mirror of
https://github.com/mattermost/mattermost.git
synced 2025-02-25 18:55:24 -06:00
* MM-14139: Creating permissions for invite/promote/demote guests (#10778) * MM-14139: Creating permissions for invite/promote/demote guests * Fixing tests * Adding invite guest api endpoint (#10792) * Adding invite guest api endpoint * Adding i18n * Adding some tests * WIP * Migrating Token.Extra info to bigger size (2048) * Fixing tests * Adding client function for invite guests * Adding send guests invites tests * Renaming file from guest to guest_invite * Adding Promote/Demote users from/to guest endpoints (#10791) * Adding Promote/Demote users from/to guest endpoints * Adding i18n translations * Adding the client functions * Using getQueryBuilder function * Addressing PR review comments * Adding default channels to users on promte from guest (#10851) * Adding default channels to users on promte from guest * Addressing PR review comments * Fixing merge problems * Sending websockets events on promote/demote (#11403) * Sending websockets events on promote/demote * Fixing merge problems * Fixing govet shadowing problem * Fixing feature branch tests * Avoiding leaking users data through websockets for guest accounts (#11489) * Avoiding leaking users data through websockets for guest accounts * Adding tests and fixing code error * Fixing i18n * Allow to enable/disable guests and other extra config settings (#11481) * Allow to enable/disable guests and other extra config settings * Fixing tests and moving license and config validation to api level * Update api4/role_test.go Co-Authored-By: George Goldberg <george@gberg.me> * Update api4/role_test.go Co-Authored-By: George Goldberg <george@gberg.me> * Fixing typo * fixing tests * Managing correctly the guest channel leave behavior (#11578) * MM-15134: Removing guests from teams or system on leave channels if needed * WIP * No deactivating the guest user when leave the last team * Adding a couple of tests * Fixing shadow variables * Fixing tests * fixing tests * fixing shadow variables * Adding guest counts for channel stats (#11646) * Adding guest counts for channel stats * Adding tests * Fixing tests * Fixing guest domain restrictions (#11660) * Adding needed migration for the database * Fixing migration
640 lines
23 KiB
Go
640 lines
23 KiB
Go
// Copyright (c) 2016-present Mattermost, Inc. All Rights Reserved.
|
|
// See License.txt for license information.
|
|
|
|
package model
|
|
|
|
const (
|
|
PERMISSION_SCOPE_SYSTEM = "system_scope"
|
|
PERMISSION_SCOPE_TEAM = "team_scope"
|
|
PERMISSION_SCOPE_CHANNEL = "channel_scope"
|
|
)
|
|
|
|
type Permission struct {
|
|
Id string `json:"id"`
|
|
Name string `json:"name"`
|
|
Description string `json:"description"`
|
|
Scope string `json:"scope"`
|
|
}
|
|
|
|
var PERMISSION_INVITE_USER *Permission
|
|
var PERMISSION_ADD_USER_TO_TEAM *Permission
|
|
var PERMISSION_USE_SLASH_COMMANDS *Permission
|
|
var PERMISSION_MANAGE_SLASH_COMMANDS *Permission
|
|
var PERMISSION_MANAGE_OTHERS_SLASH_COMMANDS *Permission
|
|
var PERMISSION_CREATE_PUBLIC_CHANNEL *Permission
|
|
var PERMISSION_CREATE_PRIVATE_CHANNEL *Permission
|
|
var PERMISSION_MANAGE_PUBLIC_CHANNEL_MEMBERS *Permission
|
|
var PERMISSION_MANAGE_PRIVATE_CHANNEL_MEMBERS *Permission
|
|
var PERMISSION_ASSIGN_SYSTEM_ADMIN_ROLE *Permission
|
|
var PERMISSION_MANAGE_ROLES *Permission
|
|
