mattermost/server/public/model/audit_events.go
Miguel de la Cruz 48f2fd0873
Merge the Integrated Boards MVP feature branch (#35796)
* Add CreatedBy and UpdatedBy to the properties fields and values (#34485)

* Add CreatedBy and UpdatedBy to the properties fields and values

* Fix types

---------

Co-authored-by: Miguel de la Cruz <miguel@ctrlz.es>

* Adds ObjectType to the property fields table (#34908)

Co-authored-by: Miguel de la Cruz <miguel@ctrlz.es>

* Update ObjectType migration setting an empty value and marking the column as not null (#34915)

Co-authored-by: Miguel de la Cruz <miguel@ctrlz.es>

* Adds uniqueness mechanisms to the property fields (#35058)

* Adds uniqueness mechanisms to the property fields

After adding ObjectType, this commit ensures that both the PSAv1 and
PSAv2 schemas are supported, and enforces property uniqueness through
both database indexes and a logical check when creating new property
fields.

* Adds uniqueness check to property updates

Updates are covered on this commit and we refactor as well the SQL
code to use the squirrel builder and work better with the conditional
addition of the `existingID` piece of the query.

* Add translations to error messages

* Fixing retrylayer mocks

* Remove retrylayer duplication

* Address review comments

* Fix comment to avoid linter issues

* Address PR comments

* Update server/channels/db/migrations/postgres/000157_add_object_type_to_property_fields.down.sql

Co-authored-by: Alejandro García Montoro <alejandro.garciamontoro@gmail.com>

* Update server/channels/db/migrations/postgres/000157_add_object_type_to_property_fields.up.sql

Co-authored-by: Alejandro García Montoro <alejandro.garciamontoro@gmail.com>

* Update server/channels/db/migrations/postgres/000157_add_object_type_to_property_fields.up.sql

Co-authored-by: Alejandro García Montoro <alejandro.garciamontoro@gmail.com>

* Update field validation to check only for valid target types

* Update migrations to avoid concurrent index creation within a transaction

* Update migrations to make all index ops concurrent

* Update tests to use valid PSAv2 property fields

* Adds a helper for valid PSAv2 TargetTypes

---------

Co-authored-by: Miguel de la Cruz <miguel@ctrlz.es>
Co-authored-by: Alejandro García Montoro <alejandro.garciamontoro@gmail.com>

* Fix property tests (#35388)

Co-authored-by: Miguel de la Cruz <miguel@ctrlz.es>

* Adds Integrated Boards feature flag (#35378)

Co-authored-by: Miguel de la Cruz <miguel@ctrlz.es>

* Adds Integrated Boards MVP API changes (#34822)

This PR includes the necessary changes for channels and posts
endpoints and adds a set of generic endpoints to retrieve and manage
property fields and values following the new Property System approach.

Co-authored-by: Miguel de la Cruz <miguel@ctrlz.es>
Co-authored-by: Mattermost Build <build@mattermost.com>

* Property System Architecture permissions for v2 (#35113)

* Adds uniqueness mechanisms to the property fields

After adding ObjectType, this commit ensures that both the PSAv1 and
PSAv2 schemas are supported, and enforces property uniqueness through
both database indexes and a logical check when creating new property
fields.

* Adds uniqueness check to property updates

Updates are covered on this commit and we refactor as well the SQL
code to use the squirrel builder and work better with the conditional
addition of the `existingID` piece of the query.

* Add translations to error messages

* Add the permissions to the migrations, model and update the store calls

* Adds the property field and property group app layer

* Adds authorization helpers for property fields and values

* Make sure that users cannot lock themselves out of property fields

* Migrate permissions from a JSON column to three normalized columns

* Remove the audit comment

* Use target level constants in authorization

* Log authorization membership failures

* Rename admin to sysadmin

* Fix i18n sorting

---------

Co-authored-by: Miguel de la Cruz <miguel@ctrlz.es>

* Add Views store and app layer (#35361)

* Add Views store and app layer for Integrated Boards

Implements the View entity (model, SQL store, service, app) as described
in the Integrated Boards tech spec. Views are channel-scoped board
configurations with typed props (board, kanban subviews) and soft-delete.

- public/model: View, ViewBoardProps, Subview, ViewPatch types with
  PreSave/PreUpdate/IsValid/Patch/Clone/Auditable
- Migration 158: Views table with jsonb Props column and indexes
- SqlViewStore: CRUD with nil-safe Props marshaling (AppendBinaryFlag)
- ViewService: CreateView seeds default kanban subview and links the
  boards property field; caches boardPropertyFieldID at startup
- App layer: CreateView/GetView/GetViewsForChannel/UpdateView/DeleteView
  with channel-membership permission checks and WebSocket events
  (view_created, view_updated, view_deleted)
- doSetupBoardsPropertyField: registers the Boards property group and
  board field in NewServer() before ViewService construction
- GetFieldByName now returns store.ErrNotFound instead of raw sql.ErrNoRows

* Move permission checks out of App layer for views

- Remove HasPermissionToChannel calls from all App view methods
- Drop userID params from GetView, GetViewsForChannel, UpdateView, DeleteView
- Fix doSetupBoardsPropertyField to include required TargetType for PSAv2 field

* Make View service generic and enforce board validation in model

- Remove board-specific auto-setup from service and server startup
- Enforce that board views require Props, at least one subview, and at least one linked property in IsValid()
- Move default subview seeding out of app layer; callers must provide valid props
- Call PreSave on subviews during PreUpdate to assign IDs to new subviews
- Update all tests to reflect the new validation requirements

* Restore migrations files to match base branch

* Distinguish ErrNotFound from other errors in view store Get

* Use CONCURRENTLY and nontransactional for index operations in views migration

* Split views index creation into separate nontransactional migrations

* Update migrations.list

* Update i18n translations for views

* Fix makeView helper to include required Props for board view validation

* Rename ctx parameter from c to rctx in OAuthProvider mock

* Remove views service layer, call store directly from app

* Return 500 for unexpected DB errors in GetView, 404 only for not-found

* Harden View model: deep-copy Props, validate linked property IDs

- Add ViewBoardProps.Clone() to deep-copy LinkedProperties and Subviews
- Use it in View.Clone() and View.Patch() to prevent shared-slice aliasing
- Iterate over LinkedProperties in View.IsValid() and reject invalid IDs
  with a dedicated i18n key
- Register ViewStore in storetest AssertExpectations so mock expectations
  are enforced
- Add tests covering all new behaviours

* Restore autotranslation worker_stopped i18n translation

* Fix view store test IDs and improve error handling in app layer

- Use model.NewId() for linked property IDs in testUpdateView to fix
  validation failure (IsValid rejects non-UUID strings)
- Fix import grouping in app/view.go (stdlib imports in one block)
- Return 404 instead of 500 when Update/Delete store calls return
  ErrNotFound (e.g. concurrent deletion TOCTOU race)

* Add View store mock to retrylayer test genStore helper

The View store was added to the store interface but the genStore()
helper in retrylayer_test.go was not updated, causing TestRetry to panic.
Also removes the duplicate Recap mock registration.

