# Copyright (c) Abstract Machines
# SPDX-License-Identifier: Apache-2.0

clients:
  operations:
    - view: read_permission
    - update: update_permission
    - update_tags: update_permission
    - update_secret: update_permission
    - enable: update_permission
    - disable: update_permission
    - delete: delete_permission
    - set_parent_group: set_parent_group_permission
    - remove_parent_group: set_parent_group_permission
    - connect_to_channel: connect_to_channel_permission
    - disconnect_from_channel: connect_to_channel_permission
  roles_operations:
    - add: manage_role_permission
    - remove: manage_role_permission
    - update: manage_role_permission
    - retrieve: view_role_users_permission
    - retrieve_all: view_role_users_permission
    - add_actions: manage_role_permission
    - list_actions: view_role_users_permission
    - check_actions_exists: view_role_users_permission
    - remove_actions: manage_role_permission
    - remove_all_actions: manage_role_permission
    - add_members: add_role_users_permission
    - list_members: view_role_users_permission
    - check_members_exists: view_role_users_permission
    - remove_members: remove_role_users_permission
    - remove_all_members: remove_role_users_permission

channels:
  operations:
    - view: read_permission
    - update: update_permission
    - update_tags: update_permission
    - enable: update_permission
    - disable: update_permission
    - delete: delete_permission
    - set_parent_group: set_parent_group_permission
    - remove_parent_group: set_parent_group_permission
    - connect_client: connect_to_client_permission
    - disconnect_client: connect_to_client_permission
  roles_operations:
    - add: manage_role_permission
    - remove: manage_role_permission
    - update: manage_role_permission
    - retrieve: view_role_users_permission
    - retrieve_all: view_role_users_permission
    - add_actions: manage_role_permission
    - list_actions: view_role_users_permission
    - check_actions_exists: view_role_users_permission
    - remove_actions: manage_role_permission
    - remove_all_actions: manage_role_permission
    - add_members: add_role_users_permission
    - list_members: view_role_users_permission
    - check_members_exists: view_role_users_permission
    - remove_members: remove_role_users_permission
    - remove_all_members: remove_role_users_permission

groups:
  operations:
    - view: read_permission
    - update: update_permission
    - update_tags: update_permission
    - enable: update_permission
    - disable: update_permission
    - delete: delete_permission
    - retrieve_group_hierarchy: read_permission
    - add_parent_group: set_parent_permission
    - remove_parent_group: set_parent_permission
    - add_children_groups: set_child_permission
    - remove_children_groups: set_child_permission
    - remove_all_children_groups: set_child_permission
    - list_children_groups: read_permission
    - set_child_client: set_child_permission
    - remove_child_client: set_child_permission
    - set_child_channel: set_child_permission
    - remove_child_channel: set_child_permission
  roles_operations:
    - add: manage_role_permission
    - remove: manage_role_permission
    - update: manage_role_permission
    - retrieve: view_role_users_permission
    - retrieve_all: view_role_users_permission
    - add_actions: manage_role_permission
    - list_actions: view_role_users_permission
    - check_actions_exists: view_role_users_permission
    - remove_actions: manage_role_permission
    - remove_all_actions: manage_role_permission
    - add_members: add_role_users_permission
    - list_members: view_role_users_permission
    - check_members_exists: view_role_users_permission
    - remove_members: remove_role_users_permission
    - remove_all_members: remove_role_users_permission

domains:
  operations:
    - create: create_permission
    - update: update_permission
    - read: read_permission
    - enable: enable_permission
    - disable: disable_permission
    - list: read_permission
    - send_invitation: manage_role_permission
    - list_invitation: membership_permission
    - list_domain_invitation: manage_role_permission
    - delete_invitation: manage_role_permission
    - create_clients: client_create_permission
    - list_clients: client_read_permission
    - create_channels: channel_create_permission
    - list_channels: channel_read_permission
    - create_groups: group_create_permission
    - list_groups: group_read_permission
  roles_operations:
    - add: manage_role_permission
    - remove: manage_role_permission
    - update: manage_role_permission
    - retrieve: view_role_users_permission
    - retrieve_all: view_role_users_permission
    - add_actions: manage_role_permission
    - list_actions: view_role_users_permission
    - check_actions_exists: view_role_users_permission
    - remove_actions: manage_role_permission
    - remove_all_actions: manage_role_permission
    - add_members: add_role_users_permission
    - list_members: view_role_users_permission
    - check_members_exists: view_role_users_permission
    - remove_members: remove_role_users_permission
    - remove_all_members: remove_role_users_permission

alarm:
  operations:
    - list: alarm_read_permission
    - view: alarm_read_permission
    - update: alarm_update_permission
    - delete: alarm_delete_permission
    - assign: alarm_assign_permission
    - acknowledge: alarm_acknowledge_permission
    - resolve: alarm_resolve_permission
    - alarm_assign: alarm_assign_permission
    - alarm_acknowledge: alarm_acknowledge_permission
    - alarm_resolve: alarm_resolve_permission

rule:
  operations:
    - add: rule_create_permission
    - create: rule_create_permission
    - list: rule_read_permission
    - view: read_permission
    - update: update_permission
    - update_tags: update_permission
    - update_schedule: update_permission
    - enable: update_permission
    - disable: update_permission
    - delete: delete_permission
    - alarm_assign: alarm_assign_permission
    - alarm_acknowledge: alarm_acknowledge_permission
    - alarm_resolve: alarm_resolve_permission
  roles_operations:
    - add: manage_role_permission
    - remove: manage_role_permission
    - update: manage_role_permission
    - retrieve: view_role_users_permission
    - retrieve_all: view_role_users_permission
    - add_actions: manage_role_permission
    - list_actions: view_role_users_permission
    - check_actions_exists: view_role_users_permission
    - remove_actions: manage_role_permission
    - remove_all_actions: manage_role_permission
    - add_members: add_role_users_permission
    - list_members: view_role_users_permission
    - check_members_exists: view_role_users_permission
    - remove_members: remove_role_users_permission
    - remove_all_members: remove_role_users_permission

report:
  operations:
    - add: report_create_permission
    - create: report_create_permission
    - list: report_read_permission
    - generate: report_read_permission
    - view: read_permission
    - update: update_permission
    - update_schedule: update_permission
    - enable: update_permission
    - disable: update_permission
    - delete: delete_permission
    - update_template: update_permission
    - view_template: read_permission
    - delete_template: delete_permission
  roles_operations:
    - add: manage_role_permission
    - remove: manage_role_permission
    - update: manage_role_permission
    - retrieve: view_role_users_permission
    - retrieve_all: view_role_users_permission
    - add_actions: manage_role_permission
    - list_actions: view_role_users_permission
    - check_actions_exists: view_role_users_permission
    - remove_actions: manage_role_permission
    - remove_all_actions: manage_role_permission
    - add_members: add_role_users_permission
    - list_members: view_role_users_permission
    - check_members_exists: view_role_users_permission
    - remove_members: remove_role_users_permission
    - remove_all_members: remove_role_users_permission