var PERMISSION_MANAGE_TEAM_ROLES *Permission
|
|
var PERMISSION_MANAGE_CHANNEL_ROLES *Permission
|
|
var PERMISSION_CREATE_DIRECT_CHANNEL *Permission
|
|
var PERMISSION_CREATE_GROUP_CHANNEL *Permission
|
|
var PERMISSION_MANAGE_PUBLIC_CHANNEL_PROPERTIES *Permission
|
|
var PERMISSION_MANAGE_PRIVATE_CHANNEL_PROPERTIES *Permission
|
|
var PERMISSION_LIST_PUBLIC_TEAMS *Permission
|
|
var PERMISSION_JOIN_PUBLIC_TEAMS *Permission
|
|
var PERMISSION_LIST_PRIVATE_TEAMS *Permission
|
|
var PERMISSION_JOIN_PRIVATE_TEAMS *Permission
|
|
var PERMISSION_LIST_TEAM_CHANNELS *Permission
|
|
var PERMISSION_JOIN_PUBLIC_CHANNELS *Permission
|
|
var PERMISSION_DELETE_PUBLIC_CHANNEL *Permission
|
|
var PERMISSION_DELETE_PRIVATE_CHANNEL *Permission
|
|
var PERMISSION_EDIT_OTHER_USERS *Permission
|
|
var PERMISSION_READ_CHANNEL *Permission
|
|
var PERMISSION_READ_PUBLIC_CHANNEL *Permission
|
|
var PERMISSION_ADD_REACTION *Permission
|
|
var PERMISSION_REMOVE_REACTION *Permission
|
|
var PERMISSION_REMOVE_OTHERS_REACTIONS *Permission
|
|
var PERMISSION_PERMANENT_DELETE_USER *Permission
|
|
var PERMISSION_UPLOAD_FILE *Permission
|
|
var PERMISSION_GET_PUBLIC_LINK *Permission
|
|
var PERMISSION_MANAGE_WEBHOOKS *Permission
|
|
var PERMISSION_MANAGE_OTHERS_WEBHOOKS *Permission
|
|
var PERMISSION_MANAGE_INCOMING_WEBHOOKS *Permission
|
|
var PERMISSION_MANAGE_OUTGOING_WEBHOOKS *Permission
|
|
var PERMISSION_MANAGE_OTHERS_INCOMING_WEBHOOKS *Permission
|
|
var PERMISSION_MANAGE_OTHERS_OUTGOING_WEBHOOKS *Permission
|
|
var PERMISSION_MANAGE_OAUTH *Permission
|
|
var PERMISSION_MANAGE_SYSTEM_WIDE_OAUTH *Permission
|
|
var PERMISSION_MANAGE_EMOJIS *Permission
|
|
var PERMISSION_MANAGE_OTHERS_EMOJIS *Permission
|
|
var PERMISSION_CREATE_EMOJIS *Permission
|
|
var PERMISSION_DELETE_EMOJIS *Permission
|
|
var PERMISSION_DELETE_OTHERS_EMOJIS *Permission
|
|
var PERMISSION_CREATE_POST *Permission
|
|
var PERMISSION_CREATE_POST_PUBLIC *Permission
|
|
var PERMISSION_CREATE_POST_EPHEMERAL *Permission
|
|
var PERMISSION_EDIT_POST *Permission
|
|
var PERMISSION_EDIT_OTHERS_POSTS *Permission
|
|
var PERMISSION_DELETE_POST *Permission
|
|
var PERMISSION_DELETE_OTHERS_POSTS *Permission
|
|
var PERMISSION_REMOVE_USER_FROM_TEAM *Permission
|
|
var PERMISSION_CREATE_TEAM *Permission
|
|
var PERMISSION_MANAGE_TEAM *Permission
|
|
var PERMISSION_IMPORT_TEAM *Permission
|
|
var PERMISSION_VIEW_TEAM *Permission
|
|
var PERMISSION_LIST_USERS_WITHOUT_TEAM *Permission
|
|
var PERMISSION_MANAGE_JOBS *Permission
|
|
var PERMISSION_CREATE_USER_ACCESS_TOKEN *Permission
|
|
var PERMISSION_READ_USER_ACCESS_TOKEN *Permission
|
|
var PERMISSION_REVOKE_USER_ACCESS_TOKEN *Permission
|
|
var PERMISSION_CREATE_BOT *Permission
|
|
var PERMISSION_ASSIGN_BOT *Permission
|
|
var PERMISSION_READ_BOTS *Permission
|
|
var PERMISSION_READ_OTHERS_BOTS *Permission
|
|
var PERMISSION_MANAGE_BOTS *Permission
|
|
var PERMISSION_MANAGE_OTHERS_BOTS *Permission
|
|
var PERMISSION_VIEW_MEMBERS *Permission
|
|
var PERMISSION_INVITE_GUEST *Permission
|
|
var PERMISSION_PROMOTE_GUEST *Permission
|
|
var PERMISSION_DEMOTE_TO_GUEST *Permission
|
|
|
|
// General permission that encompasses all system admin functions
|
|
// in the future this could be broken up to allow access to some
|
|
// admin functions but not others
|
|
var PERMISSION_MANAGE_SYSTEM *Permission
|
|
|
|
var ALL_PERMISSIONS []*Permission
|