* Refactor view deletion and websocket event handling; update SQL store methods to use query builder

* revert property field store

* Remove useless migrations

* Add cursor-based pagination to View store GetForChannel

- Add ViewQueryCursor and ViewQueryOpts types with validation
- Return (views, cursor, error) for caller-driven pagination
- PerPage clamping: <=0 defaults to 20, >200 clamps to 200
- Support IncludeDeleted filter
- Add comprehensive store tests for pagination, cursor edge cases,
  PerPage clamping, and invalid input rejection
- Add app layer test for empty channelID → 400
- Update interface, retrylayer, timerlayer, and mock signatures

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Refactor test loops in ViewStore tests for improved readability

* change pagination to limit/offset

* Add upper-bound limits on View Subviews and LinkedProperties

Defense-in-depth validation: cap Subviews at 50 and LinkedProperties
at 500 to prevent abuse below the 300KB payload limit.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

* MM-67388, MM-66528, MM-67750: Add View REST API endpoints, websocket events, and sort order (#35442)

* Add Views store and app layer for Integrated Boards

Implements the View entity (model, SQL store, service, app) as described
in the Integrated Boards tech spec. Views are channel-scoped board
configurations with typed props (board, kanban subviews) and soft-delete.

- public/model: View, ViewBoardProps, Subview, ViewPatch types with
  PreSave/PreUpdate/IsValid/Patch/Clone/Auditable
- Migration 158: Views table with jsonb Props column and indexes
- SqlViewStore: CRUD with nil-safe Props marshaling (AppendBinaryFlag)
- ViewService: CreateView seeds default kanban subview and links the
  boards property field; caches boardPropertyFieldID at startup
- App layer: CreateView/GetView/GetViewsForChannel/UpdateView/DeleteView
  with channel-membership permission checks and WebSocket events
  (view_created, view_updated, view_deleted)
- doSetupBoardsPropertyField: registers the Boards property group and
  board field in NewServer() before ViewService construction
- GetFieldByName now returns store.ErrNotFound instead of raw sql.ErrNoRows

* Move permission checks out of App layer for views

- Remove HasPermissionToChannel calls from all App view methods
- Drop userID params from GetView, GetViewsForChannel, UpdateView, DeleteView
- Fix doSetupBoardsPropertyField to include required TargetType for PSAv2 field

* Make View service generic and enforce board validation in model

- Remove board-specific auto-setup from service and server startup
- Enforce that board views require Props, at least one subview, and at least one linked property in IsValid()
- Move default subview seeding out of app layer; callers must provide valid props
- Call PreSave on subviews during PreUpdate to assign IDs to new subviews
- Update all tests to reflect the new validation requirements

* Restore migrations files to match base branch

* Distinguish ErrNotFound from other errors in view store Get

* Use CONCURRENTLY and nontransactional for index operations in views migration

* Split views index creation into separate nontransactional migrations

* Update migrations.list

* Update i18n translations for views

* Fix makeView helper to include required Props for board view validation

* Rename ctx parameter from c to rctx in OAuthProvider mock

* Remove views service layer, call store directly from app

* Return 500 for unexpected DB errors in GetView, 404 only for not-found

* Harden View model: deep-copy Props, validate linked property IDs

- Add ViewBoardProps.Clone() to deep-copy LinkedProperties and Subviews
- Use it in View.Clone() and View.Patch() to prevent shared-slice aliasing
- Iterate over LinkedProperties in View.IsValid() and reject invalid IDs
  with a dedicated i18n key
- Register ViewStore in storetest AssertExpectations so mock expectations
  are enforced
- Add tests covering all new behaviours

* Restore autotranslation worker_stopped i18n translation

* Fix view store test IDs and improve error handling in app layer

- Use model.NewId() for linked property IDs in testUpdateView to fix
  validation failure (IsValid rejects non-UUID strings)
- Fix import grouping in app/view.go (stdlib imports in one block)
- Return 404 instead of 500 when Update/Delete store calls return
  ErrNotFound (e.g. concurrent deletion TOCTOU race)

* Add View store mock to retrylayer test genStore helper

The View store was added to the store interface but the genStore()
helper in retrylayer_test.go was not updated, causing TestRetry to panic.
Also removes the duplicate Recap mock registration.

* Refactor view deletion and websocket event handling; update SQL store methods to use query builder

* revert property field store

* Add View API endpoints with OpenAPI spec, client methods, and i18n

Implement REST API for channel views (board-type) behind the
IntegratedBoards feature flag. Adds CRUD endpoints under
/api/v4/channels/{channel_id}/views with permission checks
matching the channel bookmark pattern.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Remove useless migrations

* Add cursor-based pagination to View store GetForChannel

- Add ViewQueryCursor and ViewQueryOpts types with validation
- Return (views, cursor, error) for caller-driven pagination
- PerPage clamping: <=0 defaults to 20, >200 clamps to 200
- Support IncludeDeleted filter
- Add comprehensive store tests for pagination, cursor edge cases,
  PerPage clamping, and invalid input rejection
- Add app layer test for empty channelID → 400
- Update interface, retrylayer, timerlayer, and mock signatures

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Add cursor-based pagination to View API for channel views

* Enhance cursor handling in getViewsForChannel and update tests for pagination

* Refactor test loops in ViewStore tests for improved readability

* Refactor loop in TestGetViewsForChannel for improved readability

* change pagination to limit/offset

* switch to limit/offset pagination

* Add upper-bound limits on View Subviews and LinkedProperties

Defense-in-depth validation: cap Subviews at 50 and LinkedProperties
at 500 to prevent abuse below the 300KB payload limit.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Add view sort order API endpoint

Add POST /api/v4/channels/{channel_id}/views/{view_id}/sort_order
endpoint following the channel bookmarks reorder pattern. Includes
store, app, and API layers with full test coverage at each layer.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Add connectionId to view WebSocket events and sort_order API spec

