snapshot of https://github.com/espocrm/espocrm.git (master, 2026-09-18; blobs > 131072B omitted)

application/Espo/Resources/metadata/entityAcl/ActionHistoryRecord.json

@@ -0,0 +1,3 @@
+{
+    "systemWriteForbidden": true
+}

application/Espo/Resources/metadata/entityAcl/AppSecret.json

@@ -0,0 +1,7 @@
+{
+    "fields": {
+        "value": {
+            "internal": true
+        }
+    }
+}

application/Espo/Resources/metadata/entityAcl/ArrayValue.json

@@ -0,0 +1,3 @@
+{
+    "systemWriteForbidden": true
+}

application/Espo/Resources/metadata/entityAcl/Attachment.json

@@ -0,0 +1,13 @@
+{
+    "fields": {
+        "storage": {
+            "readOnly": true
+        },
+        "source": {
+            "readOnly": true
+        },
+        "sourceId": {
+            "readOnly": true
+        }
+    }
+}

application/Espo/Resources/metadata/entityAcl/AuthLogRecord.json

@@ -0,0 +1,35 @@
+{
+    "fields": {
+        "username": {
+            "readOnly": true
+        },
+        "portal": {
+            "readOnly": true
+        },
+        "user": {
+            "readOnly": true
+        },
+        "ipAddress": {
+            "readOnly": true
+        },
+        "authToken": {
+            "readOnly": true
+        },
+        "isDenied": {
+            "readOnly": true
+        },
+        "denialReason": {
+            "readOnly": true
+        },
+        "microtime": {
+            "readOnly": true
+        },
+        "requestUrl": {
+            "readOnly": true
+        },
+        "requestMethod": {
+            "readOnly": true
+        }
+    },
+    "systemWriteForbidden": true
+}

application/Espo/Resources/metadata/entityAcl/AuthToken.json

@@ -0,0 +1,38 @@
+{
+    "fields": {
+        "hash": {
+            "forbidden": true,
+            "readOnly": true
+        },
+        "token": {
+            "forbidden": true,
+            "readOnly": true
+        },
+        "secret": {
+            "forbidden": true,
+            "readOnly": true
+        },
+        "portal": {
+            "readOnly": true
+        },
+        "user": {
+            "readOnly": true
+        },
+        "ipAddress": {
+            "readOnly": true
+        },
+        "lastAccess": {
+            "readOnly": true
+        },
+        "passwordVersion": {
+            "forbidden": true
+        },
+        "createdAt": {
+            "readOnly": true
+        },
+        "modifiedAt": {
+            "readOnly": true
+        }
+    },
+    "systemWriteForbidden": true
+}

application/Espo/Resources/metadata/entityAcl/AuthenticationProvider.json

@@ -0,0 +1,3 @@
+{
+    "systemWriteForbidden": true
+}

application/Espo/Resources/metadata/entityAcl/Currency.json

@@ -0,0 +1,3 @@
+{
+    "systemWriteForbidden": true
+}

application/Espo/Resources/metadata/entityAcl/Email.json

@@ -0,0 +1,15 @@
+{
+    "fields": {
+        "users": {
+            "readOnly": true
+        },
+        "messageId": {
+            "readOnly": true
+        }
+    },
+    "links": {
+        "users": {
+            "nonAdminReadOnly": true
+        }
+    }
+}

application/Espo/Resources/metadata/entityAcl/EmailAccount.json

@@ -0,0 +1,19 @@
+{
+    "fields": {
+        "password": {
+            "internal": true
+        },
+        "smtpPassword": {
+            "internal": true
+        },
+        "imapHandler": {
+            "forbidden": true
+        },
+        "smtpHandler": {
+            "forbidden": true
+        },
+        "fetchData": {
+            "readOnly": true
+        }
+    }
+}

