rolehelper

var (
	// DefaultUserRoles contains all the default user categories and roles.
	DefaultUserRoles = []*gaia.UserRoleCategory{
		{
			Name:        "Pipeline",
			Description: "Managing and initiating pipelines.",
			Roles: []*gaia.UserRole{
				{
					Name: "Create",
					APIEndpoint: []*gaia.UserRoleEndpoint{
						NewUserRoleEndpoint("POST", "/api/v1/pipeline"),
						NewUserRoleEndpoint("POST", "/api/v1/pipeline/gitlsremote"),
						NewUserRoleEndpoint("GET", "/api/v1/pipeline/name"),
						NewUserRoleEndpoint("POST", "/api/v1/pipeline/githook"),
					},
					Description: "Create new pipelines.",
				},
				{
					Name: "List",
					APIEndpoint: []*gaia.UserRoleEndpoint{
						NewUserRoleEndpoint("GET", "/api/v1/pipeline/created"),
						NewUserRoleEndpoint("GET", "/api/v1/pipeline"),
						NewUserRoleEndpoint("GET", "/api/v1/pipeline/latest"),
					},
					Description: "List created pipelines.",
				},
				{
					Name: "Get",
					APIEndpoint: []*gaia.UserRoleEndpoint{
						NewUserRoleEndpoint("GET", "/api/v1/pipeline/:pipelineid"),
					},
					Description: "Get created pipelines.",
				},
				{
					Name: "Update",
					APIEndpoint: []*gaia.UserRoleEndpoint{
						NewUserRoleEndpoint("PUT", "/api/v1/pipeline/:pipelineid"),
					},
					Description: "Update created pipelines.",
				},
				{
					Name: "Delete",
					APIEndpoint: []*gaia.UserRoleEndpoint{
						NewUserRoleEndpoint("DELETE", "/api/v1/pipeline/:pipelineid"),
					},
					Description: "Delete created pipelines.",
				},
				{
					Name: "Start",
					APIEndpoint: []*gaia.UserRoleEndpoint{
						NewUserRoleEndpoint("POST", "/api/v1/pipeline/:pipelineid/start"),
					},
					Description: "Start created pipelines.",
				},
			},
		},
		{
			Name:        "PipelineRun",
			Description: "Managing of pipeline runs.",
			Roles: []*gaia.UserRole{
				{
					Name: "Stop",
					APIEndpoint: []*gaia.UserRoleEndpoint{
						NewUserRoleEndpoint("POST", "/api/v1/pipelinerun/:pipelineid/:runid/stop"),
					},
					Description: "Stop running pipelines.",
				},
				{
					Name: "Get",
					APIEndpoint: []*gaia.UserRoleEndpoint{
						NewUserRoleEndpoint("GET", "/api/v1/pipelinerun/:pipelineid/:runid"),
						NewUserRoleEndpoint("GET", "/api/v1/pipelinerun/:pipelineid/latest"),
					},
					Description: "Get pipeline runs.",
				},
				{
					Name: "List",
					APIEndpoint: []*gaia.UserRoleEndpoint{
						NewUserRoleEndpoint("GET", "pipelinerun/:pipelineid"),
					},
					Description: "List pipeline runs.",
				},
				{
					Name: "Logs",
					APIEndpoint: []*gaia.UserRoleEndpoint{
						NewUserRoleEndpoint("GET", "/api/v1/pipelinerun/:pipelineid/:runid/latest"),
					},
					Description: "Get logs for pipeline runs.",
				},
			},
		},
		{
			Name:        "Secret",
			Description: "Managing of stored secrets used within pipelines.",
			Roles: []*gaia.UserRole{
				{
					Name: "List",
					APIEndpoint: []*gaia.UserRoleEndpoint{
						NewUserRoleEndpoint("GET", "/api/v1/secrets"),
					},
					Description: "List created secrets.",
				},
				{
					Name: "Delete",
					APIEndpoint: []*gaia.UserRoleEndpoint{
						NewUserRoleEndpoint("DELETE", "/api/v1/secret/:key"),
					},
					Description: "Delete created secrets.",
				},
				{
					Name: "Create",
					APIEndpoint: []*gaia.UserRoleEndpoint{
						NewUserRoleEndpoint("POST", "/api/v1/secret"),
					},
					Description: "Create new secrets.",
				},
				{
					Name: "Update",
					APIEndpoint: []*gaia.UserRoleEndpoint{
						NewUserRoleEndpoint("PUT", "/api/v1/secret/update"),
					},
					Description: "Update created secrets.",
				},
			},
		},
		{
			Name:        "User",
			Description: "Managing of users.",
			Roles: []*gaia.UserRole{
				{
					Name: "Create",
					APIEndpoint: []*gaia.UserRoleEndpoint{
						NewUserRoleEndpoint("POST", "/api/v1/user"),
					},
					Description: "Create new users.",
				},
				{
					Name: "List",
					APIEndpoint: []*gaia.UserRoleEndpoint{
						NewUserRoleEndpoint("GET", "/api/v1/users"),
					},
					Description: "List created users.",
				},
				{
					Name: "ChangePassword",
					APIEndpoint: []*gaia.UserRoleEndpoint{
						NewUserRoleEndpoint("POST", "/api/v1/user/password"),
					},
					Description: "Change created users passwords.",
				},
				{
					Name: "Delete",
					APIEndpoint: []*gaia.UserRoleEndpoint{
						NewUserRoleEndpoint("DELETE", "/api/v1/user/:username"),
					},
					Description: "Delete created users.",
				},
			},
		},
		{
			Name:        "UserPermission",
			Description: "Managing of user permissions.",
			Roles: []*gaia.UserRole{
				{
					Name: "Get",
					APIEndpoint: []*gaia.UserRoleEndpoint{
						NewUserRoleEndpoint("GET", "/api/v1/user/:username/permissions"),
					},
					Description: "Get created users permissions.",
				},
				{
					Name: "Update",
					APIEndpoint: []*gaia.UserRoleEndpoint{
						NewUserRoleEndpoint("PUT", "/api/v1/user/:username/permissions"),
					},
					Description: "Update created users permissions.",
				},
			},
		},
		{
			Name:        "Worker",
			Description: "Managing of worker permissions.",
			Roles: []*gaia.UserRole{
				{
					Name: "GetRegistrationSecret",
					APIEndpoint: []*gaia.UserRoleEndpoint{
						NewUserRoleEndpoint("GET", "/api/v1/worker/secret"),
					},
					Description: "Get global worker registration secret.",
				},
				{
					Name: "GetOverview",
					APIEndpoint: []*gaia.UserRoleEndpoint{
						NewUserRoleEndpoint("GET", "/api/v1/worker/status"),
					},
					Description: "Get status overview of all workers.",
				},
				{
					Name: "GetWorker",
					APIEndpoint: []*gaia.UserRoleEndpoint{
						NewUserRoleEndpoint("GET", "/api/v1/worker"),
					},
					Description: "Get all worker for the worker overview table.",
				},
				{
					Name: "DeregisterWorker",
					APIEndpoint: []*gaia.UserRoleEndpoint{
						NewUserRoleEndpoint("DELETE", "/api/v1/worker/:workerid"),
					},
					Description: "Deregister a worker from the Gaia primary instance.",
				},
				{
					Name: "ResetWorkerRegisterSecret",
					APIEndpoint: []*gaia.UserRoleEndpoint{
						NewUserRoleEndpoint("POST", "/api/v1/worker/secret"),
					},
					Description: "Reset the global worker registration secret.",
				},
			},
		},
	}
)