Some checks failed
SonarQube / SonarQube (push) Failing after 5m28s
E2e test on main branch push / server and client test (map[name:admin port:8080]) (push) Failing after 3m33s
Server and lib tests / Library test (js) (push) Failing after 1m36s
Server and lib tests / Library test (vue) (push) Successful in 2m24s
Server and lib tests / Web client test (admin) (push) Successful in 2m52s
Server and lib tests / Web client test (compose) (push) Successful in 3m23s
Server and lib tests / Web client test (discovery) (push) Successful in 2m49s
Server and lib tests / Web client test (one) (push) Successful in 2m52s
Server and lib tests / Web client test (privacy) (push) Successful in 2m44s
Server and lib tests / Web client test (reporter) (push) Successful in 2m56s
Server and lib tests / Web client test (workflow) (push) Successful in 3m0s
Server and lib tests / Server tests (push) Failing after 4m55s
E2e test on main branch push / notify-failure (push) Failing after 9s
Server and lib tests / Send matrix testing notification (push) Successful in 2s
Mark stale issues and pull requests / stale (push) Successful in 40s
151 lines
3.9 KiB
YAML
151 lines
3.9 KiB
YAML
# List of loggable service actions
|
|
|
|
resource: system:role
|
|
service: role
|
|
|
|
# Default sensitivity for actions
|
|
defaultActionSeverity: notice
|
|
|
|
# default severity for errors
|
|
defaultErrorSeverity: alert
|
|
|
|
import:
|
|
- github.com/cortezaproject/corteza/server/system/types
|
|
|
|
props:
|
|
- name: member
|
|
type: "*types.User"
|
|
fields: [ handle, email, name, ID ]
|
|
- name: group
|
|
type: "*types.UserGroup"
|
|
fields: [ handle, ID ]
|
|
- name: role
|
|
type: "*types.Role"
|
|
fields: [ handle, name, ID ]
|
|
- name: new
|
|
type: "*types.Role"
|
|
fields: [ handle, name, ID ]
|
|
- name: update
|
|
type: "*types.Role"
|
|
fields: [ handle, name, ID ]
|
|
- name: existing
|
|
type: "*types.Role"
|
|
fields: [ handle, name, ID ]
|
|
- name: target
|
|
type: "*types.Role"
|
|
fields: [ handle, name, ID ]
|
|
- name: filter
|
|
type: "*types.RoleFilter"
|
|
fields: [ query, roleID, memberID, handle, name, deleted, archived, sort ]
|
|
|
|
actions:
|
|
- action: search
|
|
log: "searched for roles"
|
|
severity: info
|
|
|
|
- action: lookup
|
|
log: "looked-up for a {{role}}"
|
|
severity: info
|
|
|
|
- action: create
|
|
log: "created {{role}}"
|
|
|
|
- action: update
|
|
log: "updated {{role}}"
|
|
|
|
- action: delete
|
|
log: "deleted {{role}}"
|
|
|
|
- action: undelete
|
|
log: "undeleted {{role}}"
|
|
|
|
- action: archive
|
|
log: "archived {{role}}"
|
|
|
|
- action: unarchive
|
|
log: "unarchived {{role}}"
|
|
|
|
- action: merge
|
|
log: "merged {{target}} with {{role}}"
|
|
|
|
- action: members
|
|
log: "searched for members of {{role}}"
|
|
|
|
- action: memberAdd
|
|
log: "added {{member.email}} to {{role}}"
|
|
|
|
- action: memberRemove
|
|
log: "removed {{member.email}} from {{role}}"
|
|
|
|
|
|
errors:
|
|
- error: notFound
|
|
message: "role not found"
|
|
severity: warning
|
|
|
|
- error: invalidID
|
|
message: "invalid ID"
|
|
severity: warning
|
|
|
|
- error: invalidHandle
|
|
message: "invalid handle"
|
|
severity: warning
|
|
|
|
- error: staleData
|
|
message: "role was modified by someone else or by a workflow after you've opened it. Please refresh to see the latest updated version"
|
|
severity: warning
|
|
|
|
- error: searchByMemberUserGroup
|
|
message: "can't search by both member and user group"
|
|
log: "failed to search or list roles; can't search by both member and user group"
|
|
|
|
- error: notAllowedToRead
|
|
message: "not allowed to read this role"
|
|
log: "failed to read {{role.handle}}; insufficient permissions"
|
|
|
|
- error: notAllowedToSearch
|
|
message: "not allowed to search or list roles"
|
|
log: "failed to search or list roles; insufficient permissions"
|
|
|
|
- error: notAllowedToCreate
|
|
message: "not allowed to create roles"
|
|
log: "failed to create role; insufficient permissions"
|
|
|
|
- error: notAllowedToUpdate
|
|
message: "not allowed to update this role"
|
|
log: "failed to update {{role.handle}}; insufficient permissions"
|
|
|
|
- error: notAllowedToDelete
|
|
message: "not allowed to delete this role"
|
|
log: "failed to delete {{role.handle}}; insufficient permissions"
|
|
|
|
- error: notAllowedToUndelete
|
|
message: "not allowed to undelete this role"
|
|
log: "failed to undelete {{role.handle}}; insufficient permissions"
|
|
|
|
- error: notAllowedToArchive
|
|
message: "not allowed to archive this role"
|
|
log: "failed to archive {{role.handle}}; insufficient permissions"
|
|
|
|
- error: notAllowedToUnarchive
|
|
message: "not allowed to unarchive this role"
|
|
log: "failed to unarchive {{role.handle}}; insufficient permissions"
|
|
|
|
- error: notAllowedToCloneRules
|
|
message: "not allowed to clone rules of this role"
|
|
log: "failed to clone rules of {{role.handle}}; insufficient permissions"
|
|
|
|
- error: notAllowedToManageMembers
|
|
message: "not allowed to manage role members"
|
|
log: "failed to manage {{role.handle}} members; insufficient permissions"
|
|
|
|
- error: handleNotUnique
|
|
message: "role handle not unique"
|
|
log: "used duplicate handle ({{role.handle}}) for role"
|
|
severity: warning
|
|
|
|
- error: nameNotUnique
|
|
message: "role name not unique"
|
|
log: "used duplicate name ({{role.name}}) for role"
|
|
severity: warning
|