|
|
|
func initializePermissions() {
|
|
PERMISSION_INVITE_USER = &Permission{
|
|
"invite_user",
|
|
"authentication.permissions.team_invite_user.name",
|
|
"authentication.permissions.team_invite_user.description",
|
|
PERMISSION_SCOPE_TEAM,
|
|
}
|
|
PERMISSION_ADD_USER_TO_TEAM = &Permission{
|
|
"add_user_to_team",
|
|
"authentication.permissions.add_user_to_team.name",
|
|
"authentication.permissions.add_user_to_team.description",
|
|
PERMISSION_SCOPE_TEAM,
|
|
}
|
|
PERMISSION_USE_SLASH_COMMANDS = &Permission{
|
|
"use_slash_commands",
|
|
"authentication.permissions.team_use_slash_commands.name",
|
|
"authentication.permissions.team_use_slash_commands.description",
|
|
PERMISSION_SCOPE_CHANNEL,
|
|
}
|
|
PERMISSION_MANAGE_SLASH_COMMANDS = &Permission{
|
|
"manage_slash_commands",
|
|
"authentication.permissions.manage_slash_commands.name",
|
|
"authentication.permissions.manage_slash_commands.description",
|
|
PERMISSION_SCOPE_TEAM,
|
|
}
|
|
PERMISSION_MANAGE_OTHERS_SLASH_COMMANDS = &Permission{
|
|
"manage_others_slash_commands",
|
|
"authentication.permissions.manage_others_slash_commands.name",
|
|
"authentication.permissions.manage_others_slash_commands.description",
|
|
PERMISSION_SCOPE_TEAM,
|
|
}
|
|
PERMISSION_CREATE_PUBLIC_CHANNEL = &Permission{
|
|
"create_public_channel",
|
|
"authentication.permissions.create_public_channel.name",
|
|
"authentication.permissions.create_public_channel.description",
|
|
PERMISSION_SCOPE_TEAM,
|
|
}
|
|
PERMISSION_CREATE_PRIVATE_CHANNEL = &Permission{
|
|
"create_private_channel",
|
|
"authentication.permissions.create_private_channel.name",
|
|
"authentication.permissions.create_private_channel.description",
|
|
PERMISSION_SCOPE_TEAM,
|
|
}
|
|
PERMISSION_MANAGE_PUBLIC_CHANNEL_MEMBERS = &Permission{
|
|
"manage_public_channel_members",
|
|
"authentication.permissions.manage_public_channel_members.name",
|
|
"authentication.permissions.manage_public_channel_members.description",
|
|
PERMISSION_SCOPE_CHANNEL,
|
|
}
|
|
PERMISSION_MANAGE_PRIVATE_CHANNEL_MEMBERS = &Permission{
|
|
"manage_private_channel_members",
|
|
"authentication.permissions.manage_private_channel_members.name",
|
|
"authentication.permissions.manage_private_channel_members.description",
|
|
PERMISSION_SCOPE_CHANNEL,
|
|
}
|
|
PERMISSION_ASSIGN_SYSTEM_ADMIN_ROLE = &Permission{
|
|
"assign_system_admin_role",
|
|
"authentication.permissions.assign_system_admin_role.name",
|
|
"authentication.permissions.assign_system_admin_role.description",
|
|
PERMISSION_SCOPE_SYSTEM,
|
|
}
|
|
PERMISSION_MANAGE_ROLES = &Permission{
|
|
"manage_roles",
|
|
"authentication.permissions.manage_roles.name",
|
|
"authentication.permissions.manage_roles.description",
|
|
PERMISSION_SCOPE_SYSTEM,
|
|
}
|
|
PERMISSION_MANAGE_TEAM_ROLES = &Permission{
|
|
"manage_team_roles",
|
|
"authentication.permissions.manage_team_roles.name",
|
|
"authentication.permissions.manage_team_roles.description",
|
|
PERMISSION_SCOPE_TEAM,
|
|
}
|
|
PERMISSION_MANAGE_CHANNEL_ROLES = &Permission{
|
|
"manage_channel_roles",
|
|
"authentication.permissions.manage_channel_roles.name",
|
|
"authentication.permissions.manage_channel_roles.description",
|
|
PERMISSION_SCOPE_CHANNEL,
|
|
}
|
|
PERMISSION_MANAGE_SYSTEM = &Permission{
|
|
"manage_system",
|
|
"authentication.permissions.manage_system.name",
|
|
"authentication.permissions.manage_system.description",
