle, name, ID ]
  - name: update
    type: "*types.Role"
    fields: [ handle, name, ID ]
  - name: existing
    type: "*types.Role"
    fields: [ handle, name, ID ]
  - name: target
    type: "*types.Role"
    fields: [ handle, name, ID ]
  - name: filter
    type: "*types.RoleFilter"
    fields: [ query, roleID, memberID, handle, name, deleted, archived, sort ]

actions:
  - action: search
    log: "searched for roles"
    severity: info

  - action: lookup
    log: "looked-up for a {{role}}"
    severity: info

  - action: create
    log: "created {{role}}"

  - action: update
    log: "updated {{role}}"

  - action: delete
    log: "deleted {{role}}"

  - action: undelete
    log: "undeleted {{role}}"

  - action: archive
    log: "archived {{role}}"

  - action: unarchive
    log: "unarchived {{role}}"

  - action: merge
    log: "merged {{target}} with {{role}}"

  - action: members
    log: "searched for members of {{role}}"

  - action: memberAdd
    log: "added {{member.email}} to {{role}}"

  - action: memberRemove
    log: "removed {{member.email}} from {{role}}"


errors:
  - error: notFound
    message: "role not found"
    severity: warning

  - error: invalidID
    message: "invalid ID"
    severity: warning

  - error: invalidHandle
    message: "invalid handle"
    severity: warning

  - error: staleData
    message: "role was modified by someone else or by a workflow after you've opened it. Please refresh to see the latest updated version"
    severity: warning

  - error: searchByMemberUserGroup
    message: "can't search by both member and user group"
    log: "failed to search or list roles; can't search by both member and user group"

  - error: notAllowedToRead
    message: "not allowed to read this role"
    log: "failed to read {{role.handle}}; insufficient permissions"

  - error: notAllowedToSearch
    message: "not allowed to search or list roles"
    log: "failed to search or list roles; insufficient permissions"

  - error: notAllowedToCreate
    message: "not allowed to create roles"
    log: "failed to create role; insufficient permissions"

  - error: notAllowedToUpdate
    message: "not allowed to update this role"
    log: "failed to update {{role.handle}}; insufficient permissions"

  - error: notAllowedToDelete
    message: "not allowed to delete this role"
    log: "failed to delete {{role.handle}}; insufficient permissions"

  - error: notAllowedToUndelete
    message: "not allowed to undelete this role"
    log: "failed to undelete {{role.handle}}; insufficient permissions"

  - error: notAllowedToArchive
    message: "not allowed to archive this role"
    log: "failed to archive {{role.handle}}; insufficient permissions"

  - error: notAllowedToUnarchive
    message: "not allowed to unarchive this role"
    log: "failed to unarchive {{role.handle}}; insufficient permissions"

  - error: notAllowedToCloneRules
    message: "not allowed to clone rules of this role"
    log: "failed to clone rules of {{role.handle}}; insufficient permissions"

  - error: notAllowedToManageMembers
    message: "not allowed to manage role members"
    log: "failed to manage {{role.handle}} members; insufficient permissions"

  - error: handleNotUnique
    message: "role handle not unique"
    log: "used duplicate handle ({{role.handle}}) for role"
    severity: warning

  - error: nameNotUnique
    message: "role name not unique"
    log: "used duplicate name ({{role.name}}) for role"
    severity: warning