Add rbac resource enums

Emyrk · Emyrk · commit e6970e1908fb · 2023-04-07T14:03:58.000-05:00
diff --git a/coderd/rbac/object.go b/coderd/rbac/object.go
@@ -14,6 +14,12 @@ type Objecter interface {
 // Resources are just typed objects. Making resources this way allows directly
 // passing them into an Authorize function and use the chaining api.
 var (
+	// ResourceWildcard represents all resource types
+	// Try to avoid using this where possible.
+	ResourceWildcard = Object{
+		Type: WildcardSymbol,
+	}
+
 	// ResourceWorkspace CRUD. Org + User owner
 	//	create/delete = make or delete workspaces
 	// 	read = access workspace
diff --git a/codersdk/rbacresources.go b/codersdk/rbacresources.go
@@ -0,0 +1,28 @@
+package codersdk
+
+type RBACResource string
+
+const (
+	ResourceWorkspace                   RBACResource = "workspace"
+	ResourceWorkspaceProxy              RBACResource = "workspace_proxy"
+	ResourceWorkspaceExecution          RBACResource = "workspace_execution"
+	ResourceWorkspaceApplicationConnect RBACResource = "application_connect"
+	ResourceAuditLog                    RBACResource = "audit_log"
+	ResourceTemplate                    RBACResource = "template"
+	ResourceGroup                       RBACResource = "group"
+	ResourceFile                        RBACResource = "file"
+	ResourceProvisionerDaemon           RBACResource = "provisioner_daemon"
+	ResourceOrganization                RBACResource = "organization"
+	ResourceRoleAssignment              RBACResource = "assign_role"
+	ResourceOrgRoleAssignment           RBACResource = "assign_org_role"
+	ResourceAPIKey                      RBACResource = "api_key"
+	ResourceUser                        RBACResource = "user"
+	ResourceUserData                    RBACResource = "user_data"
+	ResourceOrganizationMember          RBACResource = "organization_member"
+	ResourceLicense                     RBACResource = "license"
+	ResourceDeploymentValues            RBACResource = "deployment_config"
+	ResourceDeploymentStats             RBACResource = "deployment_stats"
+	ResourceReplicas                    RBACResource = "replicas"
+	ResourceDebugInfo                   RBACResource = "debug_info"
+	ResourceSystem                      RBACResource = "system"
+)
diff --git a/site/src/api/typesGenerated.ts b/site/src/api/typesGenerated.ts
@@ -379,6 +379,7 @@ export interface DeploymentValues {
   readonly git_auth?: any
   readonly config_ssh?: SSHConfig
   readonly wgtunnel_host?: string
+  readonly disable_owner_workspace_exec?: boolean
   readonly config?: string
   readonly write_config?: boolean
   // Named type "github.com/coder/coder/cli/clibase.HostPort" unknown, using "any"
diff --git a/site/src/pages/DeploySettingsPage/SecuritySettingsPage/SecuritySettingsPageView.tsx b/site/src/pages/DeploySettingsPage/SecuritySettingsPage/SecuritySettingsPageView.tsx
@@ -36,6 +36,7 @@ export const SecuritySettingsPageView = ({
             options,
             "SSH Keygen Algorithm",
             "Secure Auth Cookie",
+            "Disable Owner Workspace Execution"
           )}
         />
       </div>