|
|
PERMISSION_SCOPE_SYSTEM,
|
|
}
|
|
PERMISSION_CREATE_DIRECT_CHANNEL = &Permission{
|
|
"create_direct_channel",
|
|
"authentication.permissions.create_direct_channel.name",
|
|
"authentication.permissions.create_direct_channel.description",
|
|
PERMISSION_SCOPE_SYSTEM,
|
|
}
|
|
PERMISSION_CREATE_GROUP_CHANNEL = &Permission{
|
|
"create_group_channel",
|
|
"authentication.permissions.create_group_channel.name",
|
|
"authentication.permissions.create_group_channel.description",
|
|
PERMISSION_SCOPE_SYSTEM,
|
|
}
|
|
PERMISSION_MANAGE_PUBLIC_CHANNEL_PROPERTIES = &Permission{
|
|
"manage_public_channel_properties",
|
|
"authentication.permissions.manage_public_channel_properties.name",
|
|
"authentication.permissions.manage_public_channel_properties.description",
|
|
PERMISSION_SCOPE_CHANNEL,
|
|
}
|
|
PERMISSION_MANAGE_PRIVATE_CHANNEL_PROPERTIES = &Permission{
|
|
"manage_private_channel_properties",
|
|
"authentication.permissions.manage_private_channel_properties.name",
|
|
"authentication.permissions.manage_private_channel_properties.description",
|
|
PERMISSION_SCOPE_CHANNEL,
|
|
}
|
|
PERMISSION_LIST_PUBLIC_TEAMS = &Permission{
|
|
"list_public_teams",
|
|
"authentication.permissions.list_public_teams.name",
|
|
"authentication.permissions.list_public_teams.description",
|
|
PERMISSION_SCOPE_SYSTEM,
|
|
}
|
|
PERMISSION_JOIN_PUBLIC_TEAMS = &Permission{
|
|
"join_public_teams",
|
|
"authentication.permissions.join_public_teams.name",
|
|
"authentication.permissions.join_public_teams.description",
|
|
PERMISSION_SCOPE_SYSTEM,
|
|
}
|
|
PERMISSION_LIST_PRIVATE_TEAMS = &Permission{
|
|
"list_private_teams",
|
|
"authentication.permissions.list_private_teams.name",
|
|
"authentication.permissions.list_private_teams.description",
|
|
PERMISSION_SCOPE_SYSTEM,
|
|
}
|
|
PERMISSION_JOIN_PRIVATE_TEAMS = &Permission{
|
|
"join_private_teams",
|
|
"authentication.permissions.join_private_teams.name",
|
|
"authentication.permissions.join_private_teams.description",
|
|
PERMISSION_SCOPE_SYSTEM,
|
|
}
|
|
PERMISSION_LIST_TEAM_CHANNELS = &Permission{
|
|
"list_team_channels",
|
|
"authentication.permissions.list_team_channels.name",
|
|
"authentication.permissions.list_team_channels.description",
|
|
PERMISSION_SCOPE_TEAM,
|
|
}
|
|
PERMISSION_JOIN_PUBLIC_CHANNELS = &Permission{
|
|
"join_public_channels",
|
|
"authentication.permissions.join_public_channels.name",
|
|
"authentication.permissions.join_public_channels.description",
|
|
PERMISSION_SCOPE_TEAM,
|
|
}
|
|
PERMISSION_DELETE_PUBLIC_CHANNEL = &Permission{
|
|
"delete_public_channel",
|
|
"authentication.permissions.delete_public_channel.name",
|
|
"authentication.permissions.delete_public_channel.description",
|
|
PERMISSION_SCOPE_CHANNEL,
|
|
}
|
|
PERMISSION_DELETE_PRIVATE_CHANNEL = &Permission{
|
|
"delete_private_channel",
|
|
"authentication.permissions.delete_private_channel.name",
|
|
"authentication.permissions.delete_private_channel.description",
|
|
PERMISSION_SCOPE_CHANNEL,
|
|
}
|
|
PERMISSION_EDIT_OTHER_USERS = &Permission{
|
|
"edit_other_users",
|
|
"authentication.permissions.edit_other_users.name",
|
|
"authentication.permissions.edit_other_users.description",
|
|
PERMISSION_SCOPE_SYSTEM,
|
|
}
|
|
PERMISSION_READ_CHANNEL = &Permission{
|
|
"read_channel",
|
|
"authentication.permissions.read_channel.name",
|
|
