snapshot of https://github.com/espocrm/espocrm.git (master, 2026-09-18; blobs > 131072B omitted)
Some checks failed
Test / Test on PHP 8.3 (push) Failing after 5s
Test / Test on PHP 8.4 (push) Failing after 4s
Test / Test on PHP 8.5 (push) Failing after 3s
TypeScript static analysis / TypeScript check (push) Failing after 14s
Test Integration on MySQL / Test on PHP 8.3 (push) Failing after 2s
Test Integration on MySQL / Test on PHP 8.5 (push) Failing after 0s
Test Integration on PostgreSQL / Test on PHP 8.4 fix (push) Failing after 1s
Test Integration on PostgreSQL / Test on PHP 8.4 master (push) Failing after 1s
Some checks failed
Test / Test on PHP 8.3 (push) Failing after 5s
Test / Test on PHP 8.4 (push) Failing after 4s
Test / Test on PHP 8.5 (push) Failing after 3s
TypeScript static analysis / TypeScript check (push) Failing after 14s
Test Integration on MySQL / Test on PHP 8.3 (push) Failing after 2s
Test Integration on MySQL / Test on PHP 8.5 (push) Failing after 0s
Test Integration on PostgreSQL / Test on PHP 8.4 fix (push) Failing after 1s
Test Integration on PostgreSQL / Test on PHP 8.4 master (push) Failing after 1s
This commit is contained in:
upstream-mirror
145
schema/metadata/app/acl.json
Normal file
145
schema/metadata/app/acl.json
Normal file
@@ -0,0 +1,145 @@
|
||||
{
|
||||
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
||||
"$id": "https://www.espocrm.com/schema/metadata/app/acl.json",
|
||||
"title": "app/acl",
|
||||
"description": "Access control level parameters for the system (excluding portals).",
|
||||
"type": "object",
|
||||
"properties": {
|
||||
"mandatory": {
|
||||
"description": "Mandatory access levels for specific scopes. Forcibly applied.",
|
||||
"$ref": "#/definitions/group"
|
||||
},
|
||||
"adminMandatory": {
|
||||
"description": "Access levels forcibly applied for admin users. This section has the same parameters as the mandatory section: scopeLevel, scopeFieldLevel, fieldLevel.",
|
||||
"$ref": "#/definitions/group"
|
||||
},
|
||||
"strictDefault": {
|
||||
"description": "Access levels applied for regular and API users when access is not defined by Roles assigned to those users. This section has the same parameters as the mandatory section: scopeLevel, scopeFieldLevel, fieldLevel.",
|
||||
"$ref": "#/definitions/group"
|
||||
},
|
||||
"valuePermissionList": {
|
||||
"type": "array",
|
||||
"description": "A list of all available permissions in the system.",
|
||||
"items": {
|
||||
"anyOf": [
|
||||
{"const": "__APPEND__"},
|
||||
{"type": "string"}
|
||||
]
|
||||
}
|
||||
},
|
||||
"valuePermissionHighestLevels": {
|
||||
"type": "object",
|
||||
"additionalProperties": {
|
||||
"$ref": "#/definitions/levelsAll"
|
||||
},
|
||||
"description": "Highest levels for permissions."
|
||||
},
|
||||
"permissionsStrictDefaults": {
|
||||
"type": "object",
|
||||
"additionalProperties": {
|
||||
"$ref": "#/definitions/levelsAll"
|
||||
},
|
||||
"description": "Default permissions. Not to be modified."
|
||||
}
|
||||
},
|
||||
"definitions": {
|
||||
"levelsBoolean": {
|
||||
"enum": ["yes", "no"]
|
||||
},
|
||||
"levelsAll": {
|
||||
"enum": ["yes", "all", "team", "own", "no"]
|
||||
},
|
||||
"levels": {
|
||||
"enum": ["all", "team", "own", "no"]
|
||||
},
|
||||
"group": {
|
||||
"type": "object",
|
||||
"properties": {
|
||||
"scopeLevel": {
|
||||
"$ref": "#/definitions/scopeLevel"
|
||||
},
|
||||
"scopeFieldLevel": {
|
||||
"$ref": "#/definitions/scopeFieldLevel"
|
||||
},
|
||||
"fieldLevel": {
|
||||
"$ref": "#/definitions/fieldLevel"
|
||||
}
|
||||
}
|
||||
},
|
||||
"scopeLevel": {
|
||||
"type": "object",
|
||||
"description": "A scope level.",
|
||||
"additionalProperties": {
|
||||
"description": "A scope. True enables access to scopes that don't have actions. False fully restricts access to the scope. A string value makes the framework to use roles from another scope and apply them to our scope. It can be useful to have roles only for one parent scope, when child scopes use roles of the parent scope. `boolean:{scope}` format will convert a foreign scope data to the boolean type.",
|
||||
"anyOf": [
|
||||
{
|
||||
"type": "object",
|
||||
"properties": {
|
||||
"create": {
|
||||
"$ref": "#/definitions/levelsBoolean",
|
||||
"description": "A 'create' access level."
|
||||
},
|
||||
"read": {
|
||||
"$ref": "#/definitions/levelsAll",
|
||||
"description": "A 'read' access level."
|
||||
},
|
||||
"edit": {
|
||||
"$ref": "#/definitions/levelsAll",
|
||||
"description": "An 'edit' access level."
|
||||
},
|
||||
"delete": {
|
||||
"$ref": "#/definitions/levels",
|
||||
"description": "A 'delete' access level."
|
||||
},
|
||||
"stream": {
|
||||
"$ref": "#/definitions/levels",
|
||||
"description": "A 'stream' access level."
|
||||
}
|
||||
}
|
||||
},
|
||||
{
|
||||
"type": "boolean"
|
||||
},
|
||||
{
|
||||
"type": "string"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"fieldAccess": {
|
||||
"description": "Field levels. False disables access to a field.",
|
||||
"anyOf": [
|
||||
{
|
||||
"type": "object",
|
||||
"properties": {
|
||||
"read": {
|
||||
"$ref": "#/definitions/levelsBoolean",
|
||||
"description": "A 'read' access level."
|
||||
},
|
||||
"edit": {
|
||||
"$ref": "#/definitions/levelsBoolean",
|
||||
"description": "An 'edit' access level."
|
||||
}
|
||||
}
|
||||
},
|
||||
{
|
||||
"type": "boolean"
|
||||
}
|
||||
]
|
||||
},
|
||||
"scopeFieldLevel": {
|
||||
"type": "object",
|
||||
"description": "Access for specific fields of specific scopes.",
|
||||
"additionalProperties": {
|
||||
"$ref": "#/definitions/fieldLevel"
|
||||
}
|
||||
},
|
||||
"fieldLevel": {
|
||||
"type": "object",
|
||||
"description": "A scope.",
|
||||
"additionalProperties": {
|
||||
"$ref": "#/definitions/fieldAccess"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user