Fix scopes

This commit is contained in:
Matej Bačo
2026-04-08 10:01:52 +02:00
parent c7a022ba43
commit eef2a7abdf
9 changed files with 31 additions and 21 deletions
-14
View File
@@ -3,13 +3,6 @@
// List of scopes for organization (teams) API keys
return [
"platforms.read" => [
"description" => 'Access to read project\'s platforms',
],
"platforms.write" => [
"description" =>
'Access to create, update, and delete project\'s platforms',
],
"projects.read" => [
"description" => 'Access to read organization\'s projects',
],
@@ -17,13 +10,6 @@ return [
"description" =>
"Access to create, update, and delete projects in organization",
],
"keys.read" => [
"description" => 'Access to read project\'s API keys',
],
"keys.write" => [
"description" =>
"Access to create, update, and delete project\'s API keys",
],
"devKeys.read" => [
"description" => 'Access to read project\'s development keys',
],
+16
View File
@@ -188,4 +188,20 @@ return [ // List of publicly visible scopes
"description" =>
"Access to update project\'s information",
],
"keys.read" => [
"description" =>
"Access to read project\'s keys",
],
"keys.write" => [
"description" =>
"Access to create, update, and delete project\'s keys",
],
"platforms.read" => [
"description" =>
"Access to read project\'s platforms",
],
"platforms.write" => [
"description" =>
"Access to create, update, and delete project\'s platforms",
],
];
@@ -41,7 +41,7 @@ class Create extends Base
->httpAlias('/v1/projects/:projectId/keys')
->desc('Create project key')
->groups(['api', 'project'])
->label('scope', 'project.write')
->label('scope', 'keys.write')
->label('event', 'keys.[keyId].create')
->label('audits.event', 'project.key.create')
->label('audits.resource', 'project.key/{response.$id}')
@@ -34,7 +34,7 @@ class Delete extends Base
->httpAlias('/v1/projects/:projectId/keys/:keyId')
->desc('Delete project key')
->groups(['api', 'project'])
->label('scope', 'project.write')
->label('scope', 'keys.write')
->label('event', 'keys.[keyId].delete')
->label('audits.event', 'project.key.delete')
->label('audits.resource', 'project.key/{request.keyId}')
@@ -32,7 +32,7 @@ class Get extends Base
->httpAlias('/v1/projects/:projectId/keys/:keyId')
->desc('Get project key')
->groups(['api', 'project'])
->label('scope', 'project.read')
->label('scope', 'keys.read')
->label('sdk', new Method(
namespace: 'project',
group: 'keys',
@@ -39,7 +39,7 @@ class Update extends Base
->httpAlias('/v1/projects/:projectId/keys/:keyId')
->desc('Update project key')
->groups(['api', 'project'])
->label('scope', 'project.write')
->label('scope', 'keys.write')
->label('event', 'keys.[keyId].update')
->label('audits.event', 'project.key.update')
->label('audits.resource', 'project.key/{response.$id}')
@@ -37,7 +37,7 @@ class XList extends Base
->httpAlias('/v1/projects/:projectId/keys')
->desc('List project keys')
->groups(['api', 'project'])
->label('scope', 'project.read')
->label('scope', 'keys.read')
->label('sdk', new Method(
namespace: 'project',
group: 'keys',
+5 -1
View File
@@ -379,7 +379,11 @@ class Migrations extends Action
'webhooks.read',
'webhooks.write',
'project.read',
'project.write'
'project.write',
'keys.read',
'keys.write',
'platforms.read',
'platforms.write',
]
]);
+5 -1
View File
@@ -164,7 +164,11 @@ trait ProjectCustom
'webhooks.read',
'webhooks.write',
'project.read',
'project.write'
'project.write',
'keys.read',
'keys.write',
'platforms.read',
'platforms.write',
],
]);