mirror of
https://github.com/mattermost/mattermost.git
synced 2026-04-13 13:08:56 -04:00
* Add CreatedBy and UpdatedBy to the properties fields and values (#34485) * Add CreatedBy and UpdatedBy to the properties fields and values * Fix types --------- Co-authored-by: Miguel de la Cruz <miguel@ctrlz.es> * Adds ObjectType to the property fields table (#34908) Co-authored-by: Miguel de la Cruz <miguel@ctrlz.es> * Update ObjectType migration setting an empty value and marking the column as not null (#34915) Co-authored-by: Miguel de la Cruz <miguel@ctrlz.es> * Adds uniqueness mechanisms to the property fields (#35058) * Adds uniqueness mechanisms to the property fields After adding ObjectType, this commit ensures that both the PSAv1 and PSAv2 schemas are supported, and enforces property uniqueness through both database indexes and a logical check when creating new property fields. * Adds uniqueness check to property updates Updates are covered on this commit and we refactor as well the SQL code to use the squirrel builder and work better with the conditional addition of the `existingID` piece of the query. * Add translations to error messages * Fixing retrylayer mocks * Remove retrylayer duplication * Address review comments * Fix comment to avoid linter issues * Address PR comments * Update server/channels/db/migrations/postgres/000157_add_object_type_to_property_fields.down.sql Co-authored-by: Alejandro García Montoro <alejandro.garciamontoro@gmail.com> * Update server/channels/db/migrations/postgres/000157_add_object_type_to_property_fields.up.sql Co-authored-by: Alejandro García Montoro <alejandro.garciamontoro@gmail.com> * Update server/channels/db/migrations/postgres/000157_add_object_type_to_property_fields.up.sql Co-authored-by: Alejandro García Montoro <alejandro.garciamontoro@gmail.com> * Update field validation to check only for valid target types * Update migrations to avoid concurrent index creation within a transaction * Update migrations to make all index ops concurrent * Update tests to use valid PSAv2 property fields * Adds a helper for valid PSAv2 TargetTypes --------- Co-authored-by: Miguel de la Cruz <miguel@ctrlz.es> Co-authored-by: Alejandro García Montoro <alejandro.garciamontoro@gmail.com> * Fix property tests (#35388) Co-authored-by: Miguel de la Cruz <miguel@ctrlz.es> * Adds Integrated Boards feature flag (#35378) Co-authored-by: Miguel de la Cruz <miguel@ctrlz.es> * Adds Integrated Boards MVP API changes (#34822) This PR includes the necessary changes for channels and posts endpoints and adds a set of generic endpoints to retrieve and manage property fields and values following the new Property System approach. Co-authored-by: Miguel de la Cruz <miguel@ctrlz.es> Co-authored-by: Mattermost Build <build@mattermost.com> * Property System Architecture permissions for v2 (#35113) * Adds uniqueness mechanisms to the property fields After adding ObjectType, this commit ensures that both the PSAv1 and PSAv2 schemas are supported, and enforces property uniqueness through both database indexes and a logical check when creating new property fields. * Adds uniqueness check to property updates Updates are covered on this commit and we refactor as well the SQL code to use the squirrel builder and work better with the conditional addition of the `existingID` piece of the query. * Add translations to error messages * Add the permissions to the migrations, model and update the store calls * Adds the property field and property group app layer * Adds authorization helpers for property fields and values * Make sure that users cannot lock themselves out of property fields * Migrate permissions from a JSON column to three normalized columns * Remove the audit comment * Use target level constants in authorization * Log authorization membership failures * Rename admin to sysadmin * Fix i18n sorting --------- Co-authored-by: Miguel de la Cruz <miguel@ctrlz.es> * Add Views store and app layer (#35361) * Add Views store and app layer for Integrated Boards Implements the View entity (model, SQL store, service, app) as described in the Integrated Boards tech spec. Views are channel-scoped board configurations with typed props (board, kanban subviews) and soft-delete. - public/model: View, ViewBoardProps, Subview, ViewPatch types with PreSave/PreUpdate/IsValid/Patch/Clone/Auditable - Migration 158: Views table with jsonb Props column and indexes - SqlViewStore: CRUD with nil-safe Props marshaling (AppendBinaryFlag) - ViewService: CreateView seeds default kanban subview and links the boards property field; caches boardPropertyFieldID at startup - App layer: CreateView/GetView/GetViewsForChannel/UpdateView/DeleteView with channel-membership permission checks and WebSocket events (view_created, view_updated, view_deleted) - doSetupBoardsPropertyField: registers the Boards property group and board field in NewServer() before ViewService construction - GetFieldByName now returns store.ErrNotFound instead of raw sql.ErrNoRows * Move permission checks out of App layer for views - Remove HasPermissionToChannel calls from all App view methods - Drop userID params from GetView, GetViewsForChannel, UpdateView, DeleteView - Fix doSetupBoardsPropertyField to include required TargetType for PSAv2 field * Make View service generic and enforce board validation in model - Remove board-specific auto-setup from service and server startup - Enforce that board views require Props, at least one subview, and at least one linked property in IsValid() - Move default subview seeding out of app layer; callers must provide valid props - Call PreSave on subviews during PreUpdate to assign IDs to new subviews - Update all tests to reflect the new validation requirements * Restore migrations files to match base branch * Distinguish ErrNotFound from other errors in view store Get * Use CONCURRENTLY and nontransactional for index operations in views migration * Split views index creation into separate nontransactional migrations * Update migrations.list * Update i18n translations for views * Fix makeView helper to include required Props for board view validation * Rename ctx parameter from c to rctx in OAuthProvider mock * Remove views service layer, call store directly from app * Return 500 for unexpected DB errors in GetView, 404 only for not-found * Harden View model: deep-copy Props, validate linked property IDs - Add ViewBoardProps.Clone() to deep-copy LinkedProperties and Subviews - Use it in View.Clone() and View.Patch() to prevent shared-slice aliasing - Iterate over LinkedProperties in View.IsValid() and reject invalid IDs with a dedicated i18n key - Register ViewStore in storetest AssertExpectations so mock expectations are enforced - Add tests covering all new behaviours * Restore autotranslation worker_stopped i18n translation * Fix view store test IDs and improve error handling in app layer - Use model.NewId() for linked property IDs in testUpdateView to fix validation failure (IsValid rejects non-UUID strings) - Fix import grouping in app/view.go (stdlib imports in one block) - Return 404 instead of 500 when Update/Delete store calls return ErrNotFound (e.g. concurrent deletion TOCTOU race) * Add View store mock to retrylayer test genStore helper The View store was added to the store interface but the genStore() helper in retrylayer_test.go was not updated, causing TestRetry to panic. Also removes the duplicate Recap mock registration. * Refactor view deletion and websocket event handling; update SQL store methods to use query builder * revert property field store * Remove useless migrations * Add cursor-based pagination to View store GetForChannel - Add ViewQueryCursor and ViewQueryOpts types with validation - Return (views, cursor, error) for caller-driven pagination - PerPage clamping: <=0 defaults to 20, >200 clamps to 200 - Support IncludeDeleted filter - Add comprehensive store tests for pagination, cursor edge cases, PerPage clamping, and invalid input rejection - Add app layer test for empty channelID → 400 - Update interface, retrylayer, timerlayer, and mock signatures Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * Refactor test loops in ViewStore tests for improved readability * change pagination to limit/offset * Add upper-bound limits on View Subviews and LinkedProperties Defense-in-depth validation: cap Subviews at 50 and LinkedProperties at 500 to prevent abuse below the 300KB payload limit. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com> * MM-67388, MM-66528, MM-67750: Add View REST API endpoints, websocket events, and sort order (#35442) * Add Views store and app layer for Integrated Boards Implements the View entity (model, SQL store, service, app) as described in the Integrated Boards tech spec. Views are channel-scoped board configurations with typed props (board, kanban subviews) and soft-delete. - public/model: View, ViewBoardProps, Subview, ViewPatch types with PreSave/PreUpdate/IsValid/Patch/Clone/Auditable - Migration 158: Views table with jsonb Props column and indexes - SqlViewStore: CRUD with nil-safe Props marshaling (AppendBinaryFlag) - ViewService: CreateView seeds default kanban subview and links the boards property field; caches boardPropertyFieldID at startup - App layer: CreateView/GetView/GetViewsForChannel/UpdateView/DeleteView with channel-membership permission checks and WebSocket events (view_created, view_updated, view_deleted) - doSetupBoardsPropertyField: registers the Boards property group and board field in NewServer() before ViewService construction - GetFieldByName now returns store.ErrNotFound instead of raw sql.ErrNoRows * Move permission checks out of App layer for views - Remove HasPermissionToChannel calls from all App view methods - Drop userID params from GetView, GetViewsForChannel, UpdateView, DeleteView - Fix doSetupBoardsPropertyField to include required TargetType for PSAv2 field * Make View service generic and enforce board validation in model - Remove board-specific auto-setup from service and server startup - Enforce that board views require Props, at least one subview, and at least one linked property in IsValid() - Move default subview seeding out of app layer; callers must provide valid props - Call PreSave on subviews during PreUpdate to assign IDs to new subviews - Update all tests to reflect the new validation requirements * Restore migrations files to match base branch * Distinguish ErrNotFound from other errors in view store Get * Use CONCURRENTLY and nontransactional for index operations in views migration * Split views index creation into separate nontransactional migrations * Update migrations.list * Update i18n translations for views * Fix makeView helper to include required Props for board view validation * Rename ctx parameter from c to rctx in OAuthProvider mock * Remove views service layer, call store directly from app * Return 500 for unexpected DB errors in GetView, 404 only for not-found * Harden View model: deep-copy Props, validate linked property IDs - Add ViewBoardProps.Clone() to deep-copy LinkedProperties and Subviews - Use it in View.Clone() and View.Patch() to prevent shared-slice aliasing - Iterate over LinkedProperties in View.IsValid() and reject invalid IDs with a dedicated i18n key - Register ViewStore in storetest AssertExpectations so mock expectations are enforced - Add tests covering all new behaviours * Restore autotranslation worker_stopped i18n translation * Fix view store test IDs and improve error handling in app layer - Use model.NewId() for linked property IDs in testUpdateView to fix validation failure (IsValid rejects non-UUID strings) - Fix import grouping in app/view.go (stdlib imports in one block) - Return 404 instead of 500 when Update/Delete store calls return ErrNotFound (e.g. concurrent deletion TOCTOU race) * Add View store mock to retrylayer test genStore helper The View store was added to the store interface but the genStore() helper in retrylayer_test.go was not updated, causing TestRetry to panic. Also removes the duplicate Recap mock registration. * Refactor view deletion and websocket event handling; update SQL store methods to use query builder * revert property field store * Add View API endpoints with OpenAPI spec, client methods, and i18n Implement REST API for channel views (board-type) behind the IntegratedBoards feature flag. Adds CRUD endpoints under /api/v4/channels/{channel_id}/views with permission checks matching the channel bookmark pattern. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * Remove useless migrations * Add cursor-based pagination to View store GetForChannel - Add ViewQueryCursor and ViewQueryOpts types with validation - Return (views, cursor, error) for caller-driven pagination - PerPage clamping: <=0 defaults to 20, >200 clamps to 200 - Support IncludeDeleted filter - Add comprehensive store tests for pagination, cursor edge cases, PerPage clamping, and invalid input rejection - Add app layer test for empty channelID → 400 - Update interface, retrylayer, timerlayer, and mock signatures Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * Add cursor-based pagination to View API for channel views * Enhance cursor handling in getViewsForChannel and update tests for pagination * Refactor test loops in ViewStore tests for improved readability * Refactor loop in TestGetViewsForChannel for improved readability * change pagination to limit/offset * switch to limit/offset pagination * Add upper-bound limits on View Subviews and LinkedProperties Defense-in-depth validation: cap Subviews at 50 and LinkedProperties at 500 to prevent abuse below the 300KB payload limit. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * Add view sort order API endpoint Add POST /api/v4/channels/{channel_id}/views/{view_id}/sort_order endpoint following the channel bookmarks reorder pattern. Includes store, app, and API layers with full test coverage at each layer. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * Add connectionId to view WebSocket events and sort_order API spec Thread connectionId from request header through all view handlers (create, update, delete, sort_order) to WebSocket events, matching the channel bookmarks pattern. Add sort_order endpoint to OpenAPI spec. Update minimum server version to 11.6. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * Remove duplicate View/ViewPatch definitions from definitions.yaml The merge from integrated-boards-mvp introduced duplicate View and ViewPatch schema definitions that were already defined earlier in the file with more detail (including ViewBoardProps ref and enums). Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * Update minimum server version to 11.6 in views API spec Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * Add missing translations for view sort order error messages Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * Merge integrated-boards-mvp into ibmvp_api-views; remove spec files Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * Fix flaky TestViewStore timestamp test on CI Add sleep before UpdateSortOrder to ensure timestamps differ, preventing same-millisecond comparisons on fast CI machines. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * remove duplicate views.yaml imclude * Use c.boolString() for include_deleted query param in GetViewsForChannel Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * Fix views.yaml sort order schema: use integer type and require body Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * Refactor view sort order tests to use named IDs instead of array indices Extract idA/idB/idC from views slice and add BEFORE/AFTER comments to make stateful subtest ordering easier to follow. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * Return 404 instead of 403 for view operations on deleted channels Deleted channels should appear non-existent to callers rather than revealing their existence via a 403. Detailed error text explains the context for debugging. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * add missing channel deleteat checks * Use c.Params.Page instead of manual page query param parsing in getViewsForChannel c.Params already validates and defaults page/per_page, so the manual parsing was redundant. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * Add support for total count in views retrieval * Add tests for handling deleted views in GetViewsForChannel and GetView * Short-circuit negative newIndex in UpdateSortOrder before opening transaction Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * Add per-channel limit on views to bound UpdateSortOrder cost Without a cap, unbounded view creation makes sort-order updates increasingly expensive (CASE WHEN per view, row locks). Adds MaxViewsPerChannel=50 constant and enforces it in the app layer before saving. Includes API and app layer tests. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * Remove include_deleted support from views API Soft-deleted views are structural metadata with low risk, but no other similar endpoint (e.g. channel bookmarks) exposes deleted records without an admin gate. Rather than adding an admin-only permission check for consistency, remove the feature entirely since there is no current use case. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * Update view permissions to require `create_post` instead of channel management permissions * Remove obsolete view management error messages for direct and group messages --------- Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com> * feat(migrations): add user tracking and object type to property fields - Introduced user tracking columns (CreatedBy, UpdatedBy) to PropertyFields and PropertyValues. - Added ObjectType column to PropertyFields with associated unique indexes for legacy and typed properties. - Created new migration scripts for adding and dropping these features, including necessary indexes for data integrity. - Established views for managing property fields with new attributes. This update enhances the schema to support better tracking and categorization of property fields. * Add Property System Architecture v2 API endpoints (#35583) * Adds uniqueness mechanisms to the property fields After adding ObjectType, this commit ensures that both the PSAv1 and PSAv2 schemas are supported, and enforces property uniqueness through both database indexes and a logical check when creating new property fields. * Adds uniqueness check to property updates Updates are covered on this commit and we refactor as well the SQL code to use the squirrel builder and work better with the conditional addition of the `existingID` piece of the query. * Add translations to error messages * Add the permissions to the migrations, model and update the store calls * Adds the property field and property group app layer * Adds authorization helpers for property fields and values * Make sure that users cannot lock themselves out of property fields * Migrate permissions from a JSON column to three normalized columns * Remove the audit comment * Use target level constants in authorization * Log authorization membership failures * Rename admin to sysadmin * Adds the Property System Architecture v2 API endpoints * Adds permission checks to the create field endpoint * Add target access checks to value endpoints * Add default branches for object_type and target_type and extra guards for cursor client4 methods * Fix vet API mismatch * Fix error checks * Fix linter * Add merge semantics for property patch logic and API endpoint * Fix i18n * Fix duplicated patch elements and early return on bad cursor * Update docs to use enums * Fix i18n sorting * Update app layer to return model.AppError * Adds a limit to the number of property values that can be patched in the same request * Require target_type filter when searching property fields * Add objectType validation as part of field.IsValid() * Fix linter * Fix test with bad objecttpye * Fix test grouping --------- Co-authored-by: Miguel de la Cruz <miguel@ctrlz.es> * MM-67968: Flatten view model — remove icon, subviews, typed board props (#35726) * feat(views): flatten view model by removing icon, subview, and board props Simplifies the View data model as part of MM-67968: removes Icon, Subview, and ViewBoardProps types; renames ViewTypeBoard to ViewTypeKanban; replaces typed Props with StringInterface (map[string]any); adds migration 000167 to drop the Icon column from the Views table. Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com> * feat(api): update views OpenAPI spec to reflect flattened model Removes ViewBoardProps, Subview, and icon from the View and ViewPatch schemas. Changes type enum from board to kanban. Replaces typed props with a free-form StringInterface object. Aligns with MM-67968. Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com> * refactor(views): simplify store by dropping dbView and marshalViewProps StringInterface already implements driver.Valuer and sql.Scanner, so the manual JSON marshal/unmarshal and the dbView intermediate struct were redundant. model.View now scans directly from the database. Also removes the dead ViewMaxLinkedProperties constant and wraps the Commit() error in UpdateSortOrder. Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com> * fix(api): allow arbitrary JSON in view props OpenAPI schema The props field was restricted to string values via additionalProperties: { type: string }, conflicting with the Go model's StringInterface (map[string]any). Changed to additionalProperties: true in View, ViewPatch, and inline POST schemas. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com> * Adds basic implementation of the generic redux store for PSAv2 (#35512) * Adds basic implementation of the generic redux store for PSAv2 * Add created_by and updated_by to the test fixtures * Make target_id, target_type and object_type mandatory * Wrap getPropertyFieldsByIds and getPropertyValuesForTargetByFieldIds with createSelector * Address PR comments --------- Co-authored-by: Miguel de la Cruz <miguel@ctrlz.es> * Adds websocket messages for the PSAv2 API events (#35696) * Adds uniqueness mechanisms to the property fields After adding ObjectType, this commit ensures that both the PSAv1 and PSAv2 schemas are supported, and enforces property uniqueness through both database indexes and a logical check when creating new property fields. * Adds uniqueness check to property updates Updates are covered on this commit and we refactor as well the SQL code to use the squirrel builder and work better with the conditional addition of the `existingID` piece of the query. * Add translations to error messages * Add the permissions to the migrations, model and update the store calls * Adds the property field and property group app layer * Adds authorization helpers for property fields and values * Make sure that users cannot lock themselves out of property fields * Migrate permissions from a JSON column to three normalized columns * Remove the audit comment * Use target level constants in authorization * Log authorization membership failures * Rename admin to sysadmin * Adds the Property System Architecture v2 API endpoints * Adds permission checks to the create field endpoint * Add target access checks to value endpoints * Add default branches for object_type and target_type and extra guards for cursor client4 methods * Fix vet API mismatch * Fix error checks * Fix linter * Add merge semantics for property patch logic and API endpoint * Fix i18n * Fix duplicated patch elements and early return on bad cursor * Update docs to use enums * Fix i18n sorting * Update app layer to return model.AppError * Adds a limit to the number of property values that can be patched in the same request * Adds websocket messages for the PSAv2 API events * Add IsPSAv2 helper to the property field for clarity * Add guard against nil returns on field deletion * Add docs to the websocket endpoints --------- Co-authored-by: Miguel de la Cruz <miguel@ctrlz.es> * migrations: consolidate views migrations and reorder after master - Merged 000165 (create Views) with 000167 (drop Icon) since Icon was never needed - Renumbered branch migrations 159-166 → 160-167 so master's 000159 (deduplicate_policy_names) runs first - Regenerated migrations.list Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Add API endpoint to retrieve posts for a specific view (#35604) Automatic Merge * Apply fixes after merge * Return a more specific error from getting multiple fields * Prevent getting broadcast params on field deletion if not needed * Remove duplicated migration code * Update property conflict code to always use master * Adds nil guard when iterating on property fields * Check that permission level is valid before getting rejected by the database * Validate correctness on TargetID for PSAv2 fields * Avoid PSAv1 using permissions or protected * Fix test data after validation change * Fix flaky search test * Adds more posts for filter use cases to properly test exclusions --------- Co-authored-by: Miguel de la Cruz <miguel@ctrlz.es> Co-authored-by: Alejandro García Montoro <alejandro.garciamontoro@gmail.com> Co-authored-by: Julien Tant <julien@craftyx.fr> Co-authored-by: Mattermost Build <build@mattermost.com> Co-authored-by: Julien Tant <785518+JulienTant@users.noreply.github.com> Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
499 lines
34 KiB
Go
499 lines
34 KiB
Go
// Copyright (c) 2015-present Mattermost, Inc. All Rights Reserved.
