cd6c46212a
Route audit-log and SCIM-event exports through export_jobs with typed arguments, an iam BuildAndUploadExport/SendExportEmail implementation, and a concurrent export-job worker with stale recovery. Stream JSONL via page.WalkAll into S3, and expose the request flow on console, connect, MCP, and CLI. Co-authored-by: Bryan Frimin <bryan@getprobo.com> Signed-off-by: Sacha Al Himdani <sacha@probo.com>
114 lines
4.7 KiB
Go
114 lines
4.7 KiB
Go
// Copyright (c) 2025-2026 Probo Inc <hello@probo.com>.
|
|
//
|
|
// Permission is hereby granted, free of charge, to any person obtaining a copy
|
|
// of this software and associated documentation files (the "Software"), to deal
|
|
// in the Software without restriction, including without limitation the rights
|
|
// to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
|
// copies of the Software, and to permit persons to whom the Software is
|
|
// furnished to do so, subject to the following conditions:
|
|
//
|
|
// The above copyright notice and this permission notice shall be included in
|
|
// all copies or substantial portions of the Software.
|
|
//
|
|
// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
|
// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
|
// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
|
// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
|
// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
|
|
// SOFTWARE.
|
|
|
|
package iam
|
|
|
|
type Action = string
|
|
|
|
const (
|
|
// Organization actions
|
|
ActionOrganizationCreate = "iam:organization:create"
|
|
ActionOrganizationGet = "iam:organization:get"
|
|
ActionOrganizationUpdate = "iam:organization:update"
|
|
ActionOrganizationDelete = "iam:organization:delete"
|
|
ActionOrganizationList = "iam:organization:list"
|
|
|
|
// Identity actions
|
|
ActionIdentityGet = "iam:identity:get"
|
|
ActionIdentityUpdate = "iam:identity:update"
|
|
ActionIdentityDelete = "iam:identity:delete"
|
|
|
|
// Session actions
|
|
ActionSessionList = "iam:session:list"
|
|
ActionSessionGet = "iam:session:get"
|
|
ActionSessionRevoke = "iam:session:revoke"
|
|
ActionSessionRevokeAll = "iam:session:revoke-all"
|
|
|
|
// Invitation actions
|
|
ActionInvitationList = "iam:invitation:list"
|
|
ActionInvitationCreate = "iam:invitation:create"
|
|
ActionInvitationGet = "iam:invitation:get"
|
|
ActionInvitationAccept = "iam:invitation:accept"
|
|
ActionInvitationDelete = "iam:invitation:delete"
|
|
|
|
// Membership actions
|
|
ActionMembershipGet = "iam:membership:get"
|
|
ActionMembershipList = "iam:membership:list"
|
|
ActionMembershipUpdate = "iam:membership:update"
|
|
ActionMembershipDelete = "iam:membership:delete"
|
|
|
|
// Membership Profile actions
|
|
ActionMembershipProfileGet = "iam:membership-profile:get"
|
|
ActionMembershipProfileList = "iam:membership-profile:list"
|
|
ActionMembershipProfileCreate = "iam:membership-profile:create"
|
|
ActionMembershipProfileUpdate = "iam:membership-profile:update"
|
|
ActionMembershipProfileDelete = "iam:membership-profile:delete"
|
|
ActionMembershipProfileActivate = "iam:membership-profile:activate"
|
|
ActionMembershipProfileDeactivate = "iam:membership-profile:deactivate"
|
|
|
|
// Personal API Key actions
|
|
ActionPersonalAPIKeyCreate = "iam:personal-api-key:create"
|
|
ActionPersonalAPIKeyGet = "iam:personal-api-key:get"
|
|
ActionPersonalAPIKeyList = "iam:personal-api-key:list"
|
|
ActionPersonalAPIKeyUpdate = "iam:personal-api-key:update"
|
|
ActionPersonalAPIKeyDelete = "iam:personal-api-key:delete"
|
|
|
|
// SAML Configuration actions
|
|
ActionSAMLConfigurationCreate = "iam:saml-configuration:create"
|
|
ActionSAMLConfigurationGet = "iam:saml-configuration:get"
|
|
ActionSAMLConfigurationUpdate = "iam:saml-configuration:update"
|
|
ActionSAMLConfigurationDelete = "iam:saml-configuration:delete"
|
|
ActionSAMLConfigurationList = "iam:saml-configuration:list"
|
|
|
|
// SCIM Configuration actions
|
|
ActionSCIMConfigurationCreate = "iam:scim-configuration:create"
|
|
ActionSCIMConfigurationGet = "iam:scim-configuration:get"
|
|
ActionSCIMConfigurationUpdate = "iam:scim-configuration:update"
|
|
ActionSCIMConfigurationDelete = "iam:scim-configuration:delete"
|
|
|
|
// SCIM Event actions
|
|
ActionSCIMEventList = "iam:scim-event:list"
|
|
ActionSCIMEventGet = "iam:scim-event:get"
|
|
|
|
// SCIM Bridge actions
|
|
ActionSCIMBridgeGet = "iam:scim-bridge:get"
|
|
ActionSCIMBridgeCreate = "iam:scim-bridge:create"
|
|
ActionSCIMBridgeUpdate = "iam:scim-bridge:update"
|
|
ActionSCIMBridgeDelete = "iam:scim-bridge:delete"
|
|
|
|
// OAuth2 Consent actions
|
|
ActionOAuth2ConsentGet = "iam:oauth2-consent:get"
|
|
ActionOAuth2ConsentApprove = "iam:oauth2-consent:approve"
|
|
|
|
// OAuth2 Access Token actions
|
|
ActionOAuth2AccessTokenCreate = "iam:oauth2-access-token:create"
|
|
ActionOAuth2AccessTokenGet = "iam:oauth2-access-token:get"
|
|
ActionOAuth2AccessTokenList = "iam:oauth2-access-token:list"
|
|
ActionOAuth2AccessTokenDelete = "iam:oauth2-access-token:delete"
|
|
|
|
// Audit log entry actions
|
|
ActionAuditLogEntryGet = "iam:audit-log-entry:get"
|
|
ActionAuditLogEntryList = "iam:audit-log-entry:list"
|
|
|
|
// Log export actions
|
|
ActionAuditLogExport = "iam:audit-log:export"
|
|
ActionSCIMEventExport = "iam:scim-event:export"
|
|
)
|