rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix missing cmid scope

Browse Source 
Signed-off-by: Bryan Frimin <bryan@probo.com>
This commit is contained in:
Bryan Frimin
2026-06-19 18:49:33 +02:00
parent 8add4713c8
commit 9fd95a0bf9
19 changed files with 611 additions and 646 deletions
Download Patch File Download Diff File Expand all files Collapse all files

753
pkg/probo/oauth2_scopes.go
View File

@@ -16,7 +16,6 @@ package probo
import (
"go.probo.inc/probo/pkg/coredata"
"go.probo.inc/probo/pkg/iam"
)
const (
@@ -66,383 +65,379 @@ const (
ScopeV1Webhook coredata.OAuth2Scope = "v1:webhook"
)
// OAuth2ScopeSet returns OAuth2 scope mappings for core probo actions.
func OAuth2ScopeSet() *iam.ScopeSet {
return iam.CreateScopeSet(
map[coredata.OAuth2Scope][]iam.Action{
// OAuth2ScopeMappings maps OAuth2 scopes to core probo actions.
var OAuth2ScopeMappings = map[coredata.OAuth2Scope][]string{
ScopeV1AssetRead: {
ActionAssetGet,
ActionAssetList,
},
ScopeV1Asset: {
ActionAssetCreate,
ActionAssetUpdate,
ActionAssetDelete,
ActionAssetPublish,
},
ScopeV1AuditRead: {
ActionAuditGet,
ActionAuditList,
ActionFindingGet,
ActionFindingList,
ActionReportGet,
ActionReportGetReportUrl,
ActionReportDownloadUrlGet,
},
ScopeV1Audit: {
ActionAuditCreate,
ActionAuditUpdate,
ActionAuditDelete,
ActionAuditReportUpload,
ActionAuditReportDelete,
ActionFindingCreate,
ActionFindingUpdate,
ActionFindingDelete,
ActionFindingAuditMappingCreate,
ActionFindingAuditMappingDelete,
ActionFindingPublish,
},
ScopeV1CommonThirdPartyRead: {
ActionCommonThirdPartyGet,
ActionCommonThirdPartyList,
},
ScopeV1CompliancePageRead: {
ActionTrustCenterGet,
ActionTrustCenterGetNda,
ActionTrustCenterAccessGet,
ActionTrustCenterAccessList,
ActionTrustCenterFileGet,
ActionTrustCenterFileList,
ActionTrustCenterFileGetFileUrl,
ActionTrustCenterReferenceList,
ActionTrustCenterReferenceGetLogoUrl,
ActionTrustCenterDocumentAccessList,
ActionMailingListUpdateList,
ActionMailingListSubscriberList,
ActionComplianceFrameworkList,
ActionComplianceExternalURLList,
ActionCustomDomainGet,
},
ScopeV1CompliancePage: {
ActionTrustCenterUpdate,
ActionTrustCenterNonDisclosureAgreementUpload,
ActionTrustCenterNonDisclosureAgreementDelete,
ActionTrustCenterAccessCreate,
ActionTrustCenterAccessUpdate,
ActionTrustCenterAccessDelete,
ActionTrustCenterFileUpdate,
ActionTrustCenterFileDelete,
ActionTrustCenterFileCreate,
ActionTrustCenterReferenceCreate,
ActionTrustCenterReferenceUpdate,
ActionTrustCenterReferenceDelete,
ActionMailingListUpdateCreate,
ActionMailingListUpdateUpdate,
ActionMailingListUpdateSend,
ActionMailingListUpdateDelete,
ActionMailingListUpdate,
ActionMailingListSubscriberCreate,
ActionMailingListSubscriberDelete,
ActionComplianceFrameworkCreate,
ActionComplianceFrameworkDelete,
ActionComplianceFrameworkUpdateRank,
ActionComplianceExternalURLCreate,
ActionComplianceExternalURLUpdate,
ActionComplianceExternalURLDelete,
ActionCustomDomainCreate,
ActionCustomDomainDelete,
},
ScopeV1ConnectorRead: {