application/Espo/Resources/metadata/entityAcl/Export.json

@@ -0,0 +1,3 @@
+{
+    "systemWriteForbidden": true
+}

application/Espo/Resources/metadata/entityAcl/Extension.json

@@ -0,0 +1,11 @@
+{
+    "fields": {
+        "fileList": {
+            "forbidden": true
+        },
+        "checkVersionUrl": {
+            "forbidden": true
+        }
+    },
+    "systemWriteForbidden": true
+}

application/Espo/Resources/metadata/entityAcl/ExternalAccount.json

@@ -0,0 +1,3 @@
+{
+    "systemWriteForbidden": true
+}

application/Espo/Resources/metadata/entityAcl/ImportEml.json

@@ -0,0 +1,3 @@
+{
+    "systemWriteForbidden": true
+}

application/Espo/Resources/metadata/entityAcl/ImportEntity.json

@@ -0,0 +1,3 @@
+{
+    "systemWriteForbidden": true
+}

application/Espo/Resources/metadata/entityAcl/ImportError.json

@@ -0,0 +1,3 @@
+{
+    "systemWriteForbidden": true
+}

application/Espo/Resources/metadata/entityAcl/InboundEmail.json

@@ -0,0 +1,19 @@
+{
+    "fields": {
+        "password": {
+            "internal": true
+        },
+        "smtpPassword": {
+            "internal": true
+        },
+        "imapHandler": {
+            "internal": true
+        },
+        "smtpHandler": {
+            "internal": true
+        },
+        "fetchData": {
+            "readOnly": true
+        }
+    }
+}

application/Espo/Resources/metadata/entityAcl/Job.json

@@ -0,0 +1,3 @@
+{
+    "systemWriteForbidden": true
+}

application/Espo/Resources/metadata/entityAcl/KanbanOrder.json

@@ -0,0 +1,3 @@
+{
+    "systemWriteForbidden": true
+}

application/Espo/Resources/metadata/entityAcl/MassAction.json

@@ -0,0 +1,3 @@
+{
+    "systemWriteForbidden": true
+}

application/Espo/Resources/metadata/entityAcl/Note.json

@@ -0,0 +1,10 @@
+{
+    "links": {
+        "teams": {
+            "readOnly": true
+        },
+        "users": {
+            "readOnly": true
+        }
+    }
+}

application/Espo/Resources/metadata/entityAcl/OAuthAccessToken.json

@@ -0,0 +1,11 @@
+{
+    "fields": {
+        "identifier": {
+            "forbidden": true
+        },
+        "hash": {
+            "forbidden": true
+        }
+    },
+    "systemWriteForbidden": true
+}

application/Espo/Resources/metadata/entityAcl/OAuthAccount.json

@@ -0,0 +1,13 @@
+{
+    "fields": {
+        "accessToken": {
+            "forbidden": true
+        },
+        "refreshToken": {
+            "forbidden": true
+        },
+        "expiresAt": {
+            "forbidden": true
+        }
+    }
+}

application/Espo/Resources/metadata/entityAcl/OAuthAuthorizationCode.json

@@ -0,0 +1,11 @@
+{
+    "fields": {
+        "identifier": {
+            "forbidden": true
+        },
+        "hash": {
+            "forbidden": true
+        }
+    },
+    "systemWriteForbidden": true
+}

application/Espo/Resources/metadata/entityAcl/OAuthClientSecret.json

@@ -0,0 +1,8 @@
+{
+    "fields": {
+        "hash": {
+            "forbidden": true
+        }
+    },
+    "systemWriteForbidden": true
+}

application/Espo/Resources/metadata/entityAcl/OAuthProvider.json

@@ -0,0 +1,7 @@
+{
+    "fields": {
+        "clientSecret": {
+            "internal": true
+        }
+    }
+}

application/Espo/Resources/metadata/entityAcl/OAuthRefreshToken.json

@@ -0,0 +1,11 @@
+{
+    "fields": {
+        "identifier": {
+            "forbidden": true
+        },
+        "hash": {
+            "forbidden": true
+        }
+    },
+    "systemWriteForbidden": true
+}

