#255 endpoints now carry a dedicated permission

config/default.yml

@@ -93,6 +93,7 @@ workspaces:
           - "workspaces:add"
           - "workspaces:patch"
           - "workspaces:delete"
+          - "collections:list"
         filter: []
     users:
       root:
@@ -267,21 +268,23 @@ workspaces:
         key: "root"
         permissions:
           - "access_system"
-          - "manage_system"
-          - "manage_users"
-          - "beacon_insert"
-          - "query_fetch"
           - "workspaces:list"
           - "workspaces:get"
           - "workspaces:add"
           - "workspaces:patch"
           - "workspaces:delete"
+          - "config:get"
+          - "config:set"
+          - "permissions:list"
+          - "permissions:get"
           - "collections:list"
           - "collections:get"
           - "collections:add"
           - "collections:patch"
           - "collections:delete"
           - "collections:metadata"
+          - "collections:mindate"
+          - "collections:maxdate"
           - "dimensions:list"
           - "dimensions:add"
           - "dimensions:get"
@@ -306,6 +309,11 @@ workspaces:
           - "users:validateToken"
           - "users:expireToken"
           - "users:permissions"
+          - "system:nodeuid"
+          - "system:nodedetails"
+          - "system:terminate"
+          - "system:purgeCache"
+          - "system:roundtrip"
           - "misc:see_private"
         filter: []
       user:

lib/dispatch/collections.js

@@ -49,7 +49,7 @@ exports.list = {
   inputs: ['workspace'],
   _proto: Proto.proto,
   _outputExample: {},
-  _permission: ['manage_system'],
+  _permission: ['collections:list'],
   _dispatch: {
     message: 'collections:list'
   },
@@ -109,7 +109,7 @@ exports.get = {
   inputs: ['workspace', 'id'],
   _proto: Proto.proto,
   _outputExample: {},
-  _permission: ['manage_system'],
+  _permission: ['collections:get'],
   _dispatch: {
     message: 'collections:get'
   },
@@ -196,7 +196,7 @@ exports.add = {
   description: "I add a new collection",
   inputs: ['workspace', 'collection'],
   _outputExample: {},
-  _permission: ['manage_system'],
+  _permission: ['collections:add'],
   _dispatch: {
     message: 'collections:add'
   },
@@ -332,7 +332,7 @@ exports.delete = {
   description: "I delete an existing collection",
   inputs: ['workspace', 'id'],
   _outputExample: {},
-  _permission: ['manage_system'],
+  _permission: ['collections:delete'],
   _dispatch: {
     message: 'collections:delete'
   },
@@ -388,7 +388,7 @@ exports.stats = {
   description: "I provide stats about a collection",
   inputs: ['workspace', 'id'],
   _outputExample: {},
-  _permission: ['manage_system', 'collections_stats'],
+  _permission: ['collections:stats'],
   _dispatch: {
     message: 'collections:stats'
   },
@@ -441,7 +441,7 @@ exports.maxdate = {
     optional: ['key']
   },
   _outputExample: {},
-  _permission: ['manage_system'],
+  _permission: ['collections:maxdate'],
   _dispatch: {
     message: 'collections:maxdate'
   },
@@ -499,7 +499,7 @@ exports.mindate = {
     optional: ['key']
   },
   _outputExample: {},
-  _permission: ['manage_system'],
+  _permission: ['collections:mindate'],
   _dispatch: {
     message: 'collections:mindate'
   },
@@ -536,7 +536,7 @@ exports.metadata = {
     optional: ['collection']
   },
   _outputExample: {},
-  _permission: ['access_system'],
+  _permission: ['collections:metadata'],
   _dispatch: {
     message: 'collections:metadata'
   },

lib/dispatch/config.js

@@ -28,7 +28,7 @@ exports.get = {
   description: "I get a specific config by name`",
   inputs: ['key'],
   _outputExample: {},
-  _permission: ['manage_system'],
+  _permission: ['config:get'],
   _dispatch: {
     message: 'config:get'
   },
@@ -63,7 +63,7 @@ exports.set = {
   description: "I set a new config key",
   inputs: ['key', 'val'],
   _outputExample: {},
-  _permission: ['manage_system'],
+  _permission: ['config:set'],
   _dispatch: {
     message: 'config:set'
   },

lib/dispatch/permissions.js

@@ -50,7 +50,7 @@ exports.list = {
   description: "I list all available permissions",
   inputs: [],
   _outputExample: {},
-  _permission: ['manage_system'],
+  _permission: ['permissions:list'],
   _dispatch: {
     message: 'permissions:list'
   },
@@ -87,7 +87,7 @@ exports.get = {
   description: "I get a specific permission by name`",
   inputs: ['name'],
   _outputExample: {},
-  _permission: ['manage_system'],
+  _permission: ['permissions:get'],
   _dispatch: {
     message: 'permissions:get'
   },