|
|
// See LICENSE.txt for license information.
|
|
|
|
package model
|
|
|
|
// Access Control & Security
|
|
const (
|
|
AuditEventApplyIPFilters = "applyIPFilters" // apply IP address filtering
|
|
AuditEventAssignAccessPolicy = "assignAccessPolicy" // assign access control policy to channels
|
|
AuditEventCreateAccessControlPolicy = "createAccessControlPolicy" // create access control policy
|
|
AuditEventDeleteAccessControlPolicy = "deleteAccessControlPolicy" // delete access control policy
|
|
AuditEventUnassignAccessPolicy = "unassignAccessPolicy" // remove access control policy from channels
|
|
AuditEventUpdateActiveStatus = "updateActiveStatus" // update active/inactive status of access control policy
|
|
AuditEventSetActiveStatus = "setActiveStatus" // set active/inactive status of multiple access control policies
|
|
)
|
|
|
|
// Audit & Certificates
|
|
const (
|
|
AuditEventAddAuditLogCertificate = "addAuditLogCertificate" // add certificate for secure audit log transmission
|
|
AuditEventGetAudits = "getAudits" // get audit log entries
|
|
AuditEventGetUserAudits = "getUserAudits" // get audit log entries for specific user
|
|
AuditEventRemoveAuditLogCertificate = "removeAuditLogCertificate" // remove certificate used for audit log transmission
|
|
)
|
|
|
|
// Bots
|
|
const (
|
|
AuditEventAssignBot = "assignBot" // assign bot to user
|
|
AuditEventConvertBotToUser = "convertBotToUser" // convert bot account to regular user account
|
|
AuditEventConvertUserToBot = "convertUserToBot" // convert regular user account to bot account
|
|
AuditEventCreateBot = "createBot" // create bot account
|
|
AuditEventPatchBot = "patchBot" // update bot properties
|
|
AuditEventUpdateBotActive = "updateBotActive" // enable or disable bot account
|
|
)
|
|
|
|
// Branding
|
|
const (
|
|
AuditEventDeleteBrandImage = "deleteBrandImage" // delete brand image
|
|
AuditEventUploadBrandImage = "uploadBrandImage" // upload brand image
|
|
)
|
|
|
|
// Channel Bookmarks
|
|
const (
|
|
AuditEventCreateChannelBookmark = "createChannelBookmark" // create bookmark in channels
|
|
AuditEventDeleteChannelBookmark = "deleteChannelBookmark" // delete bookmark
|
|
AuditEventUpdateChannelBookmark = "updateChannelBookmark" // update bookmark
|
|
AuditEventUpdateChannelBookmarkSortOrder = "updateChannelBookmarkSortOrder" // update display order of bookmarks
|
|
AuditEventListChannelBookmarksForChannel = "listChannelBookmarksForChannel" // list bookmarks for channel
|
|
)
|
|
|
|
// Views
|
|
const (
|
|
AuditEventCreateView = "createView" // create view in channel
|
|
AuditEventGetView = "getView" // get view by ID
|
|
AuditEventUpdateView = "updateView" // update view
|
|
AuditEventDeleteView = "deleteView" // delete view
|
|
AuditEventListViewsForChannel = "listViewsForChannel" // list views for channel
|
|
AuditEventUpdateViewSortOrder = "updateViewSortOrder" // update view sort order
|
|
AuditEventGetPostsForView = "getPostsForView" // get posts for view
|
|
)
|
|
|
|
// Channel Categories
|
|
const (
|
|
AuditEventCreateCategoryForTeamForUser = "createCategoryForTeamForUser" // create channel category for user
|
|
AuditEventDeleteCategoryForTeamForUser = "deleteCategoryForTeamForUser" // delete channel category
|
|
AuditEventUpdateCategoriesForTeamForUser = "updateCategoriesForTeamForUser" // update multiple channel categories
|
|
AuditEventUpdateCategoryForTeamForUser = "updateCategoryForTeamForUser" // update single channel category
|
|
AuditEventUpdateCategoryOrderForTeamForUser = "updateCategoryOrderForTeamForUser" // update display order of the categories
|
|
)
|
|
|
|
// Channels
|
|
const (
|
|
AuditEventAddChannelMember = "addChannelMember" // add member to channel
|
|
AuditEventConvertGroupMessageToChannel = "convertGroupMessageToChannel" // convert group message to private channel
|
|
AuditEventCreateChannel = "createChannel" // create public or private channel
|
|
AuditEventCreateDirectChannel = "createDirectChannel" // create direct message channel between two users
|
|
AuditEventCreateGroupChannel = "createGroupChannel" // create group message channel with multiple users
|
|
AuditEventDeleteChannel = "deleteChannel" // delete channel
|
|
AuditEventGetPinnedPosts = "getPinnedPosts" // get pinned posts
|
|
AuditEventLocalAddChannelMember = "localAddChannelMember" // add channel member locally
|
|
AuditEventLocalCreateChannel = "localCreateChannel" // create channel locally
|
|
AuditEventLocalDeleteChannel = "localDeleteChannel" // delete channel locally
|
|
AuditEventLocalMoveChannel = "localMoveChannel" // move channel locally
|
|
AuditEventLocalPatchChannel = "localPatchChannel" // patch channel locally
|
|
AuditEventLocalRemoveChannelMember = "localRemoveChannelMember" // remove channel member locally
|
|
AuditEventLocalRestoreChannel = "localRestoreChannel" // restore channel locally
|
|
AuditEventLocalUpdateChannelPrivacy = "localUpdateChannelPrivacy" // update channel privacy locally
|
|
AuditEventMoveChannel = "moveChannel" // move channel to different team
|
|
AuditEventPatchChannel = "patchChannel" // update channel properties
|
|
AuditEventPatchChannelModerations = "patchChannelModerations" // update channel moderation settings
|
|
AuditEventRemoveChannelMember = "removeChannelMember" // remove member from channel
|
|
AuditEventRestoreChannel = "restoreChannel" // restore previously deleted channel
|
|
AuditEventUpdateChannel = "updateChannel" // update channel properties
|
|
AuditEventUpdateChannelMemberNotifyProps = "updateChannelMemberNotifyProps" // update notification preferences
|
|
AuditEventUpdateChannelMemberAutotranslation = "updateChannelMemberAutotranslation" // update autotranslation setting
|
|
AuditEventUpdateChannelMemberRoles = "updateChannelMemberRoles" // update roles and permissions
|
|
AuditEventUpdateChannelMemberSchemeRoles = "updateChannelMemberSchemeRoles" // update scheme-based roles
|
|
AuditEventUpdateChannelPrivacy = "updateChannelPrivacy" // change channel privacy settings
|
|
AuditEventUpdateChannelScheme = "updateChannelScheme" // update permission scheme applied to channel