Thread connectionId from request header through all view handlers
(create, update, delete, sort_order) to WebSocket events, matching
the channel bookmarks pattern. Add sort_order endpoint to OpenAPI
spec. Update minimum server version to 11.6.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Remove duplicate View/ViewPatch definitions from definitions.yaml

The merge from integrated-boards-mvp introduced duplicate View and
ViewPatch schema definitions that were already defined earlier in
the file with more detail (including ViewBoardProps ref and enums).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Update minimum server version to 11.6 in views API spec

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Add missing translations for view sort order error messages

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Merge integrated-boards-mvp into ibmvp_api-views; remove spec files

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Fix flaky TestViewStore timestamp test on CI

Add sleep before UpdateSortOrder to ensure timestamps differ,
preventing same-millisecond comparisons on fast CI machines.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* remove duplicate views.yaml imclude

* Use c.boolString() for include_deleted query param in GetViewsForChannel

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Fix views.yaml sort order schema: use integer type and require body

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Refactor view sort order tests to use named IDs instead of array indices

Extract idA/idB/idC from views slice and add BEFORE/AFTER comments
to make stateful subtest ordering easier to follow.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Return 404 instead of 403 for view operations on deleted channels

Deleted channels should appear non-existent to callers rather than
revealing their existence via a 403. Detailed error text explains
the context for debugging.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* add missing channel deleteat checks

* Use c.Params.Page instead of manual page query param parsing in getViewsForChannel

c.Params already validates and defaults page/per_page, so the manual
parsing was redundant.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Add support for total count in views retrieval

* Add tests for handling deleted views in GetViewsForChannel and GetView

* Short-circuit negative newIndex in UpdateSortOrder before opening transaction

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Add per-channel limit on views to bound UpdateSortOrder cost

Without a cap, unbounded view creation makes sort-order updates
increasingly expensive (CASE WHEN per view, row locks). Adds
MaxViewsPerChannel=50 constant and enforces it in the app layer
before saving. Includes API and app layer tests.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Remove include_deleted support from views API

Soft-deleted views are structural metadata with low risk, but no other
similar endpoint (e.g. channel bookmarks) exposes deleted records without
an admin gate. Rather than adding an admin-only permission check for
consistency, remove the feature entirely since there is no current use case.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Update view permissions to require `create_post` instead of channel management permissions

* Remove obsolete view management error messages for direct and group messages

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

* feat(migrations): add user tracking and object type to property fields

- Introduced user tracking columns (CreatedBy, UpdatedBy) to PropertyFields and PropertyValues.
- Added ObjectType column to PropertyFields with associated unique indexes for legacy and typed properties.
- Created new migration scripts for adding and dropping these features, including necessary indexes for data integrity.
- Established views for managing property fields with new attributes.

This update enhances the schema to support better tracking and categorization of property fields.

* Add Property System Architecture v2 API endpoints (#35583)

* Adds uniqueness mechanisms to the property fields

After adding ObjectType, this commit ensures that both the PSAv1 and
PSAv2 schemas are supported, and enforces property uniqueness through
both database indexes and a logical check when creating new property
fields.

* Adds uniqueness check to property updates

Updates are covered on this commit and we refactor as well the SQL
code to use the squirrel builder and work better with the conditional
addition of the `existingID` piece of the query.

* Add translations to error messages

* Add the permissions to the migrations, model and update the store calls

* Adds the property field and property group app layer

* Adds authorization helpers for property fields and values

* Make sure that users cannot lock themselves out of property fields

* Migrate permissions from a JSON column to three normalized columns

* Remove the audit comment

* Use target level constants in authorization

* Log authorization membership failures

* Rename admin to sysadmin

* Adds the Property System Architecture v2 API endpoints

* Adds permission checks to the create field endpoint

* Add target access checks to value endpoints

* Add default branches for object_type and target_type and extra guards for cursor client4 methods

* Fix vet API mismatch

* Fix error checks

* Fix linter

* Add merge semantics for property patch logic and API endpoint

* Fix i18n

* Fix duplicated patch elements and early return on bad cursor

* Update docs to use enums

* Fix i18n sorting

* Update app layer to return model.AppError

* Adds a limit to the number of property values that can be patched in the same request

* Require target_type filter when searching property fields

* Add objectType validation as part of field.IsValid()

* Fix linter

* Fix test with bad objecttpye

* Fix test grouping

---------

Co-authored-by: Miguel de la Cruz <miguel@ctrlz.es>

* MM-67968: Flatten view model — remove icon, subviews, typed board props (#35726)

* feat(views): flatten view model by removing icon, subview, and board props

Simplifies the View data model as part of MM-67968: removes Icon, Subview,
and ViewBoardProps types; renames ViewTypeBoard to ViewTypeKanban; replaces
typed Props with StringInterface (map[string]any); adds migration 000167
to drop the Icon column from the Views table.

Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>

* feat(api): update views OpenAPI spec to reflect flattened model

Removes ViewBoardProps, Subview, and icon from the View and ViewPatch
schemas. Changes type enum from board to kanban. Replaces typed props
with a free-form StringInterface object. Aligns with MM-67968.

Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>

* refactor(views): simplify store by dropping dbView and marshalViewProps

StringInterface already implements driver.Valuer and sql.Scanner, so the
manual JSON marshal/unmarshal and the dbView intermediate struct were
redundant. model.View now scans directly from the database. Also removes
the dead ViewMaxLinkedProperties constant and wraps the Commit() error in
UpdateSortOrder.

Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>

* fix(api): allow arbitrary JSON in view props OpenAPI schema

The props field was restricted to string values via
additionalProperties: { type: string }, conflicting with the Go model's
StringInterface (map[string]any). Changed to additionalProperties: true
in View, ViewPatch, and inline POST schemas.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>

* Adds basic implementation of the generic redux store for PSAv2 (#35512)

* Adds basic implementation of the generic redux store for PSAv2

* Add created_by and updated_by to the test fixtures

* Make target_id, target_type and object_type mandatory

* Wrap getPropertyFieldsByIds and getPropertyValuesForTargetByFieldIds with createSelector

* Address PR comments

---------

Co-authored-by: Miguel de la Cruz <miguel@ctrlz.es>

* Adds websocket messages for the PSAv2 API events (#35696)

* Adds uniqueness mechanisms to the property fields

After adding ObjectType, this commit ensures that both the PSAv1 and
PSAv2 schemas are supported, and enforces property uniqueness through
both database indexes and a logical check when creating new property
fields.

