utils

const (
	// All
	AdminConfigAll AdminConfigActions = "adminconfig:*"
	// Read a config row
	AdminConfigGet AdminConfigActions = "adminconfig:get"
	// Write a config row
	AdminConfigSet AdminConfigActions = "adminconfig:set"
)

const (
	GroupPrimaryAccess   GroupAccessType = "primary"
	GroupSecondaryAccess GroupAccessType = "secondary"
	GroupSubEntityAccess GroupAccessType = "subentity"
)

const (
	// All
	GroupAll GroupActions = "group:*"
	// Create a Group
	GroupCreate GroupActions = "group:create"
	// Create a SubGroup within a Group
	GroupCreateSubGroup GroupActions = "group:createsubgroup"
	// List or Get a Group
	GroupGet GroupActions = "group:get"
	// List or Get a SubEntity within a Group
	GroupListSubEntities GroupActions = "group:listsubentities"
	// Add/Remove a Node to/from a Group
	GroupEditNodes GroupActions = "group:editnodes"
	// Update a Group (e.g., rename, services)
	GroupUpdate GroupActions = "group:update"
	// Update a SubGroup (e.g., rename)
	GroupUpdateSubGroup GroupActions = "group:updatesubgroup"
	// Enable/Update capabilities on a Group (e.g., convert to a Matter fabric)
	GroupUpdateCapabilities GroupActions = "group:updatecapabilities"
	// Delete a Group
	GroupDelete GroupActions = "group:delete"
	// Delete a SubGroup
	GroupDeleteSubGroup GroupActions = "group:deletesubgroup"
	// Share a Group with a User
	GroupShare GroupActions = "group:share"
	// List Users who have access to a Group
	GroupListUsers GroupActions = "group:listusers"
	// List Users who have primary access to a Group
	GroupListPrimaryUsers GroupActions = "group:listprimaryusers"
	// Automation-specific permissions
	GroupGetAutomation    GroupActions = "group:getautomation"
	GroupEditAutomation   GroupActions = "group:editautomation"
	GroupDeleteAutomation GroupActions = "group:deleteautomation"
)

const (
	// All
	NodeAll NodeActions = "node:*"
	// Get a Node
	NodeGet NodeActions = "node:get"
	// Node update (except config and sadow)
	NodeUpdate NodeActions = "node:update"
	// Delete a Node Config
	NodeDeleteConfig NodeActions = "node:deleteconfig"
	// Put a Node Config
	NodePutConfig NodeActions = "node:putconfig"
	// Add a Node to a Group
	NodeEditGroups NodeActions = "node:editgroups"
	// Write to the reported shadow of a Node
	NodeWriteShadow NodeActions = "node:writeshadow"
	// Read from the shadow of a Node
	NodeReadShadow NodeActions = "node:readshadow"
	// Publish to Device's topics
	NodePublishToDevice NodeActions = "node:publishtodevice"
)

const (
	// All
	NodeAdminAll NodeAdminActions = "nodeadmin:*"
	// Add a Node
	NodeAdminAdd NodeAdminActions = "nodeadmin:add"
	// Node regsiter status
	NodeAdminRegisterStatus NodeAdminActions = "nodeadmin:registerstatus"
	// Create a node-ID reservation for a claim key.
	// Resource is the reservation's mac_addr.
	NodeAdminReserveID NodeAdminActions = "nodeadmin:reserveid"
	// Read a single node-ID reservation, keyed by its device.
	// Resource is the reservation's mac_addr.
	NodeAdminGetReservation NodeAdminActions = "nodeadmin:getreservation"
	// Count a claimant's node-ID reservations for quota enforcement. This is a
	// claimant-scoped operation spanning all of the claimant's devices, so the
	// resource is the claimant_id — not a mac_addr, unlike the two above.
	NodeAdminCountReservations NodeAdminActions = "nodeadmin:countreservations"
)