lib/dispatch/roles.js

@@ -48,7 +48,7 @@ exports.list = {
   inputs: ['workspace'],
   _proto: Proto.proto,
   _outputExample: {},
-  _permission: ['manage_system'],
+  _permission: ['roles:list'],
   _dispatch: {
     message: 'roles:list'
   },
@@ -109,7 +109,7 @@ exports.get = {
   inputs: ['workspace', 'name'],
   _proto: Proto.proto,
   _outputExample: {},
-  _permission: ['manage_system'],
+  _permission: ['roles:get'],
   _dispatch: {
     message: 'roles:get'
   },
@@ -175,7 +175,7 @@ exports.add = {
   inputs: ['workspace', 'role'],
   _proto: Proto.proto,
   _outputExample: {},
-  _permission: ['manage_system'],
+  _permission: ['roles:add'],
   _dispatch: {
     message: 'roles:add'
   },
@@ -216,7 +216,7 @@ exports.patch = {
   description: "I patch an existing role",
   inputs: ['workspace', 'role', 'payload'],
   _outputExample: {},
-  _permission: ['manage_system'],
+  _permission: ['roles:patch'],
   _dispatch: {
     message: 'roles:patch'
   },
@@ -284,7 +284,7 @@ exports.delete = {
   description: "I delete an existing role",
   inputs: ['workspace', 'role'],
   _outputExample: {},
-  _permission: ['manage_system'],
+  _permission: ['roles:delete'],
   _dispatch: {
     message: 'roles:delete'
   },

lib/dispatch/system.js

@@ -80,7 +80,7 @@ exports.blacklist = {
     optional: ['ttl']
   },
   _outputExample: {},
-  _permission: ['manage_system'],
+  _permission: ['system:blacklist'],
   _dispatch: {
     message: 'system:blacklist'
   },
@@ -127,7 +127,7 @@ exports.nodeDetails = {
     optional: ['uid']
   },
   _outputExample: {},
-  _permission: ['manage_system'],
+  _permission: ['system:nodedetails'],
   _dispatch: {
     message: 'system:nodedetails'
   },
@@ -154,7 +154,7 @@ exports.connectedClients = {
     optional: ['uid']
   },
   _outputExample: {},
-  _permission: ['manage_system'],
+  _permission: ['system:connectedclients'],
   _dispatch: {
     message: 'system:connectedclients'
   },
@@ -188,7 +188,7 @@ exports.nodeList = {
   description: "I list all registered nodes",
   inputs: [],
   _outputExample: {},
-  _permission: ['manage_system'],
+  _permission: ['system:nodelist'],
   _dispatch: {
     message: 'system:nodelist'
   },
@@ -221,7 +221,7 @@ exports.roundTrip = {
   description: "I execute a roundtrip of a payload and return the time in ms",
   inputs: ['start'],
   _outputExample: {},
-  _permission: ['manage_system'],
+  _permission: ['system:roundtrip'],
   _dispatch: {
     message: 'roundtrip'
   },
@@ -243,7 +243,7 @@ exports.terminate = {
     optional: ['uid']
   },
   _outputExample: {},
-  _permission: ['manage_system'],
+  _permission: ['system:terminate'],
   _dispatch: {
     message: 'terminate',
     limit: -1
@@ -275,7 +275,7 @@ exports.startWebServer = {
   description: "I start a WebServer on a node",
   inputs: ['node'],
   _outputExample: {},
-  _permission: ['manage_system'],
+  _permission: ['system:startWebServer'],
   _dispatch: {
     message: 'startWebServer'
   },
@@ -309,7 +309,7 @@ exports.purgeCache = {
     optional: []
   },
   _outputExample: {},
-  _permission: ['manage_system'],
+  _permission: ['system:purgeCache'],
   _dispatch: {
     message: 'purgeCache',
     limit: -1

lib/dispatch/users.js

@@ -106,7 +106,7 @@ exports.get = {
   inputs: ['workspace', 'username'],
   _proto: Proto.proto,
   _outputExample: {},
-  _permission: ['manage_users'],
+  _permission: ['users:get'],
   _dispatch: {
     message: 'users:get'
   },
@@ -276,7 +276,7 @@ exports.patch = {
   inputs: ['workspace', 'username', 'user'],
   _proto: Proto.proto,
   _outputExample: {},
-  _permission: ['manage_users'],
+  _permission: ['users:patch'],
   _dispatch: {
     message: 'users:patch'
   },
@@ -349,7 +349,7 @@ exports.delete = {
   inputs: ['workspace', 'user'],
   _proto: null,
   _outputExample: {},
-  _permission: ['manage_users'],
+  _permission: ['users:delete'],
   _dispatch: {
     message: 'users:delete'
   },
@@ -457,7 +457,7 @@ exports.verifyAPIToken = {
   inputs: ['token'],
   _proto: Proto.proto,
   _outputExample: {},
-  _permission: ['access_system', 'manage_system'],
+  _permission: ['access_system'],
   _dispatch: {
     message: 'users:verifyAPIToken'
   },