mirror of
https://github.com/warmbly/warmbly.git
synced 2026-10-15 08:02:42 +00:00
161 lines
13 KiB
Go
161 lines
13 KiB
Go
package main
|
|
|
|
// Inventory from internal/api/routes.go; the parity regression guards new routes.
|
|
var remoteAdminRoutes = []remoteAdminRoute{
|
|
{"POST", "/admin/auth/device/describe", []string{}, false, "Device consent belongs in the MFA-protected browser flow"},
|
|
{"GET", "/admin/fleet/nodes/:id/logs", []string{"ViewWorkers"}, false, ""},
|
|
{"GET", "/admin/fleet/nodes/:id/broker", []string{"ViewWorkers", "ViewAnalytics"}, false, ""},
|
|
{"POST", "/admin/auth/device/decide", []string{}, true, "Device consent belongs in the MFA-protected browser flow"},
|
|
{"GET", "/admin/mail/status", []string{"ManageSettings"}, false, ""},
|
|
{"POST", "/admin/mail/test", []string{"ManageSettings"}, false, ""},
|
|
{"GET", "/admin/settings/backends", []string{"ManageSettings"}, false, ""},
|
|
{"GET", "/admin/settings/backends/active/:kind", []string{"ManageSettings"}, false, ""},
|
|
{"POST", "/admin/settings/backends/:id/activate", []string{"ManageSettings"}, false, ""},
|
|
{"GET", "/admin/users", []string{"ViewUsers"}, false, ""},
|
|
{"GET", "/admin/users/:id", []string{"ViewUsers"}, false, ""},
|
|
{"GET", "/admin/users/:id/preview", []string{"ViewUsers"}, false, ""},
|
|
{"GET", "/admin/testers", []string{"ViewUsers"}, false, ""},
|
|
{"POST", "/admin/testers", []string{"ManageTesters"}, false, "Credential issuance is intentionally not exposed through diagnostic output"},
|
|
{"POST", "/admin/organizations/:id/sample-data", []string{"ManageTesters"}, false, ""},
|
|
{"DELETE", "/admin/testers/:id", []string{"ManageTesters"}, false, ""},
|
|
{"POST", "/admin/users/:id/ban", []string{"BanUsers"}, false, ""},
|
|
{"POST", "/admin/users/:id/unban", []string{"BanUsers"}, false, ""},
|
|
{"GET", "/admin/users/:id/bans", []string{"ViewUsers"}, false, ""},
|
|
{"GET", "/admin/users/:id/campaigns", []string{"ViewCampaigns"}, false, ""},
|
|
{"GET", "/admin/users/:id/emails", []string{"ViewUsers"}, false, ""},
|
|
{"GET", "/admin/users/:id/rate-limits", []string{"ManageRateLimits"}, false, ""},
|
|
{"PATCH", "/admin/users/:id/rate-limits", []string{"ManageRateLimits"}, false, ""},
|
|
{"GET", "/admin/organizations", []string{"ViewOrganizations"}, false, ""},
|
|
{"GET", "/admin/organizations/:id", []string{"ViewOrganizations"}, false, ""},
|
|
{"GET", "/admin/organizations/:id/members", []string{"ViewOrganizations"}, false, ""},
|
|
{"GET", "/admin/organizations/:id/roles", []string{"ViewOrganizations"}, false, ""},
|
|
{"GET", "/admin/organizations/:id/overrides", []string{"ViewOrganizations"}, false, ""},
|
|
{"PUT", "/admin/organizations/:id/overrides", []string{"ManageOrganizations"}, false, ""},
|
|
{"GET", "/admin/plans", []string{"ViewOrganizations"}, false, ""},
|
|
{"GET", "/admin/organizations/:id/managed-plan", []string{"ViewOrganizations"}, false, ""},
|
|
{"PUT", "/admin/organizations/:id/managed-plan", []string{"ManageOrganizations"}, false, ""},
|
|
{"DELETE", "/admin/organizations/:id/managed-plan", []string{"ManageOrganizations"}, false, ""},
|
|
{"GET", "/admin/discounts", []string{"ViewOrganizations"}, false, ""},
|
|
{"POST", "/admin/discounts", []string{"ManageOrganizations"}, false, ""},
|
|
{"GET", "/admin/discounts/:id", []string{"ViewOrganizations"}, false, ""},
|
|
{"PATCH", "/admin/discounts/:id", []string{"ManageOrganizations"}, false, ""},