application/Espo/Resources/metadata/entityAcl/PasswordChangeRequest.json

@@ -0,0 +1,3 @@
+{
+    "systemWriteForbidden": true
+}

application/Espo/Resources/metadata/entityAcl/Preferences.json

@@ -0,0 +1,7 @@
+{
+    "fields": {
+        "data": {
+            "forbidden": true
+        }
+    }
+}

application/Espo/Resources/metadata/entityAcl/SystemData.json

@@ -0,0 +1,3 @@
+{
+    "systemWriteForbidden": true
+}

application/Espo/Resources/metadata/entityAcl/SystemState.json

@@ -0,0 +1,3 @@
+{
+    "systemWriteForbidden": true
+}

application/Espo/Resources/metadata/entityAcl/TwoFactorCode.json

@@ -0,0 +1,3 @@
+{
+    "systemWriteForbidden": true
+}

application/Espo/Resources/metadata/entityAcl/User.json

@@ -0,0 +1,104 @@
+{
+    "fields": {
+        "userName": {
+            "nonAdminReadOnly": true
+        },
+        "apiKey": {
+            "onlyAdmin": true,
+            "readOnly": true,
+            "nonAdminReadOnly": true
+        },
+        "password": {
+            "internal": true,
+            "nonAdminReadOnly": true
+        },
+        "passwordConfirm": {
+            "internal": true,
+            "nonAdminReadOnly": true
+        },
+        "passwordVersion": {
+            "forbidden": true
+        },
+        "authLogRecordId": {
+            "forbidden": true
+        },
+        "authMethod": {
+            "onlyAdmin": true
+        },
+        "secretKey": {
+            "readOnly": true,
+            "onlyAdmin": true
+        },
+        "isActive": {
+            "nonAdminReadOnly": true
+        },
+        "emailAddress": {
+            "nonAdminReadOnly": true
+        },
+        "teams": {
+            "nonAdminReadOnly": true
+        },
+        "defaultTeam": {
+            "nonAdminReadOnly": true
+        },
+        "roles": {
+            "nonAdminReadOnly": true
+        },
+        "portals": {
+            "nonAdminReadOnly": true
+        },
+        "portalRoles": {
+            "nonAdminReadOnly": true
+        },
+        "contact": {
+            "nonAdminReadOnly": true
+        },
+        "workingTimeCalendar": {
+            "nonAdminReadOnly": true
+        },
+        "layoutSet": {
+            "onlyAdmin": true
+        },
+        "accounts": {
+            "nonAdminReadOnly": true
+        },
+        "type": {
+            "nonAdminReadOnly": true
+        },
+        "auth2FA": {
+            "onlyAdmin": true
+        },
+        "userData": {
+            "forbidden": true
+        },
+        "deleteId": {
+            "forbidden": true
+        }
+    },
+    "links": {
+        "teams": {
+            "nonAdminReadOnly": true
+        },
+        "roles": {
+            "onlyAdmin": true
+        },
+        "workingTimeRanges": {
+            "nonAdminReadOnly": true
+        },
+        "portalRoles": {
+            "onlyAdmin": true
+        },
+        "accounts": {
+            "onlyAdmin": true
+        },
+        "defaultTeam": {
+            "onlyAdmin": true
+        },
+        "dashboardTemplate": {
+            "onlyAdmin": true
+        },
+        "userData": {
+            "forbidden": true
+        }
+    }
+}

application/Espo/Resources/metadata/entityAcl/UserData.json

@@ -0,0 +1,8 @@
+{
+    "fields": {
+        "auth2FATotpSecret": {
+            "forbidden": true
+        }
+    },
+    "systemWriteForbidden": true
+}

application/Espo/Resources/metadata/entityAcl/UserState.json

@@ -0,0 +1,3 @@
+{
+    "systemWriteForbidden": true
+}

application/Espo/Resources/metadata/entityAcl/Webhook.json

@@ -0,0 +1,10 @@
+{
+    "fields": {
+        "user": {
+            "onlyAdmin": true
+        },
+        "secretKey": {
+            "readOnly": true
+        }
+    }
+}