* Adds uniqueness check to property updates

Updates are covered on this commit and we refactor as well the SQL
code to use the squirrel builder and work better with the conditional
addition of the `existingID` piece of the query.

* Add translations to error messages

* Add the permissions to the migrations, model and update the store calls

* Adds the property field and property group app layer

* Adds authorization helpers for property fields and values

* Make sure that users cannot lock themselves out of property fields

* Migrate permissions from a JSON column to three normalized columns

* Remove the audit comment

* Use target level constants in authorization

* Log authorization membership failures

* Rename admin to sysadmin

* Adds the Property System Architecture v2 API endpoints

* Adds permission checks to the create field endpoint

* Add target access checks to value endpoints

* Add default branches for object_type and target_type and extra guards for cursor client4 methods

* Fix vet API mismatch

* Fix error checks

* Fix linter

* Add merge semantics for property patch logic and API endpoint

* Fix i18n

* Fix duplicated patch elements and early return on bad cursor

* Update docs to use enums

* Fix i18n sorting

* Update app layer to return model.AppError

* Adds a limit to the number of property values that can be patched in the same request

* Adds websocket messages for the PSAv2 API events

* Add IsPSAv2 helper to the property field for clarity

* Add guard against nil returns on field deletion

* Add docs to the websocket endpoints

---------

Co-authored-by: Miguel de la Cruz <miguel@ctrlz.es>

* migrations: consolidate views migrations and reorder after master

- Merged 000165 (create Views) with 000167 (drop Icon) since Icon was never needed
- Renumbered branch migrations 159-166 → 160-167 so master's 000159 (deduplicate_policy_names) runs first
- Regenerated migrations.list

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* Add API endpoint to retrieve posts for a specific view (#35604)

Automatic Merge

* Apply fixes after merge

* Return a more specific error from getting multiple fields

* Prevent getting broadcast params on field deletion if not needed

* Remove duplicated migration code

* Update property conflict code to always use master

* Adds nil guard when iterating on property fields

* Check that permission level is valid before getting rejected by the database

* Validate correctness on TargetID for PSAv2 fields

* Avoid PSAv1 using permissions or protected

* Fix test data after validation change

* Fix flaky search test

* Adds more posts for filter use cases to properly test exclusions

---------

Co-authored-by: Miguel de la Cruz <miguel@ctrlz.es>
Co-authored-by: Alejandro García Montoro <alejandro.garciamontoro@gmail.com>
Co-authored-by: Julien Tant <julien@craftyx.fr>
Co-authored-by: Mattermost Build <build@mattermost.com>
Co-authored-by: Julien Tant <785518+JulienTant@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-27 10:36:35 +01:00