|
|
{"DELETE", "/admin/discounts/:id", []string{"ManageOrganizations"}, false, ""},
|
|
{"GET", "/admin/discounts/:id/redemptions", []string{"ViewOrganizations"}, false, ""},
|
|
{"GET", "/admin/organizations/:id/risk", []string{"ViewOrganizations"}, false, ""},
|
|
{"PUT", "/admin/organizations/:id/risk", []string{"ManageOrganizations"}, false, ""},
|
|
{"DELETE", "/admin/organizations/:id/risk", []string{"ManageOrganizations"}, false, ""},
|
|
{"DELETE", "/admin/organizations/:id/risk/signals/:key", []string{"ManageOrganizations"}, false, ""},
|
|
{"GET", "/admin/limit-requests", []string{"ViewOrganizations"}, false, ""},
|
|
{"POST", "/admin/limit-requests/:id/approve", []string{"ManageOrganizations"}, false, ""},
|
|
{"POST", "/admin/limit-requests/:id/reject", []string{"ManageOrganizations"}, false, ""},
|
|
{"GET", "/admin/app-listings", []string{"ViewOrganizations"}, false, ""},
|
|
{"PUT", "/admin/app-listings/:id/status", []string{"ManageOrganizations"}, false, ""},
|
|
{"GET", "/admin/oauth-apps", []string{"ViewOrganizations"}, false, ""},
|
|
{"POST", "/admin/oauth-apps/:id/suspend", []string{"ManageOrganizations"}, false, ""},
|
|
{"POST", "/admin/oauth-apps/:id/unsuspend", []string{"ManageOrganizations"}, false, ""},
|
|
{"POST", "/admin/oauth-apps/:id/revoke-grants", []string{"ManageOrganizations"}, false, ""},
|
|
{"POST", "/admin/oauth-apps/:id/remove-logo", []string{"ManageOrganizations"}, false, ""},
|
|
{"GET", "/admin/oauth-developer-blocks", []string{"ViewOrganizations"}, false, ""},
|
|
{"POST", "/admin/oauth-developer-blocks", []string{"ManageOrganizations"}, false, ""},
|
|
{"DELETE", "/admin/oauth-developer-blocks/:id", []string{"ManageOrganizations"}, false, ""},
|
|
{"POST", "/admin/outreach", []string{"ManageOrganizations"}, false, ""},
|
|
{"GET", "/admin/outreach", []string{"ViewOrganizations"}, false, ""},
|
|
{"GET", "/admin/workers", []string{"ViewWorkers"}, false, ""},
|
|
{"GET", "/admin/workers/:id", []string{"ViewWorkers"}, false, ""},
|
|
{"PATCH", "/admin/workers/:id", []string{"ManageWorkers"}, false, ""},
|
|
{"GET", "/admin/workers/:id/emails", []string{"ViewWorkers"}, false, ""},
|
|
{"GET", "/admin/workers/:id/stats", []string{"ViewWorkers"}, false, ""},
|
|
{"POST", "/admin/workers/:id/reassign", []string{"ManageWorkers"}, false, ""},
|
|
{"PUT", "/admin/workers/:id/tags", []string{"ManageWorkers"}, false, ""},
|
|
{"GET", "/admin/warmup/pools", []string{"ViewWarmupPool"}, false, ""},
|
|
{"GET", "/admin/warmup/health", []string{"ViewWarmupPool"}, false, ""},
|
|
{"GET", "/admin/warmup/pools/:type/participants", []string{"ViewWarmupPool"}, false, ""},
|
|
{"GET", "/admin/warmup/blocked", []string{"ViewWarmupPool"}, false, ""},
|
|
{"POST", "/admin/warmup/block/:accountId", []string{"ManageWarmupBans"}, false, ""},
|
|
{"POST", "/admin/warmup/unblock/:accountId", []string{"ManageWarmupBans"}, false, ""},
|
|
{"GET", "/admin/warmup/appeals", []string{"ReviewAppeals"}, false, ""},
|
|
{"GET", "/admin/warmup/appeals/:id", []string{"ReviewAppeals"}, false, ""},
|
|
{"POST", "/admin/warmup/appeals/:id/approve", []string{"ReviewAppeals"}, false, ""},
|
|
{"POST", "/admin/warmup/appeals/:id/reject", []string{"ReviewAppeals"}, false, ""},
|
|
{"GET", "/admin/warmup-content/overview", []string{"ViewWarmupPool"}, false, ""},
|
|
{"PUT", "/admin/warmup-content/settings", []string{"ManageSettings"}, false, ""},
|
|