ActionConnectorList,
ActionConnectorGet,
},
ScopeV1Connector: {
ActionConnectorCreate,
ActionConnectorDelete,
ActionConnectorInitiate,
},
ScopeV1ControlRead: {
ActionControlGet,
ActionControlList,
ActionMeasureGet,
ActionMeasureList,
ActionFrameworkGet,
ActionFrameworkList,
ActionFrameworkExport,
ActionObligationGet,
ActionObligationList,
ActionStatementOfApplicabilityList,
ActionStatementOfApplicabilityGet,
ActionApplicabilityStatementGet,
ActionApplicabilityStatementList,
},
ScopeV1Control: {
ActionControlCreate,
ActionControlUpdate,
ActionControlDelete,
ActionControlMeasureMappingCreate,
ActionControlMeasureMappingDelete,
ActionControlDocumentMappingCreate,
ActionControlDocumentMappingDelete,
ActionControlAuditMappingCreate,
ActionControlAuditMappingDelete,
ActionControlObligationMappingCreate,
ActionControlObligationMappingDelete,
ActionMeasureCreate,
ActionMeasureUpdate,
ActionMeasureDelete,
ActionMeasureEvidenceUpload,
ActionMeasureImport,
ActionMeasureDocumentMappingCreate,
ActionMeasureDocumentMappingDelete,
ActionMeasureThirdPartyMappingCreate,
ActionMeasureThirdPartyMappingDelete,
ActionFrameworkCreate,
ActionFrameworkUpdate,
ActionFrameworkDelete,
ActionFrameworkImport,
ActionObligationCreate,
ActionObligationUpdate,
ActionObligationDelete,
ActionObligationPublish,
ActionStatementOfApplicabilityCreate,
ActionStatementOfApplicabilityUpdate,
ActionStatementOfApplicabilityDelete,
ActionStatementOfApplicabilityPublish,
ActionApplicabilityStatementCreate,
ActionApplicabilityStatementUpdate,
ActionApplicabilityStatementDelete,
},
ScopeV1DatumRead: {
ActionDatumGet,
ActionDatumList,
},
ScopeV1Datum: {
ActionDatumCreate,
ActionDatumUpdate,
ActionDatumDelete,
ActionDatumPublish,
},
ScopeV1DocumentRead: {
ActionDocumentGet,
ActionDocumentList,
ActionDocumentVersionGet,
ActionDocumentVersionList,
ActionDocumentVersionExportPDF,
ActionDocumentVersionApprovalList,
ActionDocumentVersionExport,
ActionEmployeeDocumentGet,
ActionEmployeeDocumentList,
ActionEmployeeDocumentVersionExportPDF,
ActionDocumentVersionSignatureGet,
ActionDocumentVersionSignatureList,
ActionElectronicSignatureGet,
ActionFileGet,
},
ScopeV1Document: {
ActionDocumentCreate,
ActionDocumentUpdate,
ActionDocumentDelete,
ActionDocumentChangelogGenerate,
ActionDocumentArchive,
ActionDocumentUnarchive,
ActionDocumentDeleteDraft,
ActionDocumentVersionSign,
ActionDocumentVersionRequestApproval,
ActionDocumentVersionVoidApproval,
ActionDocumentVersionApprove,
ActionDocumentVersionReject,
ActionDocumentVersionPublish,
ActionDocumentVersionSignatureRequest,
ActionDocumentVersionCancelSignature,
},
ScopeV1OrgRead: {
ActionOrganizationGet,
ActionOrganizationGetLogoUrl,
ActionOrganizationGetHorizontalLogoUrl,
ActionOrganizationContextGet,
},
ScopeV1Org: {
ActionOrganizationUpdate,
ActionOrganizationContextUpdate,
},
ScopeV1PrivacyRead: {
ActionProcessingActivityList,
ActionProcessingActivityGet,
ActionDataProtectionImpactAssessmentList,
ActionDataProtectionImpactAssessmentGet,