"authentication.permissions.read_channel.description",
|
|
PERMISSION_SCOPE_CHANNEL,
|
|
}
|
|
PERMISSION_READ_PUBLIC_CHANNEL = &Permission{
|
|
"read_public_channel",
|
|
"authentication.permissions.read_public_channel.name",
|
|
"authentication.permissions.read_public_channel.description",
|
|
PERMISSION_SCOPE_TEAM,
|
|
}
|
|
PERMISSION_ADD_REACTION = &Permission{
|
|
"add_reaction",
|
|
"authentication.permissions.add_reaction.name",
|
|
"authentication.permissions.add_reaction.description",
|
|
PERMISSION_SCOPE_CHANNEL,
|
|
}
|
|
PERMISSION_REMOVE_REACTION = &Permission{
|
|
"remove_reaction",
|
|
"authentication.permissions.remove_reaction.name",
|
|
"authentication.permissions.remove_reaction.description",
|
|
PERMISSION_SCOPE_CHANNEL,
|
|
}
|
|
PERMISSION_REMOVE_OTHERS_REACTIONS = &Permission{
|
|
"remove_others_reactions",
|
|
"authentication.permissions.remove_others_reactions.name",
|
|
"authentication.permissions.remove_others_reactions.description",
|
|
PERMISSION_SCOPE_CHANNEL,
|
|
}
|
|
// DEPRECATED
|
|
PERMISSION_PERMANENT_DELETE_USER = &Permission{
|
|
"permanent_delete_user",
|
|
"authentication.permissions.permanent_delete_user.name",
|
|
"authentication.permissions.permanent_delete_user.description",
|
|
PERMISSION_SCOPE_SYSTEM,
|
|
}
|
|
PERMISSION_UPLOAD_FILE = &Permission{
|
|
"upload_file",
|
|
"authentication.permissions.upload_file.name",
|
|
"authentication.permissions.upload_file.description",
|
|
PERMISSION_SCOPE_CHANNEL,
|
|
}
|
|
PERMISSION_GET_PUBLIC_LINK = &Permission{
|
|
"get_public_link",
|
|
"authentication.permissions.get_public_link.name",
|
|
"authentication.permissions.get_public_link.description",
|
|
PERMISSION_SCOPE_SYSTEM,
|
|
}
|
|
// DEPRECATED
|
|
PERMISSION_MANAGE_WEBHOOKS = &Permission{
|
|
"manage_webhooks",
|
|
"authentication.permissions.manage_webhooks.name",
|
|
"authentication.permissions.manage_webhooks.description",
|
|
PERMISSION_SCOPE_TEAM,
|
|
}
|
|
// DEPRECATED
|
|
PERMISSION_MANAGE_OTHERS_WEBHOOKS = &Permission{
|
|
"manage_others_webhooks",
|
|
"authentication.permissions.manage_others_webhooks.name",
|
|
"authentication.permissions.manage_others_webhooks.description",
|
|
PERMISSION_SCOPE_TEAM,
|
|
}
|
|
PERMISSION_MANAGE_INCOMING_WEBHOOKS = &Permission{
|
|
"manage_incoming_webhooks",
|
|
"authentication.permissions.manage_incoming_webhooks.name",
|
|
"authentication.permissions.manage_incoming_webhooks.description",
|
|
PERMISSION_SCOPE_TEAM,
|
|
}
|
|
PERMISSION_MANAGE_OUTGOING_WEBHOOKS = &Permission{
|
|
"manage_outgoing_webhooks",
|
|
"authentication.permissions.manage_outgoing_webhooks.name",
|
|
"authentication.permissions.manage_outgoing_webhooks.description",
|
|
PERMISSION_SCOPE_TEAM,
|
|
}
|
|
PERMISSION_MANAGE_OTHERS_INCOMING_WEBHOOKS = &Permission{
|
|
"manage_others_incoming_webhooks",
|
|
"authentication.permissions.manage_others_incoming_webhooks.name",
|
|
"authentication.permissions.manage_others_incoming_webhooks.description",
|
|
PERMISSION_SCOPE_TEAM,
|
|
}
|
|
PERMISSION_MANAGE_OTHERS_OUTGOING_WEBHOOKS = &Permission{
|
|
"manage_others_outgoing_webhooks",
|
|
"authentication.permissions.manage_others_outgoing_webhooks.name",
|
|
"authentication.permissions.manage_others_outgoing_webhooks.description",
|
|
PERMISSION_SCOPE_TEAM,
|
|
}
|
|
PERMISSION_MANAGE_OAUTH = &Permission{
|
|
"manage_oauth",
|
|
"authentication.permissions.manage_oauth.name",
|
|
