Add authorized actions output on resources (#870)

2021-01-20 10:53:01 -05:00
1 parent ec6151d174
commit dcb15cffbd
@@ -31,7 +31,7 @@ message Account {
 	google.protobuf.Timestamp updated_time = 60 [json_name="updated_time"];

 	// Version is used in mutation requests, after the initial creation, to ensure this resource has not changed.
-  // The mutation will fail if the version does not match the latest known good version.
+	// The mutation will fail if the version does not match the latest known good version.
 	uint32 version = 70;

 	// The type of this Account.
@@ -42,6 +42,9 @@ message Account {

 	// The attributes that are applicable for the specific Account type.
 	google.protobuf.Struct attributes = 100 [(custom_options.v1.generate_sdk_option) = true];
+
+	// Output only. The available actions on this resource for this user.
+	repeated string authorized_actions = 300 [json_name="authorized_actions"];
 }

 message PasswordAccountAttributes {
@@ -34,7 +34,7 @@ message AuthMethod {
 	google.protobuf.Timestamp updated_time = 70 [json_name="updated_time"];

 	// Version is used in mutation requests, after the initial creation, to ensure this resource has not changed.
-  // The mutation will fail if the version does not match the latest known good version.
+	// The mutation will fail if the version does not match the latest known good version.
 	uint32 version = 80;

 	// The Auth Method type.
@@ -42,6 +42,12 @@ message AuthMethod {

 	// The attributes that are applicable for the specific Auth Method type.
 	google.protobuf.Struct attributes = 100 [(custom_options.v1.generate_sdk_option) = true];
+
+	// Output only. The available actions on this resource for this user.
+	repeated string authorized_actions = 300 [json_name="authorized_actions"];
+
+	// Output only. The authorized actions for the scope's collections.
+	map<string, google.protobuf.ListValue> authorized_collection_actions = 310 [json_name="authorized_collection_actions"];
 }

 message PasswordAuthMethodAttributes {
@@ -42,4 +42,7 @@ message AuthToken {

 	// Output only. The time this Auth Token expires.
 	google.protobuf.Timestamp expiration_time = 110 [json_name="expiration_time"];
+
+	// Output only. The available actions on this resource for this user.
+	repeated string authorized_actions = 300 [json_name="authorized_actions"];
 }
@@ -41,7 +41,7 @@ message Group {
 	google.protobuf.Timestamp updated_time = 70 [json_name="updated_time"];

 	// Version is used in mutation requests, after the initial creation, to ensure this resource has not changed.
-  // The mutation will fail if the version does not match the latest known good version.
+	// The mutation will fail if the version does not match the latest known good version.
 	uint32 version = 80;

 	// Output only. Contains the list of member IDs in this Group.
@@ -49,4 +49,7 @@ message Group {

 	// Output only. The members of this Group.
 	repeated Member members = 100;
+
+	// Output only. The available actions on this resource for this user.
+	repeated string authorized_actions = 300 [json_name="authorized_actions"];
 }
@@ -34,7 +34,7 @@ message HostCatalog {
 	google.protobuf.Timestamp updated_time = 70 [json_name="updated_time"];

 	// Version is used in mutation requests, after the initial creation, to ensure this resource has not changed.
-  // The mutation will fail if the version does not match the latest known good version.
+	// The mutation will fail if the version does not match the latest known good version.
 	uint32 version = 80;

 	// The type of Host Catalog.
@@ -42,4 +42,10 @@ message HostCatalog {

 	// Attributes specific to the catalog type.
 	google.protobuf.Struct attributes = 100 [(custom_options.v1.generate_sdk_option) = true];
+
+	// Output only. The available actions on this resource for this user.
+	repeated string authorized_actions = 300 [json_name="authorized_actions"];
+
+	// Output only. The authorized actions for the scope's collections.
+	map<string, google.protobuf.ListValue> authorized_collection_actions = 310 [json_name="authorized_collection_actions"];
 }
@@ -34,7 +34,7 @@ message Host {
 	google.protobuf.Timestamp updated_time = 70 [json_name="updated_time"];

 	// Version is used in mutation requests, after the initial creation, to ensure this resource has not changed.
-  // The mutation will fail if the version does not match the latest known good version.
+	// The mutation will fail if the version does not match the latest known good version.
 	uint32 version = 80;

 	// The type of the resource.
@@ -45,6 +45,9 @@ message Host {

 	// The attributes that are applicable to the specific Host type.
 	google.protobuf.Struct attributes = 110 [(custom_options.v1.generate_sdk_option) = true];
+
+	// Output only. The available actions on this resource for this user.
+	repeated string authorized_actions = 300 [json_name="authorized_actions"];
 }

 message StaticHostAttributes {
@@ -35,7 +35,7 @@ message HostSet {
 	google.protobuf.Timestamp updated_time = 70 [json_name="updated_time"];