ActionTransferImpactAssessmentList,
ActionTransferImpactAssessmentGet,
ActionRightsRequestList,
ActionRightsRequestGet,
ActionCookieBannerGet,
ActionCookieBannerList,
ActionCookieBannerVersionGet,
ActionCookieBannerVersionList,
ActionCookieCategoryGet,
ActionCookieCategoryList,
ActionCookieGet,
ActionCookieList,
ActionCookieConsentRecordList,
ActionTrackerPatternGet,
ActionTrackerPatternList,
ActionTrackerResourceGet,
ActionTrackerResourceList,
},
ScopeV1Privacy: {
ActionProcessingActivityCreate,
ActionProcessingActivityUpdate,
ActionProcessingActivityDelete,
ActionProcessingActivityPublish,
ActionDataProtectionImpactAssessmentCreate,
ActionDataProtectionImpactAssessmentUpdate,
ActionDataProtectionImpactAssessmentDelete,
ActionDataProtectionImpactAssessmentPublish,
ActionTransferImpactAssessmentCreate,
ActionTransferImpactAssessmentUpdate,
ActionTransferImpactAssessmentDelete,
ActionTransferImpactAssessmentPublish,
ActionRightsRequestCreate,
ActionRightsRequestUpdate,
ActionRightsRequestDelete,
ActionCookieBannerCreate,
ActionCookieBannerUpdate,
ActionCookieBannerDelete,
ActionCookieBannerActivate,
ActionCookieBannerDeactivate,
ActionCookieBannerRegeneratePolicy,
ActionCookieBannerVersionPublish,
ActionCookieCategoryCreate,
ActionCookieCategoryUpdate,
ActionCookieCategoryDelete,
ActionCookieCreate,
ActionCookieUpdate,
ActionCookieDelete,
ActionTrackerPatternCreate,
ActionTrackerPatternUpdate,
ActionTrackerPatternDelete,
ActionTrackerResourceCreate,
ActionTrackerResourceUpdate,
ActionTrackerResourceDelete,
},
ScopeV1RiskRead: {
ActionRiskGet,
ActionRiskList,
ActionRiskAssessmentGet,
ActionRiskAssessmentList,
ActionRiskAssessmentScopeGet,
ActionRiskAssessmentScopeList,
ActionRiskAssessmentNodeGet,
ActionRiskAssessmentNodeList,
ActionRiskAssessmentBoundaryGet,
ActionRiskAssessmentBoundaryList,
ActionRiskAssessmentProcessGet,
ActionRiskAssessmentProcessList,
ActionRiskAssessmentThreatGet,
ActionRiskAssessmentThreatList,
ActionRiskAssessmentScenarioGet,
ActionRiskAssessmentScenarioList,
},
ScopeV1Risk: {
ActionRiskCreate,
ActionRiskUpdate,
ActionRiskDelete,
ActionRiskMeasureMappingCreate,
ActionRiskMeasureMappingDelete,
ActionRiskDocumentMappingCreate,
ActionRiskDocumentMappingDelete,
ActionRiskObligationMappingCreate,
ActionRiskObligationMappingDelete,
ActionRiskPublish,
ActionRiskAssessmentCreate,
ActionRiskAssessmentUpdate,
ActionRiskAssessmentDelete,
ActionRiskAssessmentScopeCreate,
ActionRiskAssessmentScopeUpdate,
ActionRiskAssessmentScopeDelete,
ActionRiskAssessmentNodeCreate,
ActionRiskAssessmentNodeUpdate,
ActionRiskAssessmentNodeDelete,
ActionRiskAssessmentBoundaryCreate,
ActionRiskAssessmentBoundaryUpdate,
ActionRiskAssessmentBoundaryDelete,
ActionRiskAssessmentProcessCreate,
ActionRiskAssessmentProcessUpdate,
ActionRiskAssessmentProcessDelete,
ActionRiskAssessmentThreatCreate,
ActionRiskAssessmentThreatUpdate,
ActionRiskAssessmentThreatDelete,
ActionRiskAssessmentScenarioCreate,
ActionRiskAssessmentScenarioUpdate,
ActionRiskAssessmentScenarioDelete,
