admin/its-a-feature-Mythic
1
0
Fork 0
mirror of https://github.com/its-a-feature/Mythic synced 2026-06-08 14:55:38 +00:00
Code Issues Packages Projects Releases Wiki Activity

updated scope tracking

Browse Source
This commit is contained in:
its-a-feature
2026-04-30 18:58:26 -05:00
parent 6d1f6468a2
commit 40abc91f46
40 changed files with 383 additions and 373 deletions
Download Patch File Download Diff File Expand all files Collapse all files
hasura-docker/metadata/databases/default/tables/public_apitokens.yaml
+8 -8
View File
@@ -162,7 +162,7 @@ select_permissions:
account_type:
_eq: bot
- operator_id:
_in: X-Hasura-Scope-apitoken-read-users
_lte: X-Hasura-Scope-apitoken-read-operator
- role: operation_admin
permission:
columns:
@@ -188,7 +188,7 @@ select_permissions:
- operator_id:
_eq: X-Hasura-User-Id
- operator_id:
_in: X-Hasura-Scope-apitoken-read-users
_lte: X-Hasura-Scope-apitoken-read-operator
- role: operator
permission:
columns:
@@ -214,7 +214,7 @@ select_permissions:
- operator_id:
_eq: X-Hasura-User-Id
- operator_id:
_in: X-Hasura-Scope-apitoken-read-users
_lte: X-Hasura-Scope-apitoken-read-operator
- role: spectator
permission:
columns:
@@ -240,7 +240,7 @@ select_permissions:
- operator_id:
_eq: X-Hasura-User-Id
- operator_id:
_in: X-Hasura-Scope-apitoken-read-users
_lte: X-Hasura-Scope-apitoken-read-operator
update_permissions:
- role: mythic_admin
permission:
@@ -259,7 +259,7 @@ update_permissions:
account_type:
_eq: bot
- operator_id:
_in: X-Hasura-Scope-apitoken-write-users
_lte: X-Hasura-Scope-apitoken-write-operator
check: null
- role: operation_admin
permission:
@@ -275,7 +275,7 @@ update_permissions:
- operator_id:
_eq: X-Hasura-User-Id
- operator_id:
_in: X-Hasura-Scope-apitoken-write-users
_lte: X-Hasura-Scope-apitoken-write-operator
check: null
- role: operator
permission:
@@ -291,7 +291,7 @@ update_permissions:
- operator_id:
_eq: X-Hasura-User-Id
- operator_id:
_in: X-Hasura-Scope-apitoken-write-users
_lte: X-Hasura-Scope-apitoken-write-operator
check: null
- role: spectator
permission:
@@ -307,5 +307,5 @@ update_permissions:
- operator_id:
_eq: X-Hasura-User-Id
- operator_id:
_in: X-Hasura-Scope-apitoken-write-users
_lte: X-Hasura-Scope-apitoken-write-operator
check: null
hasura-docker/metadata/databases/default/tables/public_attacktask.yaml
+7 -7
View File
@@ -24,7 +24,7 @@ select_permissions:
- task:
callback:
operation_id:
_in: X-Hasura-Scope-task-read-operations
_lte: X-Hasura-Scope-task-read-operation
- role: operation_admin
permission:
columns:
@@ -40,7 +40,7 @@ select_permissions:
- task:
callback:
operation_id:
_in: X-Hasura-Scope-task-read-operations
_lte: X-Hasura-Scope-task-read-operation
- role: operator
permission:
columns:
@@ -56,7 +56,7 @@ select_permissions:
- task:
callback:
operation_id:
_in: X-Hasura-Scope-task-read-operations
_lte: X-Hasura-Scope-task-read-operation
- role: spectator
permission:
columns:
@@ -72,7 +72,7 @@ select_permissions:
- task:
callback:
operation_id:
_in: X-Hasura-Scope-task-read-operations
_lte: X-Hasura-Scope-task-read-operation
delete_permissions:
- role: mythic_admin
permission:
@@ -85,7 +85,7 @@ delete_permissions:
- task:
callback:
operation_id:
_in: X-Hasura-Scope-task-write-operations
_lte: X-Hasura-Scope-task-write-operation
- role: operation_admin
permission:
filter:
@@ -97,7 +97,7 @@ delete_permissions:
- task:
callback:
operation_id:
_in: X-Hasura-Scope-task-write-operations
_lte: X-Hasura-Scope-task-write-operation
- role: operator
permission:
filter:
@@ -109,4 +109,4 @@ delete_permissions:
- task:
callback:
operation_id:
_in: X-Hasura-Scope-task-write-operations
_lte: X-Hasura-Scope-task-write-operation
hasura-docker/metadata/databases/default/tables/public_browserscript.yaml
+22 -54
View File
@@ -80,18 +80,10 @@ select_permissions:
- user_modified
filter:
_and:
- _or:
- operator_id:
_eq: X-Hasura-User-Id
- browserscriptoperations:
operation_id:
_in: X-Hasura-operations
- _or:
- operator_id:
_eq: X-Hasura-User-Id
- browserscriptoperations:
operation_id:
_in: X-Hasura-Scope-operation-read-operations
- operator_id:
_eq: X-Hasura-User-Id
- operator_id:
_lte: X-Hasura-Scope-operator-read-operator
- role: operation_admin
permission:
columns:
@@ -109,18 +101,10 @@ select_permissions:
- user_modified
filter:
_and:
- _or:
- operator_id:
_eq: X-Hasura-User-Id
- browserscriptoperations:
operation_id:
_in: X-Hasura-operations
- _or:
- operator_id:
_eq: X-Hasura-User-Id
- browserscriptoperations:
operation_id:
_in: X-Hasura-Scope-operation-read-operations
- operator_id:
_eq: X-Hasura-User-Id
- operator_id:
_lte: X-Hasura-Scope-operator-read-operator
- role: operator
permission:
columns:
@@ -138,18 +122,10 @@ select_permissions:
- user_modified
filter:
_and:
- _or:
- operator_id:
_eq: X-Hasura-User-Id
- browserscriptoperations:
operation_id:
_in: X-Hasura-operations
- _or:
- operator_id:
_eq: X-Hasura-User-Id
- browserscriptoperations:
operation_id:
_in: X-Hasura-Scope-operation-read-operations
- operator_id:
_eq: X-Hasura-User-Id
- operator_id:
_lte: X-Hasura-Scope-operator-read-operator
- role: spectator
permission:
columns:
@@ -167,18 +143,10 @@ select_permissions:
- user_modified
filter:
_and:
- _or:
- operator_id:
_eq: X-Hasura-User-Id
- browserscriptoperations:
operation_id:
_in: X-Hasura-operations
- _or:
- operator_id:
_eq: X-Hasura-User-Id
- browserscriptoperations:
operation_id:
_in: X-Hasura-Scope-operation-read-operations
- operator_id:
_eq: X-Hasura-User-Id
- operator_id:
_lte: X-Hasura-Scope-operator-read-operator
update_permissions:
- role: mythic_admin
permission:
@@ -194,7 +162,7 @@ update_permissions:
- operator_id:
_eq: X-Hasura-User-Id
- operator_id:
_in: X-Hasura-Scope-operation-write-users
_lte: X-Hasura-Scope-operator-write-operator
check: null
- role: operation_admin
permission:
@@ -210,7 +178,7 @@ update_permissions:
- operator_id:
_eq: X-Hasura-User-Id
- operator_id:
_in: X-Hasura-Scope-operation-write-users
_lte: X-Hasura-Scope-operator-write-operator
check: null
- role: operator
permission:
@@ -226,7 +194,7 @@ update_permissions:
- operator_id:
_eq: X-Hasura-User-Id
- operator_id:
_in: X-Hasura-Scope-operation-write-users
_lte: X-Hasura-Scope-operator-write-operator
check: null
delete_permissions:
- role: mythic_admin
@@ -236,7 +204,7 @@ delete_permissions:
- operator_id:
_eq: X-Hasura-User-Id
- operator_id:
_in: X-Hasura-Scope-operation-write-users
_lte: X-Hasura-Scope-operator-write-operator
- role: operation_admin
permission:
filter:
@@ -244,7 +212,7 @@ delete_permissions:
- operator_id:
_eq: X-Hasura-User-Id
- operator_id:
_in: X-Hasura-Scope-operation-write-users
_lte: X-Hasura-Scope-operator-write-operator
- role: operator
permission:
filter:
@@ -252,4 +220,4 @@ delete_permissions:
- operator_id:
_eq: X-Hasura-User-Id
- operator_id:
_in: X-Hasura-Scope-operation-write-users
_lte: X-Hasura-Scope-operator-write-operator
hasura-docker/metadata/databases/default/tables/public_buildparameterinstance.yaml
+4 -4
View File
@@ -39,7 +39,7 @@ select_permissions:
_eq: X-Hasura-current-operation-id
- payload:
operation_id:
_in: X-Hasura-Scope-payload-read-operations
_lte: X-Hasura-Scope-payload-read-operation
- role: operation_admin
permission:
columns:
@@ -59,7 +59,7 @@ select_permissions:
_eq: X-Hasura-current-operation-id
- payload:
operation_id:
_in: X-Hasura-Scope-payload-read-operations
_lte: X-Hasura-Scope-payload-read-operation
- role: operator
permission:
columns:
@@ -79,7 +79,7 @@ select_permissions:
_eq: X-Hasura-current-operation-id
- payload:
operation_id:
_in: X-Hasura-Scope-payload-read-operations
_lte: X-Hasura-Scope-payload-read-operation
- role: spectator
permission:
columns:
@@ -99,4 +99,4 @@ select_permissions:
_eq: X-Hasura-current-operation-id
- payload:
operation_id:
_in: X-Hasura-Scope-payload-read-operations
_lte: X-Hasura-Scope-payload-read-operation
hasura-docker/metadata/databases/default/tables/public_c2profileparametersinstance.yaml
+20 -20
View File
@@ -56,10 +56,10 @@ select_permissions:
_eq: X-Hasura-current-operation-id
- _or:
- operation_id:
_in: X-Hasura-Scope-payload-read-operations
_lte: X-Hasura-Scope-payload-read-operation
- payload:
operation_id:
_in: X-Hasura-Scope-payload-read-operations
_lte: X-Hasura-Scope-payload-read-operation
- role: operation_admin
permission:
columns:
@@ -87,10 +87,10 @@ select_permissions:
_eq: X-Hasura-current-operation-id
- _or:
- operation_id:
_in: X-Hasura-Scope-payload-read-operations
_lte: X-Hasura-Scope-payload-read-operation
- payload:
operation_id:
_in: X-Hasura-Scope-payload-read-operations
_lte: X-Hasura-Scope-payload-read-operation
- role: operator
permission:
columns:
@@ -118,10 +118,10 @@ select_permissions:
_eq: X-Hasura-current-operation-id
- _or:
- operation_id:
_in: X-Hasura-Scope-payload-read-operations
_lte: X-Hasura-Scope-payload-read-operation
- payload:
operation_id:
_in: X-Hasura-Scope-payload-read-operations
_lte: X-Hasura-Scope-payload-read-operation
- role: spectator
permission:
columns:
@@ -149,10 +149,10 @@ select_permissions:
_eq: X-Hasura-current-operation-id
- _or:
- operation_id:
_in: X-Hasura-Scope-payload-read-operations
_lte: X-Hasura-Scope-payload-read-operation
- payload:
operation_id:
_in: X-Hasura-Scope-payload-read-operations
_lte: X-Hasura-Scope-payload-read-operation
update_permissions:
- role: mythic_admin
permission:
@@ -169,10 +169,10 @@ update_permissions:
_eq: X-Hasura-current-operation-id
- _or:
- operation_id:
_in: X-Hasura-Scope-payload-write-operations
_lte: X-Hasura-Scope-payload-write-operation
- payload:
operation_id:
_in: X-Hasura-Scope-payload-write-operations
_lte: X-Hasura-Scope-payload-write-operation
check: null
- role: operation_admin
permission:
@@ -189,10 +189,10 @@ update_permissions:
_eq: X-Hasura-current-operation-id
- _or:
- operation_id:
_in: X-Hasura-Scope-payload-write-operations
_lte: X-Hasura-Scope-payload-write-operation
- payload:
operation_id:
_in: X-Hasura-Scope-payload-write-operations
_lte: X-Hasura-Scope-payload-write-operation
check: null
- role: operator
permission:
@@ -209,10 +209,10 @@ update_permissions:
_eq: X-Hasura-current-operation-id
- _or:
- operation_id:
_in: X-Hasura-Scope-payload-write-operations
_lte: X-Hasura-Scope-payload-write-operation
- payload:
operation_id:
_in: X-Hasura-Scope-payload-write-operations
_lte: X-Hasura-Scope-payload-write-operation
check: null
delete_permissions:
- role: mythic_admin
@@ -227,10 +227,10 @@ delete_permissions:
_eq: X-Hasura-current-operation-id
- _or:
- operation_id:
_in: X-Hasura-Scope-payload-write-operations
_lte: X-Hasura-Scope-payload-write-operation
- payload:
operation_id:
_in: X-Hasura-Scope-payload-write-operations
_lte: X-Hasura-Scope-payload-write-operation
- role: operation_admin
permission:
filter:
@@ -243,10 +243,10 @@ delete_permissions:
_eq: X-Hasura-current-operation-id
- _or:
- operation_id:
_in: X-Hasura-Scope-payload-write-operations
_lte: X-Hasura-Scope-payload-write-operation
- payload:
operation_id:
_in: X-Hasura-Scope-payload-write-operations
_lte: X-Hasura-Scope-payload-write-operation
- role: operator
permission:
filter:
@@ -259,7 +259,7 @@ delete_permissions:
_eq: X-Hasura-current-operation-id
- _or:
- operation_id:
_in: X-Hasura-Scope-payload-write-operations
_lte: X-Hasura-Scope-payload-write-operation
- payload:
operation_id:
_in: X-Hasura-Scope-payload-write-operations
_lte: X-Hasura-Scope-payload-write-operation
hasura-docker/metadata/databases/default/tables/public_callback.yaml
+10 -10
View File
@@ -175,7 +175,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-callback-read-operations
_lte: X-Hasura-Scope-callback-read-operation
allow_aggregations: true
- role: operation_admin
permission:
@@ -226,7 +226,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-callback-read-operations
_lte: X-Hasura-Scope-callback-read-operation
allow_aggregations: true
- role: operator
permission:
@@ -277,7 +277,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-callback-read-operations
_lte: X-Hasura-Scope-callback-read-operation
allow_aggregations: true
- role: spectator
permission:
@@ -328,7 +328,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-callback-read-operations
_lte: X-Hasura-Scope-callback-read-operation
allow_aggregations: true
update_permissions:
- role: mythic_admin
@@ -358,13 +358,13 @@ update_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-callback-write-operations
_lte: X-Hasura-Scope-callback-write-operation
check:
_and:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-callback-write-operations
_lte: X-Hasura-Scope-callback-write-operation
- role: operation_admin
permission:
columns:
@@ -392,13 +392,13 @@ update_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-callback-write-operations
_lte: X-Hasura-Scope-callback-write-operation
check:
_and:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-callback-write-operations
_lte: X-Hasura-Scope-callback-write-operation
- role: operator
permission:
columns:
@@ -426,10 +426,10 @@ update_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-callback-write-operations
_lte: X-Hasura-Scope-callback-write-operation
check:
_and:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-callback-write-operations
_lte: X-Hasura-Scope-callback-write-operation