 	// Version is used in mutation requests, after the initial creation, to ensure this resource has not changed.
-  // The mutation will fail if the version does not match the latest known good version.
+	// The mutation will fail if the version does not match the latest known good version.
 	uint32 version = 80;

 	// The type of the Host Set.
@@ -46,4 +46,7 @@ message HostSet {

 	// The attributes that are applicable for the specific Host Set type.
 	google.protobuf.Struct attributes = 110;
+
+	// Output only. The available actions on this resource for this user.
+	repeated string authorized_actions = 300 [json_name="authorized_actions"];
 }
@@ -66,7 +66,7 @@ message Role {
 	google.protobuf.Timestamp updated_time = 70 [json_name="updated_time"];

 	// Version is used in mutation requests, after the initial creation, to ensure this resource has not changed.
-  // The mutation will fail if the version does not match the latest known good version.
+	// The mutation will fail if the version does not match the latest known good version.
 	uint32 version = 80;

 	// The Scope the grants will apply to. If the Role is at the global scope, this can be an org or project. If the Role is at an org scope, this can be a project within the org. It is invalid for this to be anything other than the Role's scope when the Role's scope is a project.
@@ -83,4 +83,7 @@ message Role {

 	// Output only. The parsed grant information.
 	repeated Grant grants = 130;
+
+	// Output only. The available actions on this resource for this user.
+	repeated string authorized_actions = 300 [json_name="authorized_actions"];
 }
@@ -6,6 +6,7 @@ option go_package = "github.com/hashicorp/boundary/internal/gen/controller/api/r

 import "google/protobuf/timestamp.proto";
 import "google/protobuf/wrappers.proto";
+import "google/protobuf/struct.proto";
 import "controller/custom_options/v1/options.proto";

 message ScopeInfo {
@@ -49,9 +50,15 @@ message Scope {
 	google.protobuf.Timestamp updated_time = 70 [json_name="updated_time"];

 	// Version is used in mutation requests, after the initial creation, to ensure this resource has not changed.
-  // The mutation will fail if the version does not match the latest known good version.
+	// The mutation will fail if the version does not match the latest known good version.
 	uint32 version = 80;

 	// The type of the resource.
 	string type = 90;
+
+	// Output only. The available actions on this resource for this user.
+	repeated string authorized_actions = 300 [json_name="authorized_actions"];
+
+	// Output only. The authorized actions for the scope's collections.
+	map<string, google.protobuf.ListValue> authorized_collection_actions = 310 [json_name="authorized_collection_actions"];
 }
@@ -52,7 +52,7 @@ message Session {

  // Output only. After this time the connection will be expired, e.g. forcefully terminated.
  google.protobuf.Timestamp expiration_time = 100 [json_name = "expiration_time"];
-  
+
  // Output only. The ID of the Auth Token used to authenticate.
  string auth_token_id = 110 [json_name = "auth_token_id"];

@@ -85,4 +85,7 @@ message Session {

  // Output only. If the session is terminated, this provides a short description as to why.
  string termination_reason = 210 [json_name = "termination_reason"];
+
+  // Output only. The available actions on this resource for this user.
+  repeated string authorized_actions = 300 [json_name="authorized_actions"];
 }
@@ -60,11 +60,11 @@ message Target {
 	// Maximum number of connections allowed in a Session.  Unlimited is indicated by the value -1.
 	google.protobuf.Int32Value session_connection_limit = 130 [json_name="session_connection_limit", (custom_options.v1.generate_sdk_option) = true, (custom_options.v1.mask_mapping) = {this:"session_connection_limit" that: "SessionConnectionLimit"}];

-	// Output only. The available actions on this resource for this user.
-	repeated string authorized_actions = 140 [json_name="authorized_actions"];
-
 	// The attributes that are applicable for the specific Target.
 	google.protobuf.Struct attributes = 200 [(custom_options.v1.generate_sdk_option) = true];
+
+	// Output only. The available actions on this resource for this user.
+	repeated string authorized_actions = 300 [json_name="authorized_actions"];
 }

 // TcpTargetAttributes contains attributes relevant to Targets of type "tcp"
@@ -41,7 +41,7 @@ message User {
 	google.protobuf.Timestamp updated_time = 70 [json_name="updated_time"];

 	// Version is used in mutation requests, after the initial creation, to ensure this resource has not changed.
-  // The mutation will fail if the version does not match the latest known good version.
+	// The mutation will fail if the version does not match the latest known good version.
 	uint32 version = 80;

 	// Output only. Contains the list of Account IDs linked to this User.
@@ -49,4 +49,7 @@ message User {

 	// Output only. The Accounts linked to this User.
 	repeated Account accounts = 100;
+
+	// Output only. The available actions on this resource for this user.
+	repeated string authorized_actions = 300 [json_name="authorized_actions"];
 }