|
|
)
|
|
|
|
// Commands
|
|
const (
|
|
AuditEventCreateCommand = "createCommand" // create slash command
|
|
AuditEventDeleteCommand = "deleteCommand" // delete command
|
|
AuditEventExecuteCommand = "executeCommand" // execute command
|
|
AuditEventLocalCreateCommand = "localCreateCommand" // create command locally
|
|
AuditEventMoveCommand = "moveCommand" // move command to another team
|
|
AuditEventRegenCommandToken = "regenCommandToken" // regenerate authentication token for command
|
|
AuditEventUpdateCommand = "updateCommand" // update command
|
|
)
|
|
|
|
// Compliance
|
|
const (
|
|
AuditEventCreateComplianceReport = "createComplianceReport" // create compliance report
|
|
AuditEventDownloadComplianceReport = "downloadComplianceReport" // download compliance report
|
|
AuditEventGetComplianceReport = "getComplianceReport" // get specific compliance report
|
|
AuditEventGetComplianceReports = "getComplianceReports" // get all compliance reports
|
|
)
|
|
|
|
// Configuration
|
|
const (
|
|
AuditEventConfigReload = "configReload" // reload server configuration
|
|
AuditEventGetConfig = "getConfig" // get current server configuration
|
|
AuditEventLocalGetClientConfig = "localGetClientConfig" // get client configuration locally
|
|
AuditEventLocalGetConfig = "localGetConfig" // get server configuration locally
|
|
AuditEventLocalPatchConfig = "localPatchConfig" // update server configuration locally
|
|
AuditEventLocalUpdateConfig = "localUpdateConfig" // update server configuration locally
|
|
AuditEventMigrateConfig = "migrateConfig" // migrate configs with file values from one store to another
|
|
AuditEventPatchConfig = "patchConfig" // update server configuration
|
|
AuditEventUpdateConfig = "updateConfig" // update server configuration
|
|
)
|
|
|
|
// Custom Profile Attributes
|
|
const (
|
|
AuditEventCreateCPAField = "createCPAField" // create custom profile attribute
|
|
AuditEventDeleteCPAField = "deleteCPAField" // delete custom profile attribute
|
|
AuditEventPatchCPAField = "patchCPAField" // update custom profile attribute field
|
|
AuditEventPatchCPAValues = "patchCPAValues" // update custom profile attribute values
|
|
)
|
|
|
|
// Property Fields
|
|
const (
|
|
AuditEventCreatePropertyField = "createPropertyField" // create property field
|
|
AuditEventDeletePropertyField = "deletePropertyField" // delete property field
|
|
AuditEventGetPropertyFields = "getPropertyFields" // list property fields
|
|
AuditEventPatchPropertyField = "patchPropertyField" // update property field
|
|
)
|
|
|
|
// Property Values
|
|
const (
|
|
AuditEventGetPropertyValues = "getPropertyValues" // get property values for target
|
|
AuditEventPatchPropertyValues = "patchPropertyValues" // update property values for target
|
|
)
|
|
|
|
// Data Retention Policies
|
|
const (
|
|
AuditEventAddChannelsToPolicy = "addChannelsToPolicy" // add channels to data retention policy
|
|
AuditEventAddTeamsToPolicy = "addTeamsToPolicy" // add teams to data retention policy
|
|
AuditEventCreatePolicy = "createPolicy" // create data retention policy
|
|
AuditEventDeletePolicy = "deletePolicy" // delete data retention policy
|
|
AuditEventPatchPolicy = "patchPolicy" // update data retention policy
|
|
AuditEventRemoveChannelsFromPolicy = "removeChannelsFromPolicy" // remove channels from data retention policy
|
|
AuditEventRemoveTeamsFromPolicy = "removeTeamsFromPolicy" // remove teams from data retention policy
|
|
)
|
|
|
|
// Emojis
|
|
const (
|
|
AuditEventCreateEmoji = "createEmoji" // create emoji
|
|
AuditEventDeleteEmoji = "deleteEmoji" // delete emoji
|
|
)
|
|
|
|
// Exports
|
|
const (
|
|
AuditEventBulkExport = "bulkExport" // bulk export data to a file
|
|
AuditEventDeleteExport = "deleteExport" // delete exported file
|
|
AuditEventGeneratePresignURLExport = "generatePresignURLExport" // generate presigned URL to download the exported file
|
|
AuditEventScheduleExport = "scheduleExport" // schedule export job
|
|
)
|
|
|
|
// Files
|
|
const (
|
|
AuditEventGetFile = "getFile" // get or download file
|
|
AuditEventGetFileLink = "getFileLink" // generate link for file sharing
|
|
AuditEventUploadFileMultipart = "uploadFileMultipart" // upload file using multipart form data
|
|
AuditEventUploadFileMultipartLegacy = "uploadFileMultipartLegacy" // upload file using legacy multipart method
|
|
AuditEventUploadFileSimple = "uploadFileSimple" // upload file using simple direct upload method
|
|
AuditEventGetFileThumbnail = "getFileThumbnail" // get file thumbnail
|
|
AuditEventGetFileInfosForPost = "getFileInfosForPost" // get file infos for post
|
|
AuditEventGetFileInfo = "getFileInfo" // get file info
|
|
AuditEventGetFilePreview = "getFilePreview" // get file preview
|
|
AuditEventSearchFiles = "searchFiles" // search for files
|
|
)
|
|
|
|
// Groups
|
|
const (
|
|
AuditEventAddGroupMembers = "addGroupMembers" // add members to group
|
|
AuditEventAddUserToGroupSyncables = "addUserToGroupSyncables" // add user to group-synchronized teams and channels
|
|
AuditEventCreateGroup = "createGroup" // create group
|
|
AuditEventDeleteGroup = "deleteGroup" // delete group
|
|
AuditEventDeleteGroupMembers = "deleteGroupMembers" // remove members from group
|
|
AuditEventLinkGroupSyncable = "linkGroupSyncable" // link group to team or channel for synchronization
|
|
AuditEventPatchGroup = "patchGroup" // update group
|
|
AuditEventPatchGroupSyncable = "patchGroupSyncable" // update group synchronization settings
|
|
AuditEventRestoreGroup = "restoreGroup" // restore previously deleted group
|
|
AuditEventUnlinkGroupSyncable = "unlinkGroupSyncable" // unlink group from team or channel synchronization
|
|
)
|
|
|
|
// Imports
|
|
const (
|
|
AuditEventBulkImport = "bulkImport" // bulk import data from a file
|
|
AuditEventDeleteImport = "deleteImport" // delete import file
|
|
AuditEventSlackImport = "slackImport" // import data from Slack
|
|
)
|
|
|
|
// Jobs
|
|
const (
|
|
AuditEventCancelJob = "cancelJob" // cancel a job
|
|
AuditEventCreateJob = "createJob" // create a job
|
|