499 lines
34 KiB
Go

// Copyright (c) 2015-present Mattermost, Inc. All Rights Reserved.
// See LICENSE.txt for license information.
package model
// Access Control & Security
const (
AuditEventApplyIPFilters = "applyIPFilters" // apply IP address filtering
AuditEventAssignAccessPolicy = "assignAccessPolicy" // assign access control policy to channels
AuditEventCreateAccessControlPolicy = "createAccessControlPolicy" // create access control policy
AuditEventDeleteAccessControlPolicy = "deleteAccessControlPolicy" // delete access control policy
AuditEventUnassignAccessPolicy = "unassignAccessPolicy" // remove access control policy from channels
AuditEventUpdateActiveStatus = "updateActiveStatus" // update active/inactive status of access control policy
AuditEventSetActiveStatus = "setActiveStatus" // set active/inactive status of multiple access control policies
)
// Audit & Certificates
const (
AuditEventAddAuditLogCertificate = "addAuditLogCertificate" // add certificate for secure audit log transmission
AuditEventGetAudits = "getAudits" // get audit log entries
AuditEventGetUserAudits = "getUserAudits" // get audit log entries for specific user
AuditEventRemoveAuditLogCertificate = "removeAuditLogCertificate" // remove certificate used for audit log transmission
)
// Bots
const (
AuditEventAssignBot = "assignBot" // assign bot to user
AuditEventConvertBotToUser = "convertBotToUser" // convert bot account to regular user account
AuditEventConvertUserToBot = "convertUserToBot" // convert regular user account to bot account
AuditEventCreateBot = "createBot" // create bot account
AuditEventPatchBot = "patchBot" // update bot properties
AuditEventUpdateBotActive = "updateBotActive" // enable or disable bot account
)
// Branding
const (
AuditEventDeleteBrandImage = "deleteBrandImage" // delete brand image
AuditEventUploadBrandImage = "uploadBrandImage" // upload brand image
)
// Channel Bookmarks
const (
AuditEventCreateChannelBookmark = "createChannelBookmark" // create bookmark in channels
AuditEventDeleteChannelBookmark = "deleteChannelBookmark" // delete bookmark
AuditEventUpdateChannelBookmark = "updateChannelBookmark" // update bookmark
AuditEventUpdateChannelBookmarkSortOrder = "updateChannelBookmarkSortOrder" // update display order of bookmarks
AuditEventListChannelBookmarksForChannel = "listChannelBookmarksForChannel" // list bookmarks for channel
)
// Views
const (
AuditEventCreateView = "createView" // create view in channel
AuditEventGetView = "getView" // get view by ID
AuditEventUpdateView = "updateView" // update view
AuditEventDeleteView = "deleteView" // delete view
AuditEventListViewsForChannel = "listViewsForChannel" // list views for channel
AuditEventUpdateViewSortOrder = "updateViewSortOrder" // update view sort order
AuditEventGetPostsForView = "getPostsForView" // get posts for view
)
// Channel Categories
const (
AuditEventCreateCategoryForTeamForUser = "createCategoryForTeamForUser" // create channel category for user
AuditEventDeleteCategoryForTeamForUser = "deleteCategoryForTeamForUser" // delete channel category
AuditEventUpdateCategoriesForTeamForUser = "updateCategoriesForTeamForUser" // update multiple channel categories
AuditEventUpdateCategoryForTeamForUser = "updateCategoryForTeamForUser" // update single channel category
AuditEventUpdateCategoryOrderForTeamForUser = "updateCategoryOrderForTeamForUser" // update display order of the categories
)
// Channels
const (
AuditEventAddChannelMember = "addChannelMember" // add member to channel
AuditEventConvertGroupMessageToChannel = "convertGroupMessageToChannel" // convert group message to private channel
AuditEventCreateChannel = "createChannel" // create public or private channel
AuditEventCreateDirectChannel = "createDirectChannel" // create direct message channel between two users
AuditEventCreateGroupChannel = "createGroupChannel" // create group message channel with multiple users
AuditEventDeleteChannel = "deleteChannel" // delete channel
AuditEventGetPinnedPosts = "getPinnedPosts" // get pinned posts
AuditEventLocalAddChannelMember = "localAddChannelMember" // add channel member locally
AuditEventLocalCreateChannel = "localCreateChannel" // create channel locally
AuditEventLocalDeleteChannel = "localDeleteChannel" // delete channel locally
AuditEventLocalMoveChannel = "localMoveChannel" // move channel locally
AuditEventLocalPatchChannel = "localPatchChannel" // patch channel locally
AuditEventLocalRemoveChannelMember = "localRemoveChannelMember" // remove channel member locally
AuditEventLocalRestoreChannel = "localRestoreChannel" // restore channel locally
AuditEventLocalUpdateChannelPrivacy = "localUpdateChannelPrivacy" // update channel privacy locally
AuditEventMoveChannel = "moveChannel" // move channel to different team
AuditEventPatchChannel = "patchChannel" // update channel properties
AuditEventPatchChannelModerations = "patchChannelModerations" // update channel moderation settings
AuditEventRemoveChannelMember = "removeChannelMember" // remove member from channel
AuditEventRestoreChannel = "restoreChannel" // restore previously deleted channel
AuditEventUpdateChannel = "updateChannel" // update channel properties
AuditEventUpdateChannelMemberNotifyProps = "updateChannelMemberNotifyProps" // update notification preferences
AuditEventUpdateChannelMemberAutotranslation = "updateChannelMemberAutotranslation" // update autotranslation setting
AuditEventUpdateChannelMemberRoles = "updateChannelMemberRoles" // update roles and permissions
AuditEventUpdateChannelMemberSchemeRoles = "updateChannelMemberSchemeRoles" // update scheme-based roles
AuditEventUpdateChannelPrivacy = "updateChannelPrivacy" // change channel privacy settings
AuditEventUpdateChannelScheme = "updateChannelScheme" // update permission scheme applied to channel
)
// Commands
const (
AuditEventCreateCommand = "createCommand" // create slash command
AuditEventDeleteCommand = "deleteCommand" // delete command
AuditEventExecuteCommand = "executeCommand" // execute command
AuditEventLocalCreateCommand = "localCreateCommand" // create command locally
AuditEventMoveCommand = "moveCommand" // move command to another team
AuditEventRegenCommandToken = "regenCommandToken" // regenerate authentication token for command
AuditEventUpdateCommand = "updateCommand" // update command
)
// Compliance
const (
AuditEventCreateComplianceReport = "createComplianceReport" // create compliance report
AuditEventDownloadComplianceReport = "downloadComplianceReport" // download compliance report
AuditEventGetComplianceReport = "getComplianceReport" // get specific compliance report
AuditEventGetComplianceReports = "getComplianceReports" // get all compliance reports
)
// Configuration
const (
AuditEventConfigReload = "configReload" // reload server configuration
AuditEventGetConfig = "getConfig" // get current server configuration
AuditEventLocalGetClientConfig = "localGetClientConfig" // get client configuration locally
AuditEventLocalGetConfig = "localGetConfig" // get server configuration locally
AuditEventLocalPatchConfig = "localPatchConfig" // update server configuration locally