{"GET", "/admin/warmup-content/conversations", []string{"ViewWarmupPool"}, false, ""},
|
|
{"GET", "/admin/warmup-content/conversations/:id", []string{"ViewWarmupPool"}, false, ""},
|
|
{"POST", "/admin/warmup-content/conversations/:id/archive", []string{"ManageSettings"}, false, ""},
|
|
{"POST", "/admin/warmup-content/conversations/:id/unarchive", []string{"ManageSettings"}, false, ""},
|
|
{"DELETE", "/admin/warmup-content/conversations/:id", []string{"ManageSettings"}, false, ""},
|
|
{"POST", "/admin/warmup-content/jobs/:id/cancel", []string{"ManageSettings"}, false, ""},
|
|
{"GET", "/admin/placement/tests", []string{"ViewWarmupPool"}, false, ""},
|
|
{"GET", "/admin/placement/tests/:id", []string{"ViewWarmupPool"}, false, ""},
|
|
{"POST", "/admin/placement/tests", []string{"ManageWarmupBans"}, false, ""},
|
|
{"GET", "/admin/placement/seeds", []string{"ViewWarmupPool"}, false, ""},
|
|
{"GET", "/admin/placement/seeds/candidates", []string{"ViewWarmupPool"}, false, ""},
|
|
{"POST", "/admin/placement/seeds/:id", []string{"ManageWarmupBans"}, false, ""},
|
|
{"GET", "/admin/warmup-content/jobs", []string{"ViewWarmupPool"}, false, ""},
|
|
{"GET", "/admin/warmup-content/jobs/:id", []string{"ViewWarmupPool"}, false, ""},
|
|
{"GET", "/admin/warmup-content/ab", []string{"ViewAnalytics"}, false, ""},
|
|
{"GET", "/admin/mailboxes", []string{"ViewUsers"}, false, ""},
|
|
{"GET", "/admin/campaigns", []string{"ViewCampaigns"}, false, ""},
|
|
{"GET", "/admin/campaigns/:id", []string{"ViewCampaigns"}, false, ""},
|
|
{"POST", "/admin/campaigns/:id/stop", []string{"StopCampaigns"}, false, ""},
|
|
{"GET", "/admin/system/status", []string{"ViewAnalytics"}, false, ""},
|
|
{"GET", "/admin/instance/config", []string{"ManageSettings"}, false, ""},
|
|
{"GET", "/admin/instance/health", []string{"ViewAnalytics"}, false, ""},
|
|
{"GET", "/admin/instance/monitoring", []string{"ViewAnalytics"}, false, ""},
|
|
{"DELETE", "/admin/instance/invitations/expired", []string{"ManageOrganizations"}, false, ""},
|
|
{"GET", "/admin/instance/limits", []string{"ViewAnalytics"}, false, ""},
|
|
{"GET", "/admin/instance/settings", []string{"ManageSettings"}, false, ""},
|
|
{"PUT", "/admin/instance/settings", []string{"ManageSettings"}, false, ""},
|
|
{"GET", "/admin/instance/notifications/events", []string{"ManageSettings"}, false, ""},
|
|
{"POST", "/admin/instance/notifications/test", []string{"ManageSettings"}, false, ""},
|
|
{"GET", "/admin/instance/update", []string{"ViewAnalytics"}, false, ""},
|
|
{"POST", "/admin/instance/update/check", []string{"ManageSettings"}, false, ""},
|
|
{"POST", "/admin/instance/update/apply", []string{"ManageSettings"}, false, ""},
|
|
{"GET", "/admin/analytics/overview", []string{"ViewAnalytics"}, false, ""},
|
|
{"GET", "/admin/analytics/trends", []string{"ViewAnalytics"}, false, ""},
|
|
{"GET", "/admin/analytics/emails/daily", []string{"ViewAnalytics"}, false, ""},
|
|
{"GET", "/admin/analytics/emails/hourly", []string{"ViewAnalytics"}, false, ""},
|
|
{"GET", "/admin/analytics/users/growth", []string{"ViewAnalytics"}, false, ""},
|
|
{"GET", "/admin/analytics/acquisition", []string{"ViewAnalytics"}, false, ""},
|
|
{"GET", "/admin/sync", []string{"ViewUsers"}, false, ""},
|
|
{"POST", "/admin/sync/:id/clear-throttle", []string{"ManageWorkers"}, false, ""},
|
|
{"POST", "/admin/sync/:id/restart-backfill", []string{"ManageWorkers"}, false, ""},
|
|