hasura-docker/metadata/databases/default/tables/public_callbackc2profiles.yaml
+4 -4
View File
@@ -22,7 +22,7 @@ select_permissions:
_eq: X-Hasura-current-operation-id
- callback:
operation_id:
_in: X-Hasura-Scope-callback-read-operations
_lte: X-Hasura-Scope-callback-read-operation
- role: operation_admin
permission:
columns:
@@ -36,7 +36,7 @@ select_permissions:
_eq: X-Hasura-current-operation-id
- callback:
operation_id:
_in: X-Hasura-Scope-callback-read-operations
_lte: X-Hasura-Scope-callback-read-operation
- role: operator
permission:
columns:
@@ -50,7 +50,7 @@ select_permissions:
_eq: X-Hasura-current-operation-id
- callback:
operation_id:
_in: X-Hasura-Scope-callback-read-operations
_lte: X-Hasura-Scope-callback-read-operation
- role: spectator
permission:
columns:
@@ -64,4 +64,4 @@ select_permissions:
_eq: X-Hasura-current-operation-id
- callback:
operation_id:
_in: X-Hasura-Scope-callback-read-operations
_lte: X-Hasura-Scope-callback-read-operation
hasura-docker/metadata/databases/default/tables/public_callbackgraphedge.yaml
+4 -4
View File
@@ -36,7 +36,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-callback-read-operations
_lte: X-Hasura-Scope-callback-read-operation
allow_aggregations: true
- role: operation_admin
permission:
@@ -56,7 +56,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-callback-read-operations
_lte: X-Hasura-Scope-callback-read-operation
allow_aggregations: true
- role: operator
permission:
@@ -76,7 +76,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-callback-read-operations
_lte: X-Hasura-Scope-callback-read-operation
allow_aggregations: true
- role: spectator
permission:
@@ -96,5 +96,5 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-callback-read-operations
_lte: X-Hasura-Scope-callback-read-operation
allow_aggregations: true
hasura-docker/metadata/databases/default/tables/public_callbackport.yaml
+4 -4
View File
@@ -34,7 +34,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-callback-read-operations
_lte: X-Hasura-Scope-callback-read-operation
allow_aggregations: true
- role: operation_admin
permission:
@@ -58,7 +58,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-callback-read-operations
_lte: X-Hasura-Scope-callback-read-operation
allow_aggregations: true
- role: operator
permission:
@@ -82,7 +82,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-callback-read-operations
_lte: X-Hasura-Scope-callback-read-operation
allow_aggregations: true
- role: spectator
permission:
@@ -106,5 +106,5 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-callback-read-operations
_lte: X-Hasura-Scope-callback-read-operation
allow_aggregations: true
hasura-docker/metadata/databases/default/tables/public_callbacktoken.yaml
+10 -10
View File
@@ -30,7 +30,7 @@ select_permissions:
_eq: X-Hasura-current-operation-id
- callback:
operation_id:
_in: X-Hasura-Scope-callback-read-operations
_lte: X-Hasura-Scope-callback-read-operation
- role: operation_admin
permission:
columns:
@@ -49,7 +49,7 @@ select_permissions:
_eq: X-Hasura-current-operation-id
- callback:
operation_id:
_in: X-Hasura-Scope-callback-read-operations
_lte: X-Hasura-Scope-callback-read-operation
- role: operator
permission:
columns:
@@ -68,7 +68,7 @@ select_permissions:
_eq: X-Hasura-current-operation-id
- callback:
operation_id:
_in: X-Hasura-Scope-callback-read-operations
_lte: X-Hasura-Scope-callback-read-operation
- role: spectator
permission:
columns:
@@ -87,7 +87,7 @@ select_permissions:
_eq: X-Hasura-current-operation-id
- callback:
operation_id:
_in: X-Hasura-Scope-callback-read-operations
_lte: X-Hasura-Scope-callback-read-operation
update_permissions:
- role: mythic_admin
permission:
@@ -100,7 +100,7 @@ update_permissions:
_eq: X-Hasura-current-operation-id
- callback:
operation_id:
_in: X-Hasura-Scope-callback-write-operations
_lte: X-Hasura-Scope-callback-write-operation
check:
_and:
- callback:
@@ -108,7 +108,7 @@ update_permissions:
_eq: X-Hasura-current-operation-id
- callback:
operation_id:
_in: X-Hasura-Scope-callback-write-operations
_lte: X-Hasura-Scope-callback-write-operation
- role: operation_admin
permission:
columns:
@@ -120,7 +120,7 @@ update_permissions:
_eq: X-Hasura-current-operation-id
- callback:
operation_id:
_in: X-Hasura-Scope-callback-write-operations
_lte: X-Hasura-Scope-callback-write-operation
check:
_and:
- callback:
@@ -128,7 +128,7 @@ update_permissions:
_eq: X-Hasura-current-operation-id