AuditEventJobServer = "jobServer" // start job server
|
|
AuditEventUpdateJobStatus = "updateJobStatus" // update status of a job
|
|
)
|
|
|
|
// LDAP
|
|
const (
|
|
AuditEventAddLdapPrivateCertificate = "addLdapPrivateCertificate" // add private certificate for LDAP
|
|
AuditEventAddLdapPublicCertificate = "addLdapPublicCertificate" // add public certificate for LDAP
|
|
AuditEventIdMigrateLdap = "idMigrateLdap" // migrate user ID mapping to another attribute
|
|
AuditEventLinkLdapGroup = "linkLdapGroup" // link LDAP group to Mattermost team or channel
|
|
AuditEventRemoveLdapPrivateCertificate = "removeLdapPrivateCertificate" // remove private certificate for LDAP
|
|
AuditEventRemoveLdapPublicCertificate = "removeLdapPublicCertificate" // remove public certificate for LDAP
|
|
AuditEventSyncLdap = "syncLdap" // synchronize users and groups from LDAP
|
|
AuditEventUnlinkLdapGroup = "unlinkLdapGroup" // unlink LDAP group from Mattermost team or channel
|
|
)
|
|
|
|
// Licensing
|
|
const (
|
|
AuditEventAddLicense = "addLicense" // add license
|
|
AuditEventLocalAddLicense = "localAddLicense" // add license locally
|
|
AuditEventLocalRemoveLicense = "localRemoveLicense" // remove license locally
|
|
AuditEventRemoveLicense = "removeLicense" // remove license
|
|
AuditEventRequestTrialLicense = "requestTrialLicense" // request trial license
|
|
)
|
|
|
|
// OAuth
|
|
const (
|
|
AuditEventAuthorizeOAuthApp = "authorizeOAuthApp" // authorize OAuth app
|
|
AuditEventAuthorizeOAuthPage = "authorizeOAuthPage" // authorize OAuth page
|
|
AuditEventCompleteOAuth = "completeOAuth" // complete OAuth authorization flow
|
|
AuditEventCreateOAuthApp = "createOAuthApp" // create OAuth app
|
|
AuditEventCreateOutgoingOauthConnection = "createOutgoingOauthConnection" // create outgoing OAuth connection
|
|
AuditEventDeauthorizeOAuthApp = "deauthorizeOAuthApp" // revoke OAuth app authorization
|
|
AuditEventDeleteOAuthApp = "deleteOAuthApp" // delete OAuth app
|
|
AuditEventDeleteOutgoingOAuthConnection = "deleteOutgoingOAuthConnection" // delete outgoing OAuth connection
|
|
AuditEventGetAccessToken = "getAccessToken" // get OAuth access token
|
|
AuditEventLoginWithOAuth = "loginWithOAuth" // login using OAuth authentication provider
|
|
AuditEventMobileLoginWithOAuth = "mobileLoginWithOAuth" // mobile application login using OAuth authentication provider
|
|
AuditEventRegenerateOAuthAppSecret = "regenerateOAuthAppSecret" // regenerate secret key for OAuth app
|
|
AuditEventRegisterOAuthClient = "registerOAuthClient" // register OAuth client via dynamic client registration (RFC 7591)
|
|
AuditEventSignupWithOAuth = "signupWithOAuth" // create account using OAuth authentication provider
|
|
AuditEventUpdateOAuthApp = "updateOAuthApp" // update OAuth app
|
|
AuditEventUpdateOutgoingOAuthConnection = "updateOutgoingOAuthConnection" // update outgoing OAuth connection
|
|
AuditEventValidateOutgoingOAuthConnectionCredentials = "validateOutgoingOAuthConnectionCredentials" // validate credentials for outgoing OAuth connection
|
|
|
|
)
|
|
|
|
// Plugins
|
|
const (
|
|
AuditEventDisablePlugin = "disablePlugin" // disable installed plugin
|
|
AuditEventEnablePlugin = "enablePlugin" // enable installed plugin
|
|
AuditEventGetFirstAdminVisitMarketplaceStatus = "getFirstAdminVisitMarketplaceStatus" // get first admin visit status
|
|
AuditEventInstallMarketplacePlugin = "installMarketplacePlugin" // install plugin from official marketplace
|
|
AuditEventInstallPluginFromURL = "installPluginFromURL" // install plugin from external URL
|
|
AuditEventRemovePlugin = "removePlugin" // delete plugin
|
|
AuditEventSetFirstAdminVisitMarketplaceStatus = "setFirstAdminVisitMarketplaceStatus" // set first admin visit status
|
|
AuditEventUploadPlugin = "uploadPlugin" // upload plugin file to server for installation
|
|
)
|
|
|
|
// Posts
|
|
const (
|
|
AuditEventCreateEphemeralPost = "createEphemeralPost" // create ephemeral post
|
|
AuditEventCreatePost = "createPost" // create post
|
|
AuditEventDeletePost = "deletePost" // delete post
|
|
AuditEventGetEditHistoryForPost = "getEditHistoryForPost" // get edit history for post
|
|
AuditEventGetFlaggedPosts = "getFlaggedPosts" // get flagged posts
|
|
AuditEventGetPostsForChannel = "getPostsForChannel" // get posts for channel
|
|
AuditEventGetPostsForChannelAroundLastUnread = "getPostsForChannelAroundLastUnread" // get posts for channel around last unread
|
|
AuditEventGetPost = "getPost" // get post
|
|
AuditEventGetPostThread = "getPostThread" // get post thread
|
|
AuditEventGetPostsByIds = "getPostsByIds" // get posts by ids
|
|
AuditEventGetThreadForUser = "getThreadForUser" // get thread for user
|
|
AuditEventLocalDeletePost = "localDeletePost" // delete post locally
|
|
AuditEventMoveThread = "moveThread" // move thread and replies to different channel
|
|
AuditEventNotificationAck = "notificationAck" // notification ack
|
|
AuditEventPatchPost = "patchPost" // update post meta properties
|
|
AuditEventRestorePostVersion = "restorePostVersion" // restore post to previous version
|
|
AuditEventSaveIsPinnedPost = "saveIsPinnedPost" // pin or unpin post
|
|
AuditEventSearchPosts = "searchPosts" // search for posts
|
|
AuditEventUpdatePost = "updatePost" // update post content
|
|
AuditEventRevealPost = "revealPost" // reveal a post that was hidden due to burn on read
|
|
AuditEventBurnPost = "burnPost" // burn a post that was hidden due to burn on read
|
|
AuditEventWebsocketPost = "websocketPost" // post received via websocket
|
|
)
|
|
|
|
// Recaps
|
|
const (
|
|
AuditEventCreateRecap = "createRecap" // create recap summarizing channel content
|
|
AuditEventGetRecap = "getRecap" // view a single recap
|
|
AuditEventGetRecaps = "getRecaps" // list user's recaps
|
|
AuditEventMarkRecapAsRead = "markRecapAsRead" // mark recap as read
|
|
AuditEventRegenerateRecap = "regenerateRecap" // regenerate recap with updated channel content
|
|
AuditEventDeleteRecap = "deleteRecap" // delete recap
|
|
)
|
|
|
|
// Preferences
|
|
const (
|
|