ActionRiskAssessmentScenarioThreatLink,
ActionRiskAssessmentScenarioThreatUnlink,
ActionRiskAssessmentScenarioRiskLink,
ActionRiskAssessmentScenarioRiskUnlink,
},
ScopeV1SlackConnectionRead: {
ActionSlackConnectionList,
},
ScopeV1TaskRead: {
ActionTaskGet,
ActionTaskList,
ActionEvidenceList,
},
ScopeV1Task: {
ActionTaskCreate,
ActionTaskUpdate,
ActionTaskDelete,
ActionTaskAssign,
ActionTaskUnassign,
ActionEvidenceDelete,
},
ScopeV1ThirdPartyRead: {
ActionThirdPartyList,
ActionThirdPartyGet,
ActionThirdPartyRelationList,
ActionThirdPartyContactGet,
ActionThirdPartyContactList,
ActionThirdPartyServiceGet,
ActionThirdPartyServiceList,
ActionThirdPartyComplianceReportGet,
ActionThirdPartyComplianceReportList,
ActionThirdPartyBusinessAssociateAgreementGet,
ActionThirdPartyDataPrivacyAgreementGet,
ActionThirdPartyRiskAssessmentList,
},
ScopeV1ThirdParty: {
ActionThirdPartyCreate,
ActionThirdPartyUpdate,
ActionThirdPartyDelete,
ActionThirdPartyVet,
ActionThirdPartyPublish,
ActionThirdPartyRelationCreate,
ActionThirdPartyContactCreate,
ActionThirdPartyContactUpdate,
ActionThirdPartyContactDelete,
ActionThirdPartyServiceCreate,
ActionThirdPartyServiceUpdate,
ActionThirdPartyServiceDelete,
ActionThirdPartyComplianceReportUpload,
ActionThirdPartyComplianceReportDelete,
ActionThirdPartyBusinessAssociateAgreementUpload,
ActionThirdPartyBusinessAssociateAgreementUpdate,
ActionThirdPartyBusinessAssociateAgreementDelete,
ActionThirdPartyDataPrivacyAgreementUpload,
ActionThirdPartyDataPrivacyAgreementUpdate,
ActionThirdPartyDataPrivacyAgreementDelete,
ActionThirdPartyRiskAssessmentCreate,
},
ScopeV1WebhookRead: {
ActionWebhookSubscriptionList,
ActionWebhookSubscriptionGet,
},
ScopeV1Webhook: {
ActionWebhookSubscriptionCreate,
ActionWebhookSubscriptionUpdate,
ActionWebhookSubscriptionDelete,
},
},
)
ScopeV1AssetRead: {
ActionAssetGet,
ActionAssetList,
},
ScopeV1Asset: {
ActionAssetCreate,
ActionAssetUpdate,
ActionAssetDelete,
ActionAssetPublish,
},
ScopeV1AuditRead: {
ActionAuditGet,
ActionAuditList,
ActionFindingGet,
ActionFindingList,
ActionReportGet,
ActionReportGetReportUrl,
ActionReportDownloadUrlGet,
},
ScopeV1Audit: {
ActionAuditCreate,
ActionAuditUpdate,
ActionAuditDelete,
ActionAuditReportUpload,
ActionAuditReportDelete,
ActionFindingCreate,
ActionFindingUpdate,
ActionFindingDelete,
ActionFindingAuditMappingCreate,
ActionFindingAuditMappingDelete,
ActionFindingPublish,
},
ScopeV1CommonThirdPartyRead: {
ActionCommonThirdPartyGet,
ActionCommonThirdPartyList,
},
ScopeV1CompliancePageRead: {
ActionTrustCenterGet,
ActionTrustCenterGetNda,
ActionTrustCenterAccessGet,
ActionTrustCenterAccessList,
ActionTrustCenterFileGet,
ActionTrustCenterFileList,
ActionTrustCenterFileGetFileUrl,
ActionTrustCenterReferenceList,
ActionTrustCenterReferenceGetLogoUrl,
ActionTrustCenterDocumentAccessList,
ActionMailingListUpdateList,
ActionMailingListSubscriberList,
ActionComplianceFrameworkList,
ActionComplianceExternalURLList,
ActionCustomDomainGet,
},
ScopeV1CompliancePage: {