- callback:
operation_id:
_in: X-Hasura-Scope-callback-write-operations
_lte: X-Hasura-Scope-callback-write-operation
- role: operator
permission:
columns:
@@ -140,7 +140,7 @@ update_permissions:
_eq: X-Hasura-current-operation-id
- callback:
operation_id:
_in: X-Hasura-Scope-callback-write-operations
_lte: X-Hasura-Scope-callback-write-operation
check:
_and:
- callback:
@@ -148,4 +148,4 @@ update_permissions:
_eq: X-Hasura-current-operation-id
- callback:
operation_id:
_in: X-Hasura-Scope-callback-write-operations
_lte: X-Hasura-Scope-callback-write-operation
hasura-docker/metadata/databases/default/tables/public_credential.yaml
+10 -10
View File
@@ -59,7 +59,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-credential-read-operations
_lte: X-Hasura-Scope-credential-read-operation
allow_aggregations: true
- role: operation_admin
permission:
@@ -84,7 +84,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-credential-read-operations
_lte: X-Hasura-Scope-credential-read-operation
allow_aggregations: true
- role: operator
permission:
@@ -109,7 +109,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-credential-read-operations
_lte: X-Hasura-Scope-credential-read-operation
allow_aggregations: true
- role: spectator
permission:
@@ -134,7 +134,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-credential-read-operations
_lte: X-Hasura-Scope-credential-read-operation
allow_aggregations: true
update_permissions:
- role: mythic_admin
@@ -153,13 +153,13 @@ update_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-credential-write-operations
_lte: X-Hasura-Scope-credential-write-operation
check:
_and:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-credential-write-operations
_lte: X-Hasura-Scope-credential-write-operation
set:
operator_id: x-hasura-user-id
- role: operation_admin
@@ -178,13 +178,13 @@ update_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-credential-write-operations
_lte: X-Hasura-Scope-credential-write-operation
check:
_and:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-credential-write-operations
_lte: X-Hasura-Scope-credential-write-operation
set:
operator_id: x-hasura-user-id
- role: operator
@@ -203,12 +203,12 @@ update_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-credential-write-operations
_lte: X-Hasura-Scope-credential-write-operation
check:
_and:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-credential-write-operations
_lte: X-Hasura-Scope-credential-write-operation
set:
operator_id: x-hasura-user-id
hasura-docker/metadata/databases/default/tables/public_disabledcommandsprofile.yaml
+14 -14
View File
@@ -24,7 +24,7 @@ insert_permissions:
- operation_id:
_eq: X-Hasura-Current-Operation-Id
- operation_id:
_in: X-Hasura-Scope-operation-write-operations
_lte: X-Hasura-Scope-operation-write-operation
set:
operation_id: x-hasura-current-operation-id
columns:
@@ -47,7 +47,7 @@ insert_permissions:
_eq: x-hasura-current-operation-id
- _and:
- operation_id:
_in: X-Hasura-Scope-operation-write-operations
_lte: X-Hasura-Scope-operation-write-operation
- operatoroperations:
_and:
- view_mode:
@@ -55,7 +55,7 @@ insert_permissions:
- operator_id:
_eq: x-hasura-user-id
- operation_id:
_in: X-Hasura-Scope-operation-write-operations
_lte: X-Hasura-Scope-operation-write-operation
set:
operation_id: x-hasura-current-operation-id
columns:
@@ -78,7 +78,7 @@ insert_permissions:
_eq: x-hasura-current-operation-id
- _and:
- operation_id:
_in: X-Hasura-Scope-operation-write-operations
_lte: X-Hasura-Scope-operation-write-operation
- operatoroperations:
_and:
- view_mode:
@@ -86,7 +86,7 @@ insert_permissions:
- operator_id:
_eq: x-hasura-user-id
- operation_id:
_in: X-Hasura-Scope-operation-write-operations
_lte: X-Hasura-Scope-operation-write-operation
set:
operation_id: x-hasura-current-operation-id
columns:
@@ -105,7 +105,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-Current-Operation-Id
- operation_id:
_in: X-Hasura-Scope-operation-read-operations
_lte: X-Hasura-Scope-operation-read-operation
- role: operation_admin
permission:
columns:
@@ -118,7 +118,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-Current-Operation-Id
- operation_id:
_in: X-Hasura-Scope-operation-read-operations
_lte: X-Hasura-Scope-operation-read-operation
- role: operator
permission:
columns:
@@ -131,7 +131,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-Current-Operation-Id
- operation_id:
_in: X-Hasura-Scope-operation-read-operations
_lte: X-Hasura-Scope-operation-read-operation
- role: spectator
permission:
columns:
@@ -144,7 +144,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-Current-Operation-Id
- operation_id:
_in: X-Hasura-Scope-operation-read-operations
_lte: X-Hasura-Scope-operation-read-operation
delete_permissions:
- role: mythic_admin
permission:
@@ -153,7 +153,7 @@ delete_permissions:
- operation_id:
_eq: X-Hasura-Current-Operation-Id
- operation_id:
_in: X-Hasura-Scope-operation-write-operations
_lte: X-Hasura-Scope-operation-write-operation
- role: operation_admin
permission:
filter:
@@ -171,7 +171,7 @@ delete_permissions:
_eq: x-hasura-current-operation-id
- _and:
- operation_id:
_in: X-Hasura-Scope-operation-write-operations
_lte: X-Hasura-Scope-operation-write-operation
- operatoroperations:
_and:
- view_mode:
@@ -179,7 +179,7 @@ delete_permissions:
- operator_id:
_eq: x-hasura-user-id
- operation_id:
_in: X-Hasura-Scope-operation-write-operations
_lte: X-Hasura-Scope-operation-write-operation
- role: operator
permission:
filter:
@@ -197,7 +197,7 @@ delete_permissions:
_eq: x-hasura-current-operation-id
- _and:
- operation_id:
_in: X-Hasura-Scope-operation-write-operations
_lte: X-Hasura-Scope-operation-write-operation
- operatoroperations:
_and:
- view_mode:
@@ -205,4 +205,4 @@ delete_permissions:
- operator_id:
_eq: x-hasura-user-id
- operation_id:
_in: X-Hasura-Scope-operation-write-operations
_lte: X-Hasura-Scope-operation-write-operation
hasura-docker/metadata/databases/default/tables/public_eventgroup.yaml
+4 -4
View File
@@ -75,7 +75,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-eventing-read-operations
_lte: X-Hasura-Scope-eventing-read-operation
allow_aggregations: true
comment: ""
- role: operation_admin
@@ -105,7 +105,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-eventing-read-operations
_lte: X-Hasura-Scope-eventing-read-operation
allow_aggregations: true
comment: ""
- role: operator
@@ -135,7 +135,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-eventing-read-operations
_lte: X-Hasura-Scope-eventing-read-operation
allow_aggregations: true
comment: ""
- role: spectator
@@ -165,6 +165,6 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-eventing-read-operations
_lte: X-Hasura-Scope-eventing-read-operation
allow_aggregations: true
comment: ""
hasura-docker/metadata/databases/default/tables/public_eventgroupapproval.yaml
+4 -4
View File
@@ -27,7 +27,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-eventing-read-operations
_lte: X-Hasura-Scope-eventing-read-operation
comment: ""
- role: operation_admin
permission:
@@ -44,7 +44,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-eventing-read-operations
_lte: X-Hasura-Scope-eventing-read-operation
comment: ""
- role: operator
permission:
@@ -61,7 +61,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-eventing-read-operations
_lte: X-Hasura-Scope-eventing-read-operation
comment: ""
- role: spectator
permission:
@@ -78,5 +78,5 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-eventing-read-operations
_lte: X-Hasura-Scope-eventing-read-operation
comment: ""
hasura-docker/metadata/databases/default/tables/public_eventgroupconsumingcontainer.yaml
+4 -4
View File
@@ -25,7 +25,7 @@ select_permissions:
_eq: x-hasura-current-operation-id
- eventgroup:
operation_id:
_in: x-hasura-scope-eventing-read-operations
_lte: x-hasura-scope-eventing-read-operation
comment: ""
- role: operation_admin
permission:
@@ -43,7 +43,7 @@ select_permissions:
_eq: x-hasura-current-operation-id
- eventgroup:
operation_id:
_in: x-hasura-scope-eventing-read-operations
_lte: x-hasura-scope-eventing-read-operation
comment: ""
- role: operator
permission:
@@ -61,7 +61,7 @@ select_permissions:
_eq: x-hasura-current-operation-id
- eventgroup:
operation_id:
_in: x-hasura-scope-eventing-read-operations
_lte: x-hasura-scope-eventing-read-operation
comment: ""
- role: spectator
permission:
@@ -79,5 +79,5 @@ select_permissions:
_eq: x-hasura-current-operation-id
- eventgroup:
operation_id:
_in: x-hasura-scope-eventing-read-operations
_lte: x-hasura-scope-eventing-read-operation
comment: ""
hasura-docker/metadata/databases/default/tables/public_eventgroupinstance.yaml
+4 -4
View File
@@ -45,7 +45,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-scope-eventing-read-operations
_lte: X-Hasura-scope-eventing-read-operation
