roles update

This commit is contained in:
lendry
2026-06-25 15:14:50 +03:00
parent 9671fe458b
commit 1c55c871fc
21 changed files with 721 additions and 93 deletions

View File

@@ -51,6 +51,7 @@ message AdminUser {
string status = 9;
string createdAt = 10;
repeated string roles = 11;
repeated string directPermissions = 12;
}
message ListUsersResponse {

View File

@@ -8,10 +8,15 @@ service RbacService {
rpc ListOAuthScopes (Empty) returns (ListOAuthScopesResponse);
rpc ListOAuthClients (ListOAuthClientsRequest) returns (ListOAuthClientsResponse);
rpc CreateRole (CreateRoleRequest) returns (Role);
rpc UpdateRole (UpdateRoleRequest) returns (Role);
rpc DeleteRole (DeleteRoleRequest) returns (Empty);
rpc AssignUserRole (AssignUserRoleRequest) returns (AssignUserRoleResponse);
rpc RemoveUserRole (RemoveUserRoleRequest) returns (Empty);
rpc AssignUserPermission (AssignUserPermissionRequest) returns (AssignUserPermissionResponse);
rpc RemoveUserPermission (RemoveUserPermissionRequest) returns (AssignUserPermissionResponse);
rpc CreateOAuthClient (CreateOAuthClientRequest) returns (OAuthClientDetail);
rpc UpdateOAuthClient (UpdateOAuthClientRequest) returns (OAuthClientDetail);
rpc DeleteOAuthClient (DeleteOAuthClientRequest) returns (DeleteOAuthClientResponse);
rpc RotateOAuthSecret (RotateOAuthSecretRequest) returns (RotateOAuthSecretResponse);
}
@@ -30,6 +35,8 @@ message Role {
string name = 3;
optional string description = 4;
repeated Permission permissions = 5;
bool isSystem = 6;
bool isDefault = 7;
}
message OAuthScope {
@@ -94,6 +101,19 @@ message CreateRoleRequest {
repeated string permissionSlugs = 5;
}
message UpdateRoleRequest {
string actorUserId = 1;
string roleSlug = 2;
optional string name = 3;
optional string description = 4;
repeated string permissionSlugs = 5;
}
message DeleteRoleRequest {
string actorUserId = 1;
string roleSlug = 2;
}
message AssignUserRoleRequest {
string actorUserId = 1;
string userId = 2;
@@ -111,6 +131,23 @@ message RemoveUserRoleRequest {
string roleSlug = 3;
}
message AssignUserPermissionRequest {
string actorUserId = 1;
string userId = 2;
string permissionSlug = 3;
}
message AssignUserPermissionResponse {
string userId = 1;
repeated string permissions = 2;
}
message RemoveUserPermissionRequest {
string actorUserId = 1;
string userId = 2;
string permissionSlug = 3;
}
message CreateOAuthClientRequest {
string actorUserId = 1;
string name = 2;
@@ -128,6 +165,15 @@ message UpdateOAuthClientRequest {
optional bool isActive = 6;
}
message DeleteOAuthClientRequest {
string actorUserId = 1;
string clientId = 2;
}
message DeleteOAuthClientResponse {
string clientId = 1;
}
message RotateOAuthSecretRequest {
string actorUserId = 1;
string clientId = 2;