ActionTrustCenterUpdate,
ActionTrustCenterNonDisclosureAgreementUpload,
ActionTrustCenterNonDisclosureAgreementDelete,
ActionTrustCenterAccessCreate,
ActionTrustCenterAccessUpdate,
ActionTrustCenterAccessDelete,
ActionTrustCenterFileUpdate,
ActionTrustCenterFileDelete,
ActionTrustCenterFileCreate,
ActionTrustCenterReferenceCreate,
ActionTrustCenterReferenceUpdate,
ActionTrustCenterReferenceDelete,
ActionMailingListUpdateCreate,
ActionMailingListUpdateUpdate,
ActionMailingListUpdateSend,
ActionMailingListUpdateDelete,
ActionMailingListUpdate,
ActionMailingListSubscriberCreate,
ActionMailingListSubscriberDelete,
ActionComplianceFrameworkCreate,
ActionComplianceFrameworkDelete,
ActionComplianceFrameworkUpdateRank,
ActionComplianceExternalURLCreate,
ActionComplianceExternalURLUpdate,
ActionComplianceExternalURLDelete,
ActionCustomDomainCreate,
ActionCustomDomainDelete,
},
ScopeV1ConnectorRead: {
ActionConnectorList,
ActionConnectorGet,
},
ScopeV1Connector: {
ActionConnectorCreate,
ActionConnectorDelete,
ActionConnectorInitiate,
},
ScopeV1ControlRead: {
ActionControlGet,
ActionControlList,
ActionMeasureGet,
ActionMeasureList,
ActionFrameworkGet,
ActionFrameworkList,
ActionFrameworkExport,
ActionObligationGet,
ActionObligationList,
ActionStatementOfApplicabilityList,
ActionStatementOfApplicabilityGet,
ActionApplicabilityStatementGet,
ActionApplicabilityStatementList,
},
ScopeV1Control: {
ActionControlCreate,
ActionControlUpdate,
ActionControlDelete,
ActionControlMeasureMappingCreate,
ActionControlMeasureMappingDelete,
ActionControlDocumentMappingCreate,
ActionControlDocumentMappingDelete,
ActionControlAuditMappingCreate,
ActionControlAuditMappingDelete,
ActionControlObligationMappingCreate,
ActionControlObligationMappingDelete,
ActionMeasureCreate,
ActionMeasureUpdate,
ActionMeasureDelete,
ActionMeasureEvidenceUpload,
ActionMeasureImport,
ActionMeasureDocumentMappingCreate,
ActionMeasureDocumentMappingDelete,
ActionMeasureThirdPartyMappingCreate,
ActionMeasureThirdPartyMappingDelete,
ActionFrameworkCreate,
ActionFrameworkUpdate,
ActionFrameworkDelete,
ActionFrameworkImport,
ActionObligationCreate,
ActionObligationUpdate,
ActionObligationDelete,
ActionObligationPublish,
ActionStatementOfApplicabilityCreate,
ActionStatementOfApplicabilityUpdate,
ActionStatementOfApplicabilityDelete,
ActionStatementOfApplicabilityPublish,
ActionApplicabilityStatementCreate,
ActionApplicabilityStatementUpdate,
ActionApplicabilityStatementDelete,
},
ScopeV1DatumRead: {
ActionDatumGet,
ActionDatumList,
},
ScopeV1Datum: {
ActionDatumCreate,
ActionDatumUpdate,
ActionDatumDelete,
ActionDatumPublish,
},
ScopeV1DocumentRead: {
ActionDocumentGet,
ActionDocumentList,
ActionDocumentVersionGet,
ActionDocumentVersionList,
ActionDocumentVersionExportPDF,
ActionDocumentVersionApprovalList,
ActionDocumentVersionExport,
ActionEmployeeDocumentGet,
ActionEmployeeDocumentList,
ActionEmployeeDocumentVersionExportPDF,
ActionDocumentVersionSignatureGet,
ActionDocumentVersionSignatureList,
