Files
probo/pkg/iam/iam_actions.go
Bryan Frimin e61d72f15d Rewrite permission system
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 10:07:41 -08:00

56 lines
2.4 KiB
Go

// Copyright (c) 2025 Probo Inc <hello@getprobo.com>.
//
// Permission to use, copy, modify, and/or distribute this software for any
// purpose with or without fee is hereby granted, provided that the above
// copyright notice and this permission notice appear in all copies.
//
// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
// PERFORMANCE OF THIS SOFTWARE.
package iam
// Action represents a permission action string.
// Used for backward compatibility with the existing permission system.
type Action = string
// IAM Service Actions
const (
// Organization actions
ActionIAMOrganizationCreate = "iam:organization:create"
ActionIAMOrganizationGet = "iam:organization:get"
ActionIAMOrganizationUpdate = "iam:organization:update"
ActionIAMOrganizationDelete = "iam:organization:delete"
ActionIAMOrganizationList = "iam:organization:list"
ActionIAMOrganizationInviteMember = "iam:organization:invite-member"
ActionIAMOrganizationRemoveMember = "iam:organization:remove-member"
ActionIAMOrganizationListMembers = "iam:organization:list-members"
ActionIAMOrganizationListInvitations = "iam:organization:list-invitations"
// Identity actions
ActionIAMIdentityGet = "iam:identity:get"
ActionIAMIdentityUpdate = "iam:identity:update"
ActionIAMIdentityDelete = "iam:identity:delete"
ActionIAMIdentityListMemberships = "iam:identity:list-memberships"
ActionIAMIdentityListInvitations = "iam:identity:list-invitations"
ActionIAMIdentityListSessions = "iam:identity:list-sessions"
// Session actions
ActionIAMSessionGet = "iam:session:get"
ActionIAMSessionRevoke = "iam:session:revoke"
ActionIAMSessionRevokeAll = "iam:session:revoke-all"
// Invitation actions
ActionIAMInvitationGet = "iam:invitation:get"
ActionIAMInvitationAccept = "iam:invitation:accept"
ActionIAMInvitationDelete = "iam:invitation:delete"
// Membership actions
ActionIAMMembershipGet = "iam:membership:get"
ActionIAMMembershipUpdate = "iam:membership:update"
)