comment: ""
- role: operation_admin
permission:
@@ -69,7 +69,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-scope-eventing-read-operations
_lte: X-Hasura-scope-eventing-read-operation
comment: ""
- role: operator
permission:
@@ -93,7 +93,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-scope-eventing-read-operations
_lte: X-Hasura-scope-eventing-read-operation
comment: ""
- role: spectator
permission:
@@ -117,5 +117,5 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-scope-eventing-read-operations
_lte: X-Hasura-scope-eventing-read-operation
comment: ""
hasura-docker/metadata/databases/default/tables/public_eventstep.yaml
+4 -4
View File
@@ -43,7 +43,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-scope-eventing-read-operations
_lte: X-Hasura-scope-eventing-read-operation
comment: ""
- role: operation_admin
permission:
@@ -68,7 +68,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-scope-eventing-read-operations
_lte: X-Hasura-scope-eventing-read-operation
comment: ""
- role: operator
permission:
@@ -93,7 +93,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-scope-eventing-read-operations
_lte: X-Hasura-scope-eventing-read-operation
comment: ""
- role: spectator
permission:
@@ -118,5 +118,5 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-scope-eventing-read-operations
_lte: X-Hasura-scope-eventing-read-operation
comment: ""
hasura-docker/metadata/databases/default/tables/public_eventstepinstance.yaml
+4 -4
View File
@@ -104,7 +104,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-scope-eventing-read-operations
_lte: X-Hasura-scope-eventing-read-operation
comment: ""
- role: operation_admin
permission:
@@ -131,7 +131,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-scope-eventing-read-operations
_lte: X-Hasura-scope-eventing-read-operation
comment: ""
- role: operator
permission:
@@ -158,7 +158,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-scope-eventing-read-operations
_lte: X-Hasura-scope-eventing-read-operation
comment: ""
- role: spectator
permission:
@@ -185,5 +185,5 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-scope-eventing-read-operations
_lte: X-Hasura-scope-eventing-read-operation
comment: ""
hasura-docker/metadata/databases/default/tables/public_filemeta.yaml
+10 -10
View File
@@ -121,7 +121,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-file-read-operations
_lte: X-Hasura-Scope-file-read-operation
allow_aggregations: true
- role: operation_admin
permission:
@@ -165,7 +165,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-file-read-operations
_lte: X-Hasura-Scope-file-read-operation
allow_aggregations: true
- role: operator
permission:
@@ -209,7 +209,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-file-read-operations
_lte: X-Hasura-Scope-file-read-operation
allow_aggregations: true
- role: spectator
permission:
@@ -253,7 +253,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-file-read-operations
_lte: X-Hasura-Scope-file-read-operation
allow_aggregations: true
update_permissions:
- role: mythic_admin
@@ -267,13 +267,13 @@ update_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-file-write-operations
_lte: X-Hasura-Scope-file-write-operation
check:
_and:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-file-write-operations
_lte: X-Hasura-Scope-file-write-operation
- role: operation_admin
permission:
columns:
@@ -285,13 +285,13 @@ update_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-file-write-operations
_lte: X-Hasura-Scope-file-write-operation
check:
_and:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-file-write-operations
_lte: X-Hasura-Scope-file-write-operation
- role: operator
permission:
columns:
@@ -303,10 +303,10 @@ update_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-file-write-operations
_lte: X-Hasura-Scope-file-write-operation
check:
_and:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-file-write-operations
_lte: X-Hasura-Scope-file-write-operation
hasura-docker/metadata/databases/default/tables/public_keylog.yaml
+4 -4
View File
@@ -45,7 +45,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-response-read-operations
_lte: X-Hasura-Scope-response-read-operation
allow_aggregations: true
- role: operation_admin
permission:
@@ -65,7 +65,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-response-read-operations
_lte: X-Hasura-Scope-response-read-operation
allow_aggregations: true