ActionElectronicSignatureGet,
ActionFileGet,
},
ScopeV1Document: {
ActionDocumentCreate,
ActionDocumentUpdate,
ActionDocumentDelete,
ActionDocumentChangelogGenerate,
ActionDocumentArchive,
ActionDocumentUnarchive,
ActionDocumentDeleteDraft,
ActionDocumentVersionSign,
ActionDocumentVersionRequestApproval,
ActionDocumentVersionVoidApproval,
ActionDocumentVersionApprove,
ActionDocumentVersionReject,
ActionDocumentVersionPublish,
ActionDocumentVersionSignatureRequest,
ActionDocumentVersionCancelSignature,
},
ScopeV1OrgRead: {
ActionOrganizationGet,
ActionOrganizationGetLogoUrl,
ActionOrganizationGetHorizontalLogoUrl,
ActionOrganizationContextGet,
},
ScopeV1Org: {
ActionOrganizationUpdate,
ActionOrganizationContextUpdate,
},
ScopeV1PrivacyRead: {
ActionProcessingActivityList,
ActionProcessingActivityGet,
ActionDataProtectionImpactAssessmentList,
ActionDataProtectionImpactAssessmentGet,
ActionTransferImpactAssessmentList,
ActionTransferImpactAssessmentGet,
ActionRightsRequestList,
ActionRightsRequestGet,
ActionCookieBannerGet,
ActionCookieBannerList,
ActionCookieBannerVersionGet,
ActionCookieBannerVersionList,
ActionCookieCategoryGet,
ActionCookieCategoryList,
ActionCookieGet,
ActionCookieList,
ActionCookieConsentRecordList,
ActionTrackerPatternGet,
ActionTrackerPatternList,
ActionTrackerResourceGet,
ActionTrackerResourceList,
},
ScopeV1Privacy: {
ActionProcessingActivityCreate,
ActionProcessingActivityUpdate,
ActionProcessingActivityDelete,
ActionProcessingActivityPublish,
ActionDataProtectionImpactAssessmentCreate,
ActionDataProtectionImpactAssessmentUpdate,
ActionDataProtectionImpactAssessmentDelete,
ActionDataProtectionImpactAssessmentPublish,
ActionTransferImpactAssessmentCreate,
ActionTransferImpactAssessmentUpdate,
ActionTransferImpactAssessmentDelete,
ActionTransferImpactAssessmentPublish,
ActionRightsRequestCreate,
ActionRightsRequestUpdate,
ActionRightsRequestDelete,
ActionCookieBannerCreate,
ActionCookieBannerUpdate,
ActionCookieBannerDelete,
ActionCookieBannerActivate,
ActionCookieBannerDeactivate,
ActionCookieBannerRegeneratePolicy,
ActionCookieBannerVersionPublish,
ActionCookieCategoryCreate,
ActionCookieCategoryUpdate,
ActionCookieCategoryDelete,
ActionCookieCreate,
ActionCookieUpdate,
ActionCookieDelete,
ActionTrackerPatternCreate,
ActionTrackerPatternUpdate,
ActionTrackerPatternDelete,
ActionTrackerResourceCreate,
ActionTrackerResourceUpdate,
ActionTrackerResourceDelete,
},
ScopeV1RiskRead: {
ActionRiskGet,
ActionRiskList,
ActionRiskAssessmentGet,
ActionRiskAssessmentList,
ActionRiskAssessmentScopeGet,
ActionRiskAssessmentScopeList,
ActionRiskAssessmentNodeGet,
ActionRiskAssessmentNodeList,
ActionRiskAssessmentBoundaryGet,
ActionRiskAssessmentBoundaryList,
ActionRiskAssessmentProcessGet,
ActionRiskAssessmentProcessList,
ActionRiskAssessmentThreatGet,
ActionRiskAssessmentThreatList,
ActionRiskAssessmentScenarioGet,
ActionRiskAssessmentScenarioList,
},
ScopeV1Risk: {
ActionRiskCreate,
ActionRiskUpdate,
ActionRiskDelete,