"authentication.permissions.manage_oauth.description",
|
|
PERMISSION_SCOPE_SYSTEM,
|
|
}
|
|
PERMISSION_MANAGE_SYSTEM_WIDE_OAUTH = &Permission{
|
|
"manage_system_wide_oauth",
|
|
"authentication.permissions.manage_system_wide_oauth.name",
|
|
"authentication.permissions.manage_system_wide_oauth.description",
|
|
PERMISSION_SCOPE_SYSTEM,
|
|
}
|
|
// DEPRECATED
|
|
PERMISSION_MANAGE_EMOJIS = &Permission{
|
|
"manage_emojis",
|
|
"authentication.permissions.manage_emojis.name",
|
|
"authentication.permissions.manage_emojis.description",
|
|
PERMISSION_SCOPE_TEAM,
|
|
}
|
|
// DEPRECATED
|
|
PERMISSION_MANAGE_OTHERS_EMOJIS = &Permission{
|
|
"manage_others_emojis",
|
|
"authentication.permissions.manage_others_emojis.name",
|
|
"authentication.permissions.manage_others_emojis.description",
|
|
PERMISSION_SCOPE_TEAM,
|
|
}
|
|
PERMISSION_CREATE_EMOJIS = &Permission{
|
|
"create_emojis",
|
|
"authentication.permissions.create_emojis.name",
|
|
"authentication.permissions.create_emojis.description",
|
|
PERMISSION_SCOPE_TEAM,
|
|
}
|
|
PERMISSION_DELETE_EMOJIS = &Permission{
|
|
"delete_emojis",
|
|
"authentication.permissions.delete_emojis.name",
|
|
"authentication.permissions.delete_emojis.description",
|
|
PERMISSION_SCOPE_TEAM,
|
|
}
|
|
PERMISSION_DELETE_OTHERS_EMOJIS = &Permission{
|
|
"delete_others_emojis",
|
|
"authentication.permissions.delete_others_emojis.name",
|
|
"authentication.permissions.delete_others_emojis.description",
|
|
PERMISSION_SCOPE_TEAM,
|
|
}
|
|
PERMISSION_CREATE_POST = &Permission{
|
|
"create_post",
|
|
"authentication.permissions.create_post.name",
|
|
"authentication.permissions.create_post.description",
|
|
PERMISSION_SCOPE_CHANNEL,
|
|
}
|
|
PERMISSION_CREATE_POST_PUBLIC = &Permission{
|
|
"create_post_public",
|
|
"authentication.permissions.create_post_public.name",
|
|
"authentication.permissions.create_post_public.description",
|
|
PERMISSION_SCOPE_CHANNEL,
|
|
}
|
|
PERMISSION_CREATE_POST_EPHEMERAL = &Permission{
|
|
"create_post_ephemeral",
|
|
"authentication.permissions.create_post_ephemeral.name",
|
|
"authentication.permissions.create_post_ephemeral.description",
|
|
PERMISSION_SCOPE_CHANNEL,
|
|
}
|
|
PERMISSION_EDIT_POST = &Permission{
|
|
"edit_post",
|
|
"authentication.permissions.edit_post.name",
|
|
"authentication.permissions.edit_post.description",
|
|
PERMISSION_SCOPE_CHANNEL,
|
|
}
|
|
PERMISSION_EDIT_OTHERS_POSTS = &Permission{
|
|
"edit_others_posts",
|
|
"authentication.permissions.edit_others_posts.name",
|
|
"authentication.permissions.edit_others_posts.description",
|
|
PERMISSION_SCOPE_CHANNEL,
|
|
}
|
|
PERMISSION_DELETE_POST = &Permission{
|
|
"delete_post",
|
|
"authentication.permissions.delete_post.name",
|
|
"authentication.permissions.delete_post.description",
|
|
PERMISSION_SCOPE_CHANNEL,
|
|
}
|
|
PERMISSION_DELETE_OTHERS_POSTS = &Permission{
|
|
"delete_others_posts",
|
|
"authentication.permissions.delete_others_posts.name",
|
|
"authentication.permissions.delete_others_posts.description",
|
|
PERMISSION_SCOPE_CHANNEL,
|
|
}
|
|
PERMISSION_REMOVE_USER_FROM_TEAM = &Permission{
|
|
"remove_user_from_team",
|
|
"authentication.permissions.remove_user_from_team.name",
|
|
"authentication.permissions.remove_user_from_team.description",
|
|
PERMISSION_SCOPE_TEAM,
|
|
}
|
|
PERMISSION_CREATE_TEAM = &Permission{
|
|
"create_team",
|
|
"authentication.permissions.create_team.name",