AuditEventLocalUpdateConfig = "localUpdateConfig" // update server configuration locally
AuditEventMigrateConfig = "migrateConfig" // migrate configs with file values from one store to another
AuditEventPatchConfig = "patchConfig" // update server configuration
AuditEventUpdateConfig = "updateConfig" // update server configuration
)
// Custom Profile Attributes
const (
AuditEventCreateCPAField = "createCPAField" // create custom profile attribute
AuditEventDeleteCPAField = "deleteCPAField" // delete custom profile attribute
AuditEventPatchCPAField = "patchCPAField" // update custom profile attribute field
AuditEventPatchCPAValues = "patchCPAValues" // update custom profile attribute values
)
// Property Fields
const (
AuditEventCreatePropertyField = "createPropertyField" // create property field
AuditEventDeletePropertyField = "deletePropertyField" // delete property field
AuditEventGetPropertyFields = "getPropertyFields" // list property fields
AuditEventPatchPropertyField = "patchPropertyField" // update property field
)
// Property Values
const (
AuditEventGetPropertyValues = "getPropertyValues" // get property values for target
AuditEventPatchPropertyValues = "patchPropertyValues" // update property values for target
)
// Data Retention Policies
const (
AuditEventAddChannelsToPolicy = "addChannelsToPolicy" // add channels to data retention policy
AuditEventAddTeamsToPolicy = "addTeamsToPolicy" // add teams to data retention policy
AuditEventCreatePolicy = "createPolicy" // create data retention policy
AuditEventDeletePolicy = "deletePolicy" // delete data retention policy
AuditEventPatchPolicy = "patchPolicy" // update data retention policy
AuditEventRemoveChannelsFromPolicy = "removeChannelsFromPolicy" // remove channels from data retention policy
AuditEventRemoveTeamsFromPolicy = "removeTeamsFromPolicy" // remove teams from data retention policy
)
// Emojis
const (
AuditEventCreateEmoji = "createEmoji" // create emoji
AuditEventDeleteEmoji = "deleteEmoji" // delete emoji
)
// Exports
const (
AuditEventBulkExport = "bulkExport" // bulk export data to a file
AuditEventDeleteExport = "deleteExport" // delete exported file
AuditEventGeneratePresignURLExport = "generatePresignURLExport" // generate presigned URL to download the exported file
AuditEventScheduleExport = "scheduleExport" // schedule export job
)
// Files
const (
AuditEventGetFile = "getFile" // get or download file
AuditEventGetFileLink = "getFileLink" // generate link for file sharing
AuditEventUploadFileMultipart = "uploadFileMultipart" // upload file using multipart form data
AuditEventUploadFileMultipartLegacy = "uploadFileMultipartLegacy" // upload file using legacy multipart method
AuditEventUploadFileSimple = "uploadFileSimple" // upload file using simple direct upload method
AuditEventGetFileThumbnail = "getFileThumbnail" // get file thumbnail
AuditEventGetFileInfosForPost = "getFileInfosForPost" // get file infos for post
AuditEventGetFileInfo = "getFileInfo" // get file info
AuditEventGetFilePreview = "getFilePreview" // get file preview
AuditEventSearchFiles = "searchFiles" // search for files
)
// Groups
const (
AuditEventAddGroupMembers = "addGroupMembers" // add members to group
AuditEventAddUserToGroupSyncables = "addUserToGroupSyncables" // add user to group-synchronized teams and channels
AuditEventCreateGroup = "createGroup" // create group
AuditEventDeleteGroup = "deleteGroup" // delete group
AuditEventDeleteGroupMembers = "deleteGroupMembers" // remove members from group
AuditEventLinkGroupSyncable = "linkGroupSyncable" // link group to team or channel for synchronization
AuditEventPatchGroup = "patchGroup" // update group
AuditEventPatchGroupSyncable = "patchGroupSyncable" // update group synchronization settings
AuditEventRestoreGroup = "restoreGroup" // restore previously deleted group
AuditEventUnlinkGroupSyncable = "unlinkGroupSyncable" // unlink group from team or channel synchronization
)
// Imports
const (
AuditEventBulkImport = "bulkImport" // bulk import data from a file
AuditEventDeleteImport = "deleteImport" // delete import file
AuditEventSlackImport = "slackImport" // import data from Slack
)
// Jobs
const (
AuditEventCancelJob = "cancelJob" // cancel a job
AuditEventCreateJob = "createJob" // create a job
AuditEventJobServer = "jobServer" // start job server
AuditEventUpdateJobStatus = "updateJobStatus" // update status of a job
)
// LDAP
const (
AuditEventAddLdapPrivateCertificate = "addLdapPrivateCertificate" // add private certificate for LDAP
AuditEventAddLdapPublicCertificate = "addLdapPublicCertificate" // add public certificate for LDAP
AuditEventIdMigrateLdap = "idMigrateLdap" // migrate user ID mapping to another attribute
AuditEventLinkLdapGroup = "linkLdapGroup" // link LDAP group to Mattermost team or channel
AuditEventRemoveLdapPrivateCertificate = "removeLdapPrivateCertificate" // remove private certificate for LDAP
AuditEventRemoveLdapPublicCertificate = "removeLdapPublicCertificate" // remove public certificate for LDAP
AuditEventSyncLdap = "syncLdap" // synchronize users and groups from LDAP
AuditEventUnlinkLdapGroup = "unlinkLdapGroup" // unlink LDAP group from Mattermost team or channel
)
// Licensing
const (
AuditEventAddLicense = "addLicense" // add license
AuditEventLocalAddLicense = "localAddLicense" // add license locally
AuditEventLocalRemoveLicense = "localRemoveLicense" // remove license locally
AuditEventRemoveLicense = "removeLicense" // remove license
AuditEventRequestTrialLicense = "requestTrialLicense" // request trial license
)
// OAuth
const (
AuditEventAuthorizeOAuthApp = "authorizeOAuthApp" // authorize OAuth app
AuditEventAuthorizeOAuthPage = "authorizeOAuthPage" // authorize OAuth page
AuditEventCompleteOAuth = "completeOAuth" // complete OAuth authorization flow
AuditEventCreateOAuthApp = "createOAuthApp" // create OAuth app
AuditEventCreateOutgoingOauthConnection = "createOutgoingOauthConnection" // create outgoing OAuth connection
AuditEventDeauthorizeOAuthApp = "deauthorizeOAuthApp" // revoke OAuth app authorization
AuditEventDeleteOAuthApp = "deleteOAuthApp" // delete OAuth app
AuditEventDeleteOutgoingOAuthConnection = "deleteOutgoingOAuthConnection" // delete outgoing OAuth connection
AuditEventGetAccessToken = "getAccessToken" // get OAuth access token
AuditEventLoginWithOAuth = "loginWithOAuth" // login using OAuth authentication provider
AuditEventMobileLoginWithOAuth = "mobileLoginWithOAuth" // mobile application login using OAuth authentication provider
AuditEventRegenerateOAuthAppSecret = "regenerateOAuthAppSecret" // regenerate secret key for OAuth app
AuditEventRegisterOAuthClient = "registerOAuthClient" // register OAuth client via dynamic client registration (RFC 7591)
AuditEventSignupWithOAuth = "signupWithOAuth" // create account using OAuth authentication provider
AuditEventUpdateOAuthApp = "updateOAuthApp" // update OAuth app
AuditEventUpdateOutgoingOAuthConnection = "updateOutgoingOAuthConnection" // update outgoing OAuth connection
AuditEventValidateOutgoingOAuthConnectionCredentials = "validateOutgoingOAuthConnectionCredentials" // validate credentials for outgoing OAuth connection