{"GET", "/admin/sends/in-flight", []string{"ViewCampaigns"}, false, ""},
|
|
{"GET", "/admin/tasks/dead-letters", []string{"ViewCampaigns"}, false, ""},
|
|
{"POST", "/admin/tasks/dead-letters/:id/replay", []string{"StopCampaigns"}, false, ""},
|
|
{"GET", "/admin/tasks/failures", []string{"ViewCampaigns"}, false, ""},
|
|
{"GET", "/admin/webhooks/health", []string{"ViewOrganizations"}, false, ""},
|
|
{"POST", "/admin/webhooks/reclaim", []string{"ManageOrganizations"}, false, ""},
|
|
{"GET", "/admin/jobs", []string{"ViewAnalytics"}, false, ""},
|
|
{"POST", "/admin/jobs/:name/run", []string{"ManageSettings"}, false, "Arbitrary background job execution is outside the remote diagnostic safety boundary"},
|
|
{"GET", "/admin/fleet/nodes", []string{"ViewWorkers"}, false, ""},
|
|
{"POST", "/admin/fleet/join-token", []string{"ManageWorkers"}, true, "Credential issuance is intentionally not exposed through diagnostic output"},
|
|
{"PATCH", "/admin/fleet/nodes/:id", []string{"ManageWorkers"}, false, ""},
|
|
{"DELETE", "/admin/fleet/nodes/:id", []string{"ManageWorkers"}, false, ""},
|
|
{"GET", "/admin/fleet/release", []string{"ViewWorkers"}, false, ""},
|
|
{"PUT", "/admin/fleet/release", []string{"ManageWorkers"}, false, ""},
|
|
{"GET", "/admin/fleet/capacity", []string{"ViewWorkers"}, false, ""},
|
|
{"GET", "/admin/fleet/decisions", []string{"ViewWorkers"}, false, ""},
|
|
{"GET", "/admin/fleet/dedicated", []string{"ViewWorkers"}, false, ""},
|
|
{"POST", "/admin/fleet/dedicated/:orgId/release", []string{"ManageWorkers"}, false, ""},
|
|
{"POST", "/admin/workers/:id/reserve", []string{"ManageWorkers"}, false, ""},
|
|
{"GET", "/admin/transfers", []string{"ViewOrganizations"}, false, ""},
|
|
{"GET", "/admin/organizations/:id/exports", []string{"ViewOrganizations"}, false, ""},
|
|
{"POST", "/admin/organizations/:id/exports", []string{"ManageOrganizations"}, true, ""},
|
|
{"GET", "/admin/organizations/:id/exports/:exportId", []string{"ViewOrganizations"}, false, ""},
|
|
{"GET", "/admin/organizations/:id/exports/:exportId/download", []string{"ManageOrganizations"}, false, "Binary or multipart transfers use the existing workspace transfer client"},
|
|
{"DELETE", "/admin/organizations/:id/exports/:exportId", []string{"ManageOrganizations"}, false, ""},
|
|
{"GET", "/admin/organizations/:id/imports", []string{"ViewOrganizations"}, false, ""},
|
|
{"POST", "/admin/organizations/:id/imports/preflight", []string{"ManageOrganizations"}, false, "Binary or multipart transfers use the existing workspace transfer client"},
|
|
{"POST", "/admin/organizations/:id/imports", []string{"ManageOrganizations"}, true, "Binary or multipart transfers use the existing workspace transfer client"},
|
|
{"GET", "/admin/organizations/:id/api-keys", []string{"ViewOrganizations"}, false, ""},
|
|
{"DELETE", "/admin/organizations/:id/api-keys/:keyId", []string{"ManageOrganizations"}, false, ""},
|
|
{"GET", "/admin/organizations/:id/webhooks", []string{"ViewOrganizations"}, false, ""},
|
|
{"GET", "/admin/warmup/actions", []string{"ViewWarmupPool"}, false, ""},
|
|
{"GET", "/admin/admins", []string{"GrantAdminAccess"}, false, ""},
|
|
{"POST", "/admin/admins/:userId/grant", []string{"GrantAdminAccess"}, true, ""},
|
|
{"POST", "/admin/admins/:userId/revoke", []string{"GrantAdminAccess"}, false, ""},
|
|
{"GET", "/admin/audit-logs", []string{"ViewAuditLogs"}, false, ""},
|
|
{"GET", "/admin/permissions", []string{}, false, ""},
|
|
}
|