ActionRiskMeasureMappingCreate,
ActionRiskMeasureMappingDelete,
ActionRiskDocumentMappingCreate,
ActionRiskDocumentMappingDelete,
ActionRiskObligationMappingCreate,
ActionRiskObligationMappingDelete,
ActionRiskPublish,
ActionRiskAssessmentCreate,
ActionRiskAssessmentUpdate,
ActionRiskAssessmentDelete,
ActionRiskAssessmentScopeCreate,
ActionRiskAssessmentScopeUpdate,
ActionRiskAssessmentScopeDelete,
ActionRiskAssessmentNodeCreate,
ActionRiskAssessmentNodeUpdate,
ActionRiskAssessmentNodeDelete,
ActionRiskAssessmentBoundaryCreate,
ActionRiskAssessmentBoundaryUpdate,
ActionRiskAssessmentBoundaryDelete,
ActionRiskAssessmentProcessCreate,
ActionRiskAssessmentProcessUpdate,
ActionRiskAssessmentProcessDelete,
ActionRiskAssessmentThreatCreate,
ActionRiskAssessmentThreatUpdate,
ActionRiskAssessmentThreatDelete,
ActionRiskAssessmentScenarioCreate,
ActionRiskAssessmentScenarioUpdate,
ActionRiskAssessmentScenarioDelete,
ActionRiskAssessmentScenarioThreatLink,
ActionRiskAssessmentScenarioThreatUnlink,
ActionRiskAssessmentScenarioRiskLink,
ActionRiskAssessmentScenarioRiskUnlink,
},
ScopeV1SlackConnectionRead: {
ActionSlackConnectionList,
},
ScopeV1TaskRead: {
ActionTaskGet,
ActionTaskList,
ActionEvidenceList,
},
ScopeV1Task: {
ActionTaskCreate,
ActionTaskUpdate,
ActionTaskDelete,
ActionTaskAssign,
ActionTaskUnassign,
ActionEvidenceDelete,
},
ScopeV1ThirdPartyRead: {
ActionThirdPartyList,
ActionThirdPartyGet,
ActionThirdPartyRelationList,
ActionThirdPartyContactGet,
ActionThirdPartyContactList,
ActionThirdPartyServiceGet,
ActionThirdPartyServiceList,
ActionThirdPartyComplianceReportGet,
ActionThirdPartyComplianceReportList,
ActionThirdPartyBusinessAssociateAgreementGet,
ActionThirdPartyDataPrivacyAgreementGet,
ActionThirdPartyRiskAssessmentList,
},
ScopeV1ThirdParty: {
ActionThirdPartyCreate,
ActionThirdPartyUpdate,
ActionThirdPartyDelete,
ActionThirdPartyVet,
ActionThirdPartyPublish,
ActionThirdPartyRelationCreate,
ActionThirdPartyContactCreate,
ActionThirdPartyContactUpdate,
ActionThirdPartyContactDelete,
ActionThirdPartyServiceCreate,
ActionThirdPartyServiceUpdate,
ActionThirdPartyServiceDelete,
ActionThirdPartyComplianceReportUpload,
ActionThirdPartyComplianceReportDelete,
ActionThirdPartyBusinessAssociateAgreementUpload,
ActionThirdPartyBusinessAssociateAgreementUpdate,
ActionThirdPartyBusinessAssociateAgreementDelete,
ActionThirdPartyDataPrivacyAgreementUpload,
ActionThirdPartyDataPrivacyAgreementUpdate,
ActionThirdPartyDataPrivacyAgreementDelete,
ActionThirdPartyRiskAssessmentCreate,
},
ScopeV1WebhookRead: {
ActionWebhookSubscriptionList,
ActionWebhookSubscriptionGet,
},
ScopeV1Webhook: {
ActionWebhookSubscriptionCreate,
ActionWebhookSubscriptionUpdate,
ActionWebhookSubscriptionDelete,
},
}

2
pkg/probo/service.go
View File

@@ -149,7 +149,7 @@ func NewService(
}
iamService.Authorizer.RegisterPolicySet(ProboPolicySet())
iamService.Authorizer.RegisterScopes(OAuth2ScopeSet())
iamService.OAuth2ScopeSet.Register(OAuth2ScopeMappings)
svc := &Service{
pg: pgClient,