)
// Plugins
const (
AuditEventDisablePlugin = "disablePlugin" // disable installed plugin
AuditEventEnablePlugin = "enablePlugin" // enable installed plugin
AuditEventGetFirstAdminVisitMarketplaceStatus = "getFirstAdminVisitMarketplaceStatus" // get first admin visit status
AuditEventInstallMarketplacePlugin = "installMarketplacePlugin" // install plugin from official marketplace
AuditEventInstallPluginFromURL = "installPluginFromURL" // install plugin from external URL
AuditEventRemovePlugin = "removePlugin" // delete plugin
AuditEventSetFirstAdminVisitMarketplaceStatus = "setFirstAdminVisitMarketplaceStatus" // set first admin visit status
AuditEventUploadPlugin = "uploadPlugin" // upload plugin file to server for installation
)
// Posts
const (
AuditEventCreateEphemeralPost = "createEphemeralPost" // create ephemeral post
AuditEventCreatePost = "createPost" // create post
AuditEventDeletePost = "deletePost" // delete post
AuditEventGetEditHistoryForPost = "getEditHistoryForPost" // get edit history for post
AuditEventGetFlaggedPosts = "getFlaggedPosts" // get flagged posts
AuditEventGetPostsForChannel = "getPostsForChannel" // get posts for channel
AuditEventGetPostsForChannelAroundLastUnread = "getPostsForChannelAroundLastUnread" // get posts for channel around last unread
AuditEventGetPost = "getPost" // get post
AuditEventGetPostThread = "getPostThread" // get post thread
AuditEventGetPostsByIds = "getPostsByIds" // get posts by ids
AuditEventGetThreadForUser = "getThreadForUser" // get thread for user
AuditEventLocalDeletePost = "localDeletePost" // delete post locally
AuditEventMoveThread = "moveThread" // move thread and replies to different channel
AuditEventNotificationAck = "notificationAck" // notification ack
AuditEventPatchPost = "patchPost" // update post meta properties
AuditEventRestorePostVersion = "restorePostVersion" // restore post to previous version
AuditEventSaveIsPinnedPost = "saveIsPinnedPost" // pin or unpin post
AuditEventSearchPosts = "searchPosts" // search for posts
AuditEventUpdatePost = "updatePost" // update post content
AuditEventRevealPost = "revealPost" // reveal a post that was hidden due to burn on read
AuditEventBurnPost = "burnPost" // burn a post that was hidden due to burn on read
AuditEventWebsocketPost = "websocketPost" // post received via websocket
)
// Recaps
const (
AuditEventCreateRecap = "createRecap" // create recap summarizing channel content
AuditEventGetRecap = "getRecap" // view a single recap
AuditEventGetRecaps = "getRecaps" // list user's recaps
AuditEventMarkRecapAsRead = "markRecapAsRead" // mark recap as read
AuditEventRegenerateRecap = "regenerateRecap" // regenerate recap with updated channel content
AuditEventDeleteRecap = "deleteRecap" // delete recap
)
// Preferences
const (
AuditEventDeletePreferences = "deletePreferences" // delete user preferences
AuditEventUpdatePreferences = "updatePreferences" // update user preferences
)
// Remote Clusters
const (
AuditEventCreateRemoteCluster = "createRemoteCluster" // create connection to remote Mattermost cluster
AuditEventDeleteRemoteCluster = "deleteRemoteCluster" // delete connection to remote Mattermost cluster
AuditEventGenerateRemoteClusterInvite = "generateRemoteClusterInvite" // generate invitation token for remote cluster connection
AuditEventInviteRemoteClusterToChannel = "inviteRemoteClusterToChannel" // invite remote cluster users to shared channel
AuditEventPatchRemoteCluster = "patchRemoteCluster" // update remote cluster connection settings
AuditEventRemoteClusterAcceptInvite = "remoteClusterAcceptInvite" // accept invitation from remote cluster
AuditEventRemoteClusterAcceptMessage = "remoteClusterAcceptMessage" // accept message from remote cluster
AuditEventRemoteUploadProfileImage = "remoteUploadProfileImage" // upload profile image from remote cluster
AuditEventUninviteRemoteClusterToChannel = "uninviteRemoteClusterToChannel" // remove remote cluster access from shared channel
AuditEventUploadRemoteData = "uploadRemoteData" // upload data to remote cluster
)
// Roles
const (
AuditEventPatchRole = "patchRole" // update role permissions
)
// SAML
const (
AuditEventAddSamlIdpCertificate = "addSamlIdpCertificate" // add SAML identity provider certificate
AuditEventAddSamlPrivateCertificate = "addSamlPrivateCertificate" // add SAML private certificate
AuditEventAddSamlPublicCertificate = "addSamlPublicCertificate" // add SAML public certificate
AuditEventCompleteSaml = "completeSaml" // complete SAML authentication flow
AuditEventRemoveSamlIdpCertificate = "removeSamlIdpCertificate" // remove SAML identity provider certificate
AuditEventRemoveSamlPrivateCertificate = "removeSamlPrivateCertificate" // remove SAML private certificate
AuditEventRemoveSamlPublicCertificate = "removeSamlPublicCertificate" // remove SAML public certificate
)
// Scheduled Posts
const (
AuditEventCreateSchedulePost = "createSchedulePost" // create post scheduled for future delivery
AuditEventDeleteScheduledPost = "deleteScheduledPost" // delete scheduled post before delivery
AuditEventUpdateScheduledPost = "updateScheduledPost" // update scheduled post
)
// Schemes
const (
AuditEventCreateScheme = "createScheme" // create permission scheme with role definitions
AuditEventDeleteScheme = "deleteScheme" // delete scheme
AuditEventPatchScheme = "patchScheme" // update scheme
)
// Search Indexes
const (
AuditEventPurgeBleveIndexes = "purgeBleveIndexes" // purge Bleve search indexes
AuditEventPurgeElasticsearchIndexes = "purgeElasticsearchIndexes" // purge Elasticsearch search indexes
)
// Server Administration
const (
AuditEventClearServerBusy = "clearServerBusy" // clear server busy status to allow normal operations
AuditEventCompleteOnboarding = "completeOnboarding" // complete system onboarding process
AuditEventDatabaseRecycle = "databaseRecycle" // closes active connections
AuditEventDownloadLogs = "downloadLogs" // download server log files
AuditEventGenerateSupportPacket = "generateSupportPacket" // generate support packet with server diagnostics and logs
AuditEventGetAppliedSchemaMigrations = "getAppliedSchemaMigrations" // get list of applied database schema migrations
AuditEventGetLogs = "getLogs" // get server log entries
AuditEventGetOnboarding = "getOnboarding" // get system onboarding status
AuditEventInvalidateCaches = "invalidateCaches" // clear server caches
AuditEventLocalCheckIntegrity = "localCheckIntegrity" // check database integrity locally
AuditEventQueryLogs = "queryLogs" // search server log entries
AuditEventRestartServer = "restartServer" // restart Mattermost server process
AuditEventSetServerBusy = "setServerBusy" // set server busy status to disallow any operations
AuditEventUpdateViewedProductNotices = "updateViewedProductNotices" // update viewed status of product notices
AuditEventUpgradeToEnterprise = "upgradeToEnterprise" // upgrade server to Enterprise edition
)
// Teams
const (
AuditEventAddTeamMember = "addTeamMember" // add member to team
AuditEventAddTeamMembers = "addTeamMembers" // add multiple members to team
AuditEventAddUserToTeamFromInvite = "addUserToTeamFromInvite" // add user to team using invitation link