|
|
"authentication.permissions.create_team.description",
|
|
PERMISSION_SCOPE_SYSTEM,
|
|
}
|
|
PERMISSION_MANAGE_TEAM = &Permission{
|
|
"manage_team",
|
|
"authentication.permissions.manage_team.name",
|
|
"authentication.permissions.manage_team.description",
|
|
PERMISSION_SCOPE_TEAM,
|
|
}
|
|
PERMISSION_IMPORT_TEAM = &Permission{
|
|
"import_team",
|
|
"authentication.permissions.import_team.name",
|
|
"authentication.permissions.import_team.description",
|
|
PERMISSION_SCOPE_TEAM,
|
|
}
|
|
PERMISSION_VIEW_TEAM = &Permission{
|
|
"view_team",
|
|
"authentication.permissions.view_team.name",
|
|
"authentication.permissions.view_team.description",
|
|
PERMISSION_SCOPE_TEAM,
|
|
}
|
|
PERMISSION_LIST_USERS_WITHOUT_TEAM = &Permission{
|
|
"list_users_without_team",
|
|
"authentication.permissions.list_users_without_team.name",
|
|
"authentication.permissions.list_users_without_team.description",
|
|
PERMISSION_SCOPE_SYSTEM,
|
|
}
|
|
PERMISSION_CREATE_USER_ACCESS_TOKEN = &Permission{
|
|
"create_user_access_token",
|
|
"authentication.permissions.create_user_access_token.name",
|
|
"authentication.permissions.create_user_access_token.description",
|
|
PERMISSION_SCOPE_SYSTEM,
|
|
}
|
|
PERMISSION_READ_USER_ACCESS_TOKEN = &Permission{
|
|
"read_user_access_token",
|
|
"authentication.permissions.read_user_access_token.name",
|
|
"authentication.permissions.read_user_access_token.description",
|
|
PERMISSION_SCOPE_SYSTEM,
|
|
}
|
|
PERMISSION_REVOKE_USER_ACCESS_TOKEN = &Permission{
|
|
"revoke_user_access_token",
|
|
"authentication.permissions.revoke_user_access_token.name",
|
|
"authentication.permissions.revoke_user_access_token.description",
|
|
PERMISSION_SCOPE_SYSTEM,
|
|
}
|
|
PERMISSION_CREATE_BOT = &Permission{
|
|
"create_bot",
|
|
"authentication.permissions.create_bot.name",
|
|
"authentication.permissions.create_bot.description",
|
|
PERMISSION_SCOPE_SYSTEM,
|
|
}
|
|
PERMISSION_ASSIGN_BOT = &Permission{
|
|
"assign_bot",
|
|
"authentication.permissions.assign_bot.name",
|
|
"authentication.permissions.assign_bot.description",
|
|
PERMISSION_SCOPE_SYSTEM,
|
|
}
|
|
PERMISSION_READ_BOTS = &Permission{
|
|
"read_bots",
|
|
"authentication.permissions.read_bots.name",
|
|
"authentication.permissions.read_bots.description",
|
|
PERMISSION_SCOPE_SYSTEM,
|
|
}
|
|
PERMISSION_READ_OTHERS_BOTS = &Permission{
|
|
"read_others_bots",
|
|
"authentication.permissions.read_others_bots.name",
|
|
"authentication.permissions.read_others_bots.description",
|
|
PERMISSION_SCOPE_SYSTEM,
|
|
}
|
|
PERMISSION_MANAGE_BOTS = &Permission{
|
|
"manage_bots",
|
|
"authentication.permissions.manage_bots.name",
|
|
"authentication.permissions.manage_bots.description",
|
|
PERMISSION_SCOPE_SYSTEM,
|
|
}
|
|
PERMISSION_MANAGE_OTHERS_BOTS = &Permission{
|
|
"manage_others_bots",
|
|
"authentication.permissions.manage_others_bots.name",
|
|
"authentication.permissions.manage_others_bots.description",
|
|
PERMISSION_SCOPE_SYSTEM,
|
|
}
|
|
PERMISSION_MANAGE_JOBS = &Permission{
|
|
"manage_jobs",
|
|
"authentication.permisssions.manage_jobs.name",
|
|
"authentication.permisssions.manage_jobs.description",
|
|
PERMISSION_SCOPE_SYSTEM,
|
|
}
|
|
PERMISSION_VIEW_MEMBERS = &Permission{
|
|
"view_members",
|
|
"authentication.permisssions.view_members.name",
|
|
"authentication.permisssions.view_members.description",
|