AuditEventDeletePreferences = "deletePreferences" // delete user preferences
|
|
AuditEventUpdatePreferences = "updatePreferences" // update user preferences
|
|
)
|
|
|
|
// Remote Clusters
|
|
const (
|
|
AuditEventCreateRemoteCluster = "createRemoteCluster" // create connection to remote Mattermost cluster
|
|
AuditEventDeleteRemoteCluster = "deleteRemoteCluster" // delete connection to remote Mattermost cluster
|
|
AuditEventGenerateRemoteClusterInvite = "generateRemoteClusterInvite" // generate invitation token for remote cluster connection
|
|
AuditEventInviteRemoteClusterToChannel = "inviteRemoteClusterToChannel" // invite remote cluster users to shared channel
|
|
AuditEventPatchRemoteCluster = "patchRemoteCluster" // update remote cluster connection settings
|
|
AuditEventRemoteClusterAcceptInvite = "remoteClusterAcceptInvite" // accept invitation from remote cluster
|
|
AuditEventRemoteClusterAcceptMessage = "remoteClusterAcceptMessage" // accept message from remote cluster
|
|
AuditEventRemoteUploadProfileImage = "remoteUploadProfileImage" // upload profile image from remote cluster
|
|
AuditEventUninviteRemoteClusterToChannel = "uninviteRemoteClusterToChannel" // remove remote cluster access from shared channel
|
|
AuditEventUploadRemoteData = "uploadRemoteData" // upload data to remote cluster
|
|
)
|
|
|
|
// Roles
|
|
const (
|
|
AuditEventPatchRole = "patchRole" // update role permissions
|
|
)
|
|
|
|
// SAML
|
|
const (
|
|
AuditEventAddSamlIdpCertificate = "addSamlIdpCertificate" // add SAML identity provider certificate
|
|
AuditEventAddSamlPrivateCertificate = "addSamlPrivateCertificate" // add SAML private certificate
|
|
AuditEventAddSamlPublicCertificate = "addSamlPublicCertificate" // add SAML public certificate
|
|
AuditEventCompleteSaml = "completeSaml" // complete SAML authentication flow
|
|
AuditEventRemoveSamlIdpCertificate = "removeSamlIdpCertificate" // remove SAML identity provider certificate
|
|
AuditEventRemoveSamlPrivateCertificate = "removeSamlPrivateCertificate" // remove SAML private certificate
|
|
AuditEventRemoveSamlPublicCertificate = "removeSamlPublicCertificate" // remove SAML public certificate
|
|
)
|
|
|
|
// Scheduled Posts
|
|
const (
|
|
AuditEventCreateSchedulePost = "createSchedulePost" // create post scheduled for future delivery
|
|
AuditEventDeleteScheduledPost = "deleteScheduledPost" // delete scheduled post before delivery
|
|
AuditEventUpdateScheduledPost = "updateScheduledPost" // update scheduled post
|
|
)
|
|
|
|
// Schemes
|
|
const (
|
|
AuditEventCreateScheme = "createScheme" // create permission scheme with role definitions
|
|
AuditEventDeleteScheme = "deleteScheme" // delete scheme
|
|
AuditEventPatchScheme = "patchScheme" // update scheme
|
|
)
|
|
|
|
// Search Indexes
|
|
const (
|
|
AuditEventPurgeBleveIndexes = "purgeBleveIndexes" // purge Bleve search indexes
|
|
AuditEventPurgeElasticsearchIndexes = "purgeElasticsearchIndexes" // purge Elasticsearch search indexes
|
|
)
|
|
|
|
// Server Administration
|
|
const (
|
|
AuditEventClearServerBusy = "clearServerBusy" // clear server busy status to allow normal operations
|
|
AuditEventCompleteOnboarding = "completeOnboarding" // complete system onboarding process
|
|
AuditEventDatabaseRecycle = "databaseRecycle" // closes active connections
|
|
AuditEventDownloadLogs = "downloadLogs" // download server log files
|
|
AuditEventGenerateSupportPacket = "generateSupportPacket" // generate support packet with server diagnostics and logs
|
|
AuditEventGetAppliedSchemaMigrations = "getAppliedSchemaMigrations" // get list of applied database schema migrations
|
|
AuditEventGetLogs = "getLogs" // get server log entries
|
|
AuditEventGetOnboarding = "getOnboarding" // get system onboarding status
|
|
AuditEventInvalidateCaches = "invalidateCaches" // clear server caches
|
|
AuditEventLocalCheckIntegrity = "localCheckIntegrity" // check database integrity locally
|
|
AuditEventQueryLogs = "queryLogs" // search server log entries
|
|
AuditEventRestartServer = "restartServer" // restart Mattermost server process
|
|
AuditEventSetServerBusy = "setServerBusy" // set server busy status to disallow any operations
|
|
AuditEventUpdateViewedProductNotices = "updateViewedProductNotices" // update viewed status of product notices
|
|
AuditEventUpgradeToEnterprise = "upgradeToEnterprise" // upgrade server to Enterprise edition
|
|
)
|
|
|
|
// Teams
|
|
const (
|
|
AuditEventAddTeamMember = "addTeamMember" // add member to team
|
|
AuditEventAddTeamMembers = "addTeamMembers" // add multiple members to team
|
|
AuditEventAddUserToTeamFromInvite = "addUserToTeamFromInvite" // add user to team using invitation link
|
|
AuditEventCreateTeam = "createTeam" // create team
|
|
AuditEventDeleteTeam = "deleteTeam" // delete team
|
|
AuditEventImportTeam = "importTeam" // import team data from external source
|
|
AuditEventInvalidateAllEmailInvites = "invalidateAllEmailInvites" // invalidate all pending email invitations
|
|
AuditEventInviteGuestsToChannels = "inviteGuestsToChannels" // invite guest users to specific channels
|
|
AuditEventInviteUsersToTeam = "inviteUsersToTeam" // invite users to team
|
|
AuditEventLocalCreateTeam = "localCreateTeam" // create team locally
|
|
AuditEventLocalDeleteTeam = "localDeleteTeam" // delete team locally
|
|
AuditEventLocalInviteUsersToTeam = "localInviteUsersToTeam" // invite users to team locally
|
|
AuditEventPatchTeam = "patchTeam" // update team properties
|
|
AuditEventRegenerateTeamInviteId = "regenerateTeamInviteId" // regenerate team invitation ID
|
|
AuditEventRemoveTeamIcon = "removeTeamIcon" // remove custom icon from team
|
|
AuditEventRemoveTeamMember = "removeTeamMember" // remove member from team
|
|
AuditEventRestoreTeam = "restoreTeam" // restore previously deleted team
|
|
AuditEventSetTeamIcon = "setTeamIcon" // set custom icon for team
|
|
AuditEventUpdateTeam = "updateTeam" // update team properties
|
|
AuditEventUpdateTeamMemberRoles = "updateTeamMemberRoles" // update roles of team members
|
|
AuditEventUpdateTeamMemberSchemeRoles = "updateTeamMemberSchemeRoles" // update scheme-based roles of team members