AuditEventCreateTeam = "createTeam" // create team
AuditEventDeleteTeam = "deleteTeam" // delete team
AuditEventImportTeam = "importTeam" // import team data from external source
AuditEventInvalidateAllEmailInvites = "invalidateAllEmailInvites" // invalidate all pending email invitations
AuditEventInviteGuestsToChannels = "inviteGuestsToChannels" // invite guest users to specific channels
AuditEventInviteUsersToTeam = "inviteUsersToTeam" // invite users to team
AuditEventLocalCreateTeam = "localCreateTeam" // create team locally
AuditEventLocalDeleteTeam = "localDeleteTeam" // delete team locally
AuditEventLocalInviteUsersToTeam = "localInviteUsersToTeam" // invite users to team locally
AuditEventPatchTeam = "patchTeam" // update team properties
AuditEventRegenerateTeamInviteId = "regenerateTeamInviteId" // regenerate team invitation ID
AuditEventRemoveTeamIcon = "removeTeamIcon" // remove custom icon from team
AuditEventRemoveTeamMember = "removeTeamMember" // remove member from team
AuditEventRestoreTeam = "restoreTeam" // restore previously deleted team
AuditEventSetTeamIcon = "setTeamIcon" // set custom icon for team
AuditEventUpdateTeam = "updateTeam" // update team properties
AuditEventUpdateTeamMemberRoles = "updateTeamMemberRoles" // update roles of team members
AuditEventUpdateTeamMemberSchemeRoles = "updateTeamMemberSchemeRoles" // update scheme-based roles of team members
AuditEventUpdateTeamPrivacy = "updateTeamPrivacy" // change team privacy settings
AuditEventUpdateTeamScheme = "updateTeamScheme" // update scheme applied to team
)
// Terms of Service
const (
AuditEventCreateTermsOfService = "createTermsOfService" // create terms of service
AuditEventSaveUserTermsOfService = "saveUserTermsOfService" // save user acceptance of terms of service
)
// Threads
const (
AuditEventFollowThreadByUser = "followThreadByUser" // follow thread to receive notifications about replies
AuditEventSetUnreadThreadByPostId = "setUnreadThreadByPostId" // mark thread as unread for user by post ID
AuditEventUnfollowThreadByUser = "unfollowThreadByUser" // unfollow thread to stop receiving notifications about replies
AuditEventUpdateReadStateAllThreadsByUser = "updateReadStateAllThreadsByUser" // update read status for all threads for user
AuditEventUpdateReadStateThreadByUser = "updateReadStateThreadByUser" // update read status for specific thread for user
)
// Uploads
const (
AuditEventCreateUpload = "createUpload" // create file upload session
AuditEventUploadData = "uploadData" // upload file data to server storage
)
// Users
const (
AuditEventAttachDeviceId = "attachDeviceId" // attach device ID to user session for mobile app
AuditEventCreateUser = "createUser" // create user account
AuditEventCreateUserAccessToken = "createUserAccessToken" // create personal access token for user API access
AuditEventDeleteUser = "deleteUser" // delete user account
AuditEventDemoteUserToGuest = "demoteUserToGuest" // demote regular user to guest account with limited permissions
AuditEventDisableUserAccessToken = "disableUserAccessToken" // disable user personal access token
AuditEventEnableUserAccessToken = "enableUserAccessToken" // enable user personal access token
AuditEventExtendSessionExpiry = "extendSessionExpiry" // extend user session expiration time
AuditEventLocalDeleteUser = "localDeleteUser" // delete user locally
AuditEventLocalPermanentDeleteAllUsers = "localPermanentDeleteAllUsers" // permanently delete all users locally
AuditEventLogin = "login" // user login to system
AuditEventLoginWithDesktopToken = "loginWithDesktopToken" // user login to system with desktop token
AuditEventLogout = "logout" // user logout from system
AuditEventMigrateAuthToLdap = "migrateAuthToLdap" // migrate user authentication method to LDAP
AuditEventMigrateAuthToSaml = "migrateAuthToSaml" // migrate user authentication method to SAML
AuditEventPatchUser = "patchUser" // update user properties
AuditEventPromoteGuestToUser = "promoteGuestToUser" // promote guest account to regular user
AuditEventResetPassword = "resetPassword" // reset user password
AuditEventResetPasswordFailedAttempts = "resetPasswordFailedAttempts" // reset failed password attempt counter
AuditEventRevokeAllSessionsAllUsers = "revokeAllSessionsAllUsers" // revoke all active sessions for all users
AuditEventRevokeAllSessionsForUser = "revokeAllSessionsForUser" // revoke all active sessions for specific user
AuditEventRevokeSession = "revokeSession" // revoke specific user session
AuditEventRevokeUserAccessToken = "revokeUserAccessToken" // revoke user personal access token
AuditEventSendPasswordReset = "sendPasswordReset" // send password reset email to user
AuditEventSendVerificationEmail = "sendVerificationEmail" // send email verification link to user
AuditEventSetDefaultProfileImage = "setDefaultProfileImage" // set user profile image to default avatar
AuditEventSetProfileImage = "setProfileImage" // set custom profile image for user
AuditEventSwitchAccountType = "switchAccountType" // switch user authentication method from one to another
AuditEventUpdatePassword = "updatePassword" // update user password
AuditEventUpdateUser = "updateUser" // update user account properties
AuditEventUpdateUserActive = "updateUserActive" // update user active status
AuditEventUpdateUserAuth = "updateUserAuth" // update user authentication method
AuditEventUpdateUserMfa = "updateUserMfa" // update user multi-factor authentication settings
AuditEventUpdateUserRoles = "updateUserRoles" // update user roles
AuditEventVerifyUserEmail = "verifyUserEmail" // verify user email address using verification token
AuditEventVerifyUserEmailWithoutToken = "verifyUserEmailWithoutToken" // verify user email address without verification token
)
// Webhooks
const (
AuditEventCreateIncomingHook = "createIncomingHook" // create incoming webhook
AuditEventCreateOutgoingHook = "createOutgoingHook" // create outgoing webhook
AuditEventDeleteIncomingHook = "deleteIncomingHook" // delete incoming webhook
AuditEventDeleteOutgoingHook = "deleteOutgoingHook" // delete outgoing webhook
AuditEventGetIncomingHook = "getIncomingHook" // get incoming webhook details
AuditEventGetOutgoingHook = "getOutgoingHook" // get outgoing webhook details
AuditEventLocalCreateIncomingHook = "localCreateIncomingHook" // create incoming webhook locally
AuditEventRegenOutgoingHookToken = "regenOutgoingHookToken" // regenerate authentication token
AuditEventUpdateIncomingHook = "updateIncomingHook" // update incoming webhook
AuditEventUpdateOutgoingHook = "updateOutgoingHook" // update outgoing webhook
)
// Content Flagging
const (
AuditEventFlagPost = "flagPost" // flag post for review
AuditEventGetFlaggedPost = "getFlaggedPost" // get flagged post details
AuditEventPermanentlyRemoveFlaggedPost = "permanentlyRemoveFlaggedPost" // permanently remove flagged post
AuditEventKeepFlaggedPost = "keepFlaggedPost" // keep flagged post
AuditEventUpdateContentFlaggingConfig = "updateContentFlaggingConfig" // update content flagging configuration
AuditEventSetReviewer = "setFlaggedPostReviewer" // assign reviewer for flagged post
)