|
PERMISSION_SCOPE_TEAM,
|
|
}
|
|
PERMISSION_INVITE_GUEST = &Permission{
|
|
"invite_guest",
|
|
"authentication.permissions.invite_guest.name",
|
|
"authentication.permissions.invite_guest.description",
|
|
PERMISSION_SCOPE_TEAM,
|
|
}
|
|
PERMISSION_PROMOTE_GUEST = &Permission{
|
|
"promote_guest",
|
|
"authentication.permissions.promote_guest.name",
|
|
"authentication.permissions.promote_guest.description",
|
|
PERMISSION_SCOPE_SYSTEM,
|
|
}
|
|
|
|
PERMISSION_DEMOTE_TO_GUEST = &Permission{
|
|
"demote_to_guest",
|
|
"authentication.permissions.demote_to_guest.name",
|
|
"authentication.permissions.demote_to_guest.description",
|
|
PERMISSION_SCOPE_SYSTEM,
|
|
}
|
|
|
|
ALL_PERMISSIONS = []*Permission{
|
|
PERMISSION_INVITE_USER,
|
|
PERMISSION_ADD_USER_TO_TEAM,
|
|
PERMISSION_USE_SLASH_COMMANDS,
|
|
PERMISSION_MANAGE_SLASH_COMMANDS,
|
|
PERMISSION_MANAGE_OTHERS_SLASH_COMMANDS,
|
|
PERMISSION_CREATE_PUBLIC_CHANNEL,
|
|
PERMISSION_CREATE_PRIVATE_CHANNEL,
|
|
PERMISSION_MANAGE_PUBLIC_CHANNEL_MEMBERS,
|
|
PERMISSION_MANAGE_PRIVATE_CHANNEL_MEMBERS,
|
|
PERMISSION_ASSIGN_SYSTEM_ADMIN_ROLE,
|
|
PERMISSION_MANAGE_ROLES,
|
|
PERMISSION_MANAGE_TEAM_ROLES,
|
|
PERMISSION_MANAGE_CHANNEL_ROLES,
|
|
PERMISSION_CREATE_DIRECT_CHANNEL,
|
|
PERMISSION_CREATE_GROUP_CHANNEL,
|
|
PERMISSION_MANAGE_PUBLIC_CHANNEL_PROPERTIES,
|
|
PERMISSION_MANAGE_PRIVATE_CHANNEL_PROPERTIES,
|
|
PERMISSION_LIST_PUBLIC_TEAMS,
|
|
PERMISSION_JOIN_PUBLIC_TEAMS,
|
|
PERMISSION_LIST_PRIVATE_TEAMS,
|
|
PERMISSION_JOIN_PRIVATE_TEAMS,
|
|
PERMISSION_LIST_TEAM_CHANNELS,
|
|
PERMISSION_JOIN_PUBLIC_CHANNELS,
|
|
PERMISSION_DELETE_PUBLIC_CHANNEL,
|
|
PERMISSION_DELETE_PRIVATE_CHANNEL,
|
|
PERMISSION_EDIT_OTHER_USERS,
|
|
PERMISSION_READ_CHANNEL,
|
|
PERMISSION_READ_PUBLIC_CHANNEL,
|
|
PERMISSION_ADD_REACTION,
|
|
PERMISSION_REMOVE_REACTION,
|
|
PERMISSION_REMOVE_OTHERS_REACTIONS,
|
|
PERMISSION_PERMANENT_DELETE_USER,
|
|
PERMISSION_UPLOAD_FILE,
|
|
PERMISSION_GET_PUBLIC_LINK,
|
|
PERMISSION_MANAGE_WEBHOOKS,
|
|
PERMISSION_MANAGE_OTHERS_WEBHOOKS,
|
|
PERMISSION_MANAGE_INCOMING_WEBHOOKS,
|
|
PERMISSION_MANAGE_OUTGOING_WEBHOOKS,
|
|
PERMISSION_MANAGE_OTHERS_INCOMING_WEBHOOKS,
|
|
PERMISSION_MANAGE_OTHERS_OUTGOING_WEBHOOKS,
|
|
PERMISSION_MANAGE_OAUTH,
|
|
PERMISSION_MANAGE_SYSTEM_WIDE_OAUTH,
|
|
PERMISSION_MANAGE_EMOJIS,
|
|
PERMISSION_MANAGE_OTHERS_EMOJIS,
|
|
PERMISSION_CREATE_EMOJIS,
|
|
PERMISSION_DELETE_EMOJIS,
|
|
PERMISSION_DELETE_OTHERS_EMOJIS,
|
|
PERMISSION_CREATE_POST,
|
|
PERMISSION_CREATE_POST_PUBLIC,
|
|
PERMISSION_CREATE_POST_EPHEMERAL,
|
|
PERMISSION_EDIT_POST,
|
|
PERMISSION_EDIT_OTHERS_POSTS,
|
|
PERMISSION_DELETE_POST,
|
|
PERMISSION_DELETE_OTHERS_POSTS,
|
|
PERMISSION_REMOVE_USER_FROM_TEAM,
|
|
PERMISSION_CREATE_TEAM,
|
|
PERMISSION_MANAGE_TEAM,
|
|
PERMISSION_IMPORT_TEAM,
|
|
PERMISSION_VIEW_TEAM,
|
|
PERMISSION_LIST_USERS_WITHOUT_TEAM,
|
|
PERMISSION_MANAGE_JOBS,
|
|
PERMISSION_CREATE_USER_ACCESS_TOKEN,
|
|
PERMISSION_READ_USER_ACCESS_TOKEN,
|
|
PERMISSION_REVOKE_USER_ACCESS_TOKEN,
|
|
PERMISSION_CREATE_BOT,
|
|
PERMISSION_READ_BOTS,
|
|
PERMISSION_READ_OTHERS_BOTS,
|
|
PERMISSION_MANAGE_BOTS,
|
|
PERMISSION_MANAGE_OTHERS_BOTS,
|
|
PERMISSION_MANAGE_SYSTEM,
|
|
PERMISSION_VIEW_MEMBERS,
|
|
PERMISSION_INVITE_GUEST,
|
|
PERMISSION_PROMOTE_GUEST,
|
|
PERMISSION_DEMOTE_TO_GUEST,
|
|
}
|
|
}
|
|
|
|
func init() {
|
|
initializePermissions()
|
|
}
|