mirror of
https://github.com/appwrite/appwrite.git
synced 2026-05-26 13:51:13 +00:00
Jake Barnby
b747c97561
- Register dedicated reports.write scope and switch deleteReport to it so cloud can issue narrowly-scoped delete keys without granting insights.write. - Make insights.parentResourceInternalId optional with null default to match its companion parentResourceType/parentResourceId fields and unblock insights with no parent (e.g. database-level performance insights). - Tighten Insight.reportId model description: insights always belong to a report, ad-hoc insights are not supported. - Add reports.write to default test API key and admin role so existing e2e tests using serverHeaders() can hit the delete endpoint. - Bump APP_CACHE_BUSTER for the schema change. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
154 lines
3.1 KiB
PHP
154 lines
3.1 KiB
PHP
<?php
|
|
|
|
use Appwrite\Utopia\Database\Documents\User;
|
|
|
|
$member = [
|
|
'global',
|
|
'public',
|
|
'home',
|
|
'console',
|
|
'graphql',
|
|
'sessions.write',
|
|
'account',
|
|
'teams.read',
|
|
'teams.write',
|
|
'documents.read',
|
|
'documents.write',
|
|
'rows.read',
|
|
'rows.write',
|
|
'files.read',
|
|
'files.write',
|
|
'projects.read',
|
|
'locale.read',
|
|
'avatars.read',
|
|
'executions.read',
|
|
'executions.write',
|
|
'targets.read',
|
|
'targets.write',
|
|
'subscribers.write',
|
|
'subscribers.read',
|
|
'assistant.read',
|
|
'rules.read',
|
|
];
|
|
|
|
$admins = [
|
|
'global',
|
|
'graphql',
|
|
'sessions.write',
|
|
'teams.read',
|
|
'teams.write',
|
|
'documents.read',
|
|
'documents.write',
|
|
'rows.read',
|
|
'rows.write',
|
|
'files.read',
|
|
'files.write',
|
|
'buckets.read',
|
|
'buckets.write',
|
|
'users.read',
|
|
'users.write',
|
|
'databases.read',
|
|
'databases.write',
|
|
'collections.read',
|
|
'collections.write',
|
|
'tables.read',
|
|
'tables.write',
|
|
'platforms.read',
|
|
'platforms.write',
|
|
'oauth2.read',
|
|
'oauth2.write',
|
|
'mocks.read',
|
|
'mocks.write',
|
|
'project.policies.read',
|
|
'project.policies.write',
|
|
'templates.read',
|
|
'templates.write',
|
|
'projects.write',
|
|
'keys.read',
|
|
'keys.write',
|
|
'devKeys.read',
|
|
'devKeys.write',
|
|
'webhooks.read',
|
|
'webhooks.write',
|
|
'project.read',
|
|
'project.write',
|
|
'locale.read',
|
|
'avatars.read',
|
|
'health.read',
|
|
'functions.read',
|
|
'functions.write',
|
|
'sites.read',
|
|
'sites.write',
|
|
'log.read',
|
|
'log.write',
|
|
'executions.read',
|
|
'executions.write',
|
|
'rules.read',
|
|
'rules.write',
|
|
'migrations.read',
|
|
'migrations.write',
|
|
'vcs.read',
|
|
'vcs.write',
|
|
'targets.read',
|
|
'targets.write',
|
|
'providers.write',
|
|
'providers.read',
|
|
'messages.write',
|
|
'messages.read',
|
|
'topics.write',
|
|
'topics.read',
|
|
'subscribers.write',
|
|
'subscribers.read',
|
|
'tokens.read',
|
|
'tokens.write',
|
|
'schedules.read',
|
|
'schedules.write',
|
|
'insights.read',
|
|
'insights.write',
|
|
'reports.read',
|
|
'reports.write',
|
|
];
|
|
|
|
return [
|
|
User::ROLE_GUESTS => [
|
|
'label' => 'Guests',
|
|
'scopes' => [
|
|
'global',
|
|
'public',
|
|
'home',
|
|
'console',
|
|
'graphql',
|
|
'sessions.write',
|
|
'documents.read',
|
|
'documents.write',
|
|
'rows.read',
|
|
'rows.write',
|
|
'files.read',
|
|
'files.write',
|
|
'locale.read',
|
|
'avatars.read',
|
|
'executions.write',
|
|
],
|
|
],
|
|
User::ROLE_USERS => [
|
|
'label' => 'Users',
|
|
'scopes' => \array_merge($member),
|
|
],
|
|
User::ROLE_ADMIN => [
|
|
'label' => 'Admin',
|
|
'scopes' => \array_merge($admins),
|
|
],
|
|
User::ROLE_DEVELOPER => [
|
|
'label' => 'Developer',
|
|
'scopes' => \array_merge($admins),
|
|
],
|
|
User::ROLE_OWNER => [
|
|
'label' => 'Owner',
|
|
'scopes' => \array_merge($member, $admins),
|
|
],
|
|
User::ROLE_APPS => [
|
|
'label' => 'Applications',
|
|
'scopes' => ['global', 'health.read', 'graphql'],
|
|
],
|
|
];
|