upstream-corteza/locale/en/corteza-webapp-compose/permissions.yaml

ui:
  save: Save changes
  cancel: Cancel
  set-for: Set permissions for {{target}}
  loading: Loading permissions
  label: Permissions

  notification:
    save:
      success: Permissions saved
      failed: Failed to save permissions

  edit:
    title: Edit permissions
    label: User roles
    description: Select role to set permissions

  evaluate:
    title: Evaluate permissions
    description: Evaluate applied permissions

  add:
    label: Add
    title: Evaluate permissions
    save: Save & Close
    role:
      label: Roles
      placeholder: Select role(s)
    user:
      label: Users
      placeholder: Search or select a user

  tooltip:
    unknown-context:
      user: Can not evaluate permission for a user with contextual role on a non-specific resource
      role: Can not evaluate permission for contextual role on a non-specific resource

  access:
    allow: Allow
    inherit: Inherit
    deny: Deny

resources:
  compose:
    namespace:
      all: all namespaces
      specific: namespace "{{target}}"
      tooltip: Namespace permissions
      operations:
        read:
          description: ""
          specific: Read namespace "{{target}}"
          title: Read any namespace
        update:
          description: ""
          specific: Update namespace "{{target}}"
          title: Update any namespace
        delete:
          description: ""
          specific: Delete namespace "{{target}}"
          title: Delete any namespace
        manage:
          description: Allow access to namespace's admin pages
          specific: Manage namespace "{{target}}"
          title: Manage any namespace
        export:
          description: ""
          specific: Export namespace "{{target}}"
          title: Export any namespace
        module.create:
          description: ""
          specific: Create modules under namespace "{{target}}"
          title: Create modules under any namespace
        modules.export:
          description: ""
          specific: Export modules in namespace "{{target}}"
          title: Export modules in any namespace
        modules.search:
          description: ""
          specific: List and search modules under namespace "{{target}}"
          title: List and search modules under any namespace
        page.create:
          description: ""
          specific: Create pages under namespace "{{target}}"
          title: Create pages under any namespace
        pages.search:
          description: ""
          specific: List and search pages under namespace "{{target}}"
          title: List and search pages under any namespace
        pages.export:
          description: ""
          specific: Export pages in namespace "{{target}}"
          title: Export pages in any namespace
        chart.create:
          description: ""
          specific: Create charts under namespace "{{target}}"
          title: Create charts under any namespace
        charts.search:
          description: ""
          specific: List and search charts under namespace "{{target}}"
          title: List and search charts under any namespace
        charts.export:
          description: ""
          specific: Export charts in namespace "{{target}}"
          title: Export charts in any namespace

    chart:
      all: all charts
      specific: chart "{{target}}"
      tooltip: Chart permissions
      operations:
        delete:
          description: 'Default: deny'
          specific: Delete chart "{{target}}"
          title: Delete any chart
        read:
          description: 'Default: deny'
          specific: Read chart "{{target}}"
          title: Read any chart
        update:
          description: 'Default: deny'
          specific: Update chart "{{target}}"
          title: Update any chart

    module:
      all: all modules
      specific: module "{{target}}"
      tooltip: Module permissions
      operations:
        delete:
          description: 'Default: deny'
          specific: Delete module "{{target}}"
          title: Delete any module
        read:
          description: 'Default: deny'
          specific: Read module "{{target}}"
          title: Read any module
        record.create:
          description: 'Default: deny'
          specific: Create record of module "{{target}}"
          title: Create record of any module
        records.search:
          description: 'Default: deny'
          specific: List and search records of module "{{target}}"
          title: List and search records of any module
        update:
          description: 'Default: deny'
          specific: Update module "{{target}}"
          title: Update any module
        'owned-record.create':
          description: 'Default: deny'
          specific: Manage owner when creating record for module "{{target}}"
          title: Manage owner when creating record for any module
          all-specific: Manage owner when creating record for module "{{ target }}"

    module-field:
      all: all module fields
      specific: field "{{target}}"
      all-specific: all module fields of module "{{ target }}"
      tooltip: Module field permissions
      operations:
        record.value.read:
          description: 'Default: deny'
          specific: 'Read "{{target}}" record fields '
          title: Read record fields of any module
          all-specific: Read record fields of module "{{ target }}"
        record.value.update:
          description: 'Default: deny'
          specific: 'Update "{{target}}" record field values'
          title: Update record field values of any module
          all-specific: Update record field values of module "{{ target }}"

    page:
      all: all pages
      specific: page "{{target}}"
      tooltip: Page permissions
      operations:
        delete:
          description: 'Default: deny'
          specific: Delete page "{{target}}"
          title: Delete any page
        read:
          description: 'Default: deny'
          specific: Read page "{{target}}"
          title: Read any page
        update:
          description: 'Default: deny'
          specific: Update page "{{target}}"
          title: Update any page
        page-layout.create:
          description: 'Default: deny'
          specific: Create page layouts for page "{{target}}"
          title: Create page layout
        page-layouts.search:
          description: 'Default: deny'
          specific: List page layouts for page "{{target}}"
          title: List page layout

    page-layout:
      all: all page layouts
      specific: page layout "{{target}}"
      tooltip: Page layout permissions
      all-specific: all page layouts of page "{{ target }}"
      operations:
        read:
          description: 'Default: deny'
          specific: Read page layout "{{target}}"
          title: Read any page layout
          all-specific: Read page layouts of page "{{ target }}"
        update:
          description: 'Default: deny'
          specific: Update page layout "{{target}}"
          title: Update any page layout
          all-specific: Update page layouts of page "{{ target }}"
        delete:
          description: 'Default: deny'
          specific: Delete page layout "{{target}}"
          title: Delete any page layout
          all-specific: Delete page layouts of page "{{ target }}"

    record:
      all: all records
      specific: record "{{target}}"
      all-specific: all records of module "{{ target }}"
      tooltip: Record permissions
      operations:
        delete:
          description: 'Default: deny'
          specific: Delete record "{{target}}"
          title: Delete records of any module
          all-specific: Delete records of module "{{ target }}"
        undelete:
          description: 'Default: deny'
          specific: Restore record "{{target}}"
          title: Restore records of any module
          all-specific: Restore records of module "{{ target }}"
        read:
          description: 'Default: deny'
          specific: Read record "{{target}}"
          title: Read records of any module
          all-specific: Read records of module "{{ target }}"
        update:
          description: 'Default: deny'
          specific: Update record "{{target}}"
          title: Update records of any module
          all-specific: Update records of module "{{ target }}"
        'owner.manage':
          description: 'Default: deny'
          specific: Manage owner of record "{{target}}"
          title: Manage record owners of any module
          all-specific: Manage record owners of module "{{ target }}"
        'revisions.search':
          description: 'Default: deny'
          specific: Access revisions of record "{{target}}"
          title: Access record revisions
          all-specific: Access record revisions