|
|
AuditEventUpdateTeamPrivacy = "updateTeamPrivacy" // change team privacy settings
|
|
AuditEventUpdateTeamScheme = "updateTeamScheme" // update scheme applied to team
|
|
)
|
|
|
|
// Terms of Service
|
|
const (
|
|
AuditEventCreateTermsOfService = "createTermsOfService" // create terms of service
|
|
AuditEventSaveUserTermsOfService = "saveUserTermsOfService" // save user acceptance of terms of service
|
|
)
|
|
|
|
// Threads
|
|
const (
|
|
AuditEventFollowThreadByUser = "followThreadByUser" // follow thread to receive notifications about replies
|
|
AuditEventSetUnreadThreadByPostId = "setUnreadThreadByPostId" // mark thread as unread for user by post ID
|
|
AuditEventUnfollowThreadByUser = "unfollowThreadByUser" // unfollow thread to stop receiving notifications about replies
|
|
AuditEventUpdateReadStateAllThreadsByUser = "updateReadStateAllThreadsByUser" // update read status for all threads for user
|
|
AuditEventUpdateReadStateThreadByUser = "updateReadStateThreadByUser" // update read status for specific thread for user
|
|
)
|
|
|
|
// Uploads
|
|
const (
|
|
AuditEventCreateUpload = "createUpload" // create file upload session
|
|
AuditEventUploadData = "uploadData" // upload file data to server storage
|
|
)
|
|
|
|
// Users
|
|
const (
|
|
AuditEventAttachDeviceId = "attachDeviceId" // attach device ID to user session for mobile app
|
|
AuditEventCreateUser = "createUser" // create user account
|
|
AuditEventCreateUserAccessToken = "createUserAccessToken" // create personal access token for user API access
|
|
AuditEventDeleteUser = "deleteUser" // delete user account
|
|
AuditEventDemoteUserToGuest = "demoteUserToGuest" // demote regular user to guest account with limited permissions
|
|
AuditEventDisableUserAccessToken = "disableUserAccessToken" // disable user personal access token
|
|
AuditEventEnableUserAccessToken = "enableUserAccessToken" // enable user personal access token
|
|
AuditEventExtendSessionExpiry = "extendSessionExpiry" // extend user session expiration time
|
|
AuditEventLocalDeleteUser = "localDeleteUser" // delete user locally
|
|
AuditEventLocalPermanentDeleteAllUsers = "localPermanentDeleteAllUsers" // permanently delete all users locally
|
|
AuditEventLogin = "login" // user login to system
|
|
AuditEventLoginWithDesktopToken = "loginWithDesktopToken" // user login to system with desktop token
|
|
AuditEventLogout = "logout" // user logout from system
|
|
AuditEventMigrateAuthToLdap = "migrateAuthToLdap" // migrate user authentication method to LDAP
|
|
AuditEventMigrateAuthToSaml = "migrateAuthToSaml" // migrate user authentication method to SAML
|
|
AuditEventPatchUser = "patchUser" // update user properties
|
|
AuditEventPromoteGuestToUser = "promoteGuestToUser" // promote guest account to regular user
|
|
AuditEventResetPassword = "resetPassword" // reset user password
|
|
AuditEventResetPasswordFailedAttempts = "resetPasswordFailedAttempts" // reset failed password attempt counter
|
|
AuditEventRevokeAllSessionsAllUsers = "revokeAllSessionsAllUsers" // revoke all active sessions for all users
|
|
AuditEventRevokeAllSessionsForUser = "revokeAllSessionsForUser" // revoke all active sessions for specific user
|
|
AuditEventRevokeSession = "revokeSession" // revoke specific user session
|
|
AuditEventRevokeUserAccessToken = "revokeUserAccessToken" // revoke user personal access token
|
|
AuditEventSendPasswordReset = "sendPasswordReset" // send password reset email to user
|
|
AuditEventSendVerificationEmail = "sendVerificationEmail" // send email verification link to user
|
|
AuditEventSetDefaultProfileImage = "setDefaultProfileImage" // set user profile image to default avatar
|
|
AuditEventSetProfileImage = "setProfileImage" // set custom profile image for user
|
|
AuditEventSwitchAccountType = "switchAccountType" // switch user authentication method from one to another
|
|
AuditEventUpdatePassword = "updatePassword" // update user password
|
|
AuditEventUpdateUser = "updateUser" // update user account properties
|
|
AuditEventUpdateUserActive = "updateUserActive" // update user active status
|
|
AuditEventUpdateUserAuth = "updateUserAuth" // update user authentication method
|
|
AuditEventUpdateUserMfa = "updateUserMfa" // update user multi-factor authentication settings
|
|
AuditEventUpdateUserRoles = "updateUserRoles" // update user roles
|
|
AuditEventVerifyUserEmail = "verifyUserEmail" // verify user email address using verification token
|
|
AuditEventVerifyUserEmailWithoutToken = "verifyUserEmailWithoutToken" // verify user email address without verification token
|
|
)
|
|
|
|
// Webhooks
|
|
const (
|
|
AuditEventCreateIncomingHook = "createIncomingHook" // create incoming webhook
|
|
AuditEventCreateOutgoingHook = "createOutgoingHook" // create outgoing webhook
|
|
AuditEventDeleteIncomingHook = "deleteIncomingHook" // delete incoming webhook
|
|
AuditEventDeleteOutgoingHook = "deleteOutgoingHook" // delete outgoing webhook
|
|
AuditEventGetIncomingHook = "getIncomingHook" // get incoming webhook details
|
|
AuditEventGetOutgoingHook = "getOutgoingHook" // get outgoing webhook details
|
|
AuditEventLocalCreateIncomingHook = "localCreateIncomingHook" // create incoming webhook locally
|
|
AuditEventRegenOutgoingHookToken = "regenOutgoingHookToken" // regenerate authentication token
|
|
AuditEventUpdateIncomingHook = "updateIncomingHook" // update incoming webhook
|
|
AuditEventUpdateOutgoingHook = "updateOutgoingHook" // update outgoing webhook
|
|
)
|
|
|
|
// Content Flagging
|
|
const (
|
|
AuditEventFlagPost = "flagPost" // flag post for review
|
|
AuditEventGetFlaggedPost = "getFlaggedPost" // get flagged post details
|
|
AuditEventPermanentlyRemoveFlaggedPost = "permanentlyRemoveFlaggedPost" // permanently remove flagged post
|
|
AuditEventKeepFlaggedPost = "keepFlaggedPost" // keep flagged post
|
|
AuditEventUpdateContentFlaggingConfig = "updateContentFlaggingConfig" // update content flagging configuration
|
|
AuditEventSetReviewer = "setFlaggedPostReviewer" // assign reviewer for flagged post
|
|
)
|