- role: operator
permission:
@@ -85,7 +85,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-response-read-operations
_lte: X-Hasura-Scope-response-read-operation
allow_aggregations: true
- role: spectator
permission:
@@ -105,5 +105,5 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-response-read-operations
_lte: X-Hasura-Scope-response-read-operation
allow_aggregations: true
hasura-docker/metadata/databases/default/tables/public_loadedcommands.yaml
+10 -10
View File
@@ -24,7 +24,7 @@ insert_permissions:
_eq: X-Hasura-current-operation-id
- callback:
operation_id:
_in: X-Hasura-Scope-callback-write-operations
_lte: X-Hasura-Scope-callback-write-operation
set:
operator_id: x-hasura-user-id
columns:
@@ -40,7 +40,7 @@ insert_permissions:
_eq: X-Hasura-current-operation-id
- callback:
operation_id:
_in: X-Hasura-Scope-callback-write-operations
_lte: X-Hasura-Scope-callback-write-operation
set:
operator_id: x-hasura-user-id
columns:
@@ -56,7 +56,7 @@ insert_permissions:
_eq: X-Hasura-current-operation-id
- callback:
operation_id:
_in: X-Hasura-Scope-callback-write-operations
_lte: X-Hasura-Scope-callback-write-operation
set:
operator_id: x-hasura-user-id
columns:
@@ -81,7 +81,7 @@ select_permissions:
_eq: X-Hasura-current-operation-id
- callback:
operation_id:
_in: X-Hasura-Scope-callback-read-operations
_lte: X-Hasura-Scope-callback-read-operation
- role: operation_admin
permission:
columns:
@@ -99,7 +99,7 @@ select_permissions:
_eq: X-Hasura-current-operation-id
- callback:
operation_id:
_in: X-Hasura-Scope-callback-read-operations
_lte: X-Hasura-Scope-callback-read-operation
- role: operator
permission:
columns:
@@ -117,7 +117,7 @@ select_permissions:
_eq: X-Hasura-current-operation-id
- callback:
operation_id:
_in: X-Hasura-Scope-callback-read-operations
_lte: X-Hasura-Scope-callback-read-operation
- role: spectator
permission:
columns:
@@ -135,7 +135,7 @@ select_permissions:
_eq: X-Hasura-current-operation-id
- callback:
operation_id:
_in: X-Hasura-Scope-callback-read-operations
_lte: X-Hasura-Scope-callback-read-operation
delete_permissions:
- role: mythic_admin
permission:
@@ -146,7 +146,7 @@ delete_permissions:
_eq: X-Hasura-current-operation-id
- callback:
operation_id:
_in: X-Hasura-Scope-callback-write-operations
_lte: X-Hasura-Scope-callback-write-operation
- role: operation_admin
permission:
filter:
@@ -156,7 +156,7 @@ delete_permissions:
_eq: X-Hasura-current-operation-id
- callback:
operation_id:
_in: X-Hasura-Scope-callback-write-operations
_lte: X-Hasura-Scope-callback-write-operation
- role: operator
permission:
filter:
@@ -166,4 +166,4 @@ delete_permissions:
_eq: X-Hasura-current-operation-id
- callback:
operation_id:
_in: X-Hasura-Scope-callback-write-operations
_lte: X-Hasura-Scope-callback-write-operation
hasura-docker/metadata/databases/default/tables/public_mythictree.yaml
+10 -10
View File
@@ -83,7 +83,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-browser-read-operations
_lte: X-Hasura-Scope-browser-read-operation
allow_aggregations: true
- role: operation_admin
permission:
@@ -117,7 +117,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-browser-read-operations
_lte: X-Hasura-Scope-browser-read-operation
allow_aggregations: true
- role: operator
permission:
@@ -151,7 +151,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-browser-read-operations
_lte: X-Hasura-Scope-browser-read-operation
allow_aggregations: true
- role: spectator
permission:
@@ -185,7 +185,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-browser-read-operations
_lte: X-Hasura-Scope-browser-read-operation
allow_aggregations: true
update_permissions:
- role: mythic_admin
@@ -207,13 +207,13 @@ update_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-browser-write-operations
_lte: X-Hasura-Scope-browser-write-operation
check:
_and:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-browser-write-operations
_lte: X-Hasura-Scope-browser-write-operation
- role: operation_admin
permission:
columns:
@@ -233,13 +233,13 @@ update_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-browser-write-operations
_lte: X-Hasura-Scope-browser-write-operation
check:
_and:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-browser-write-operations
_lte: X-Hasura-Scope-browser-write-operation
- role: operator
permission:
columns:
@@ -259,10 +259,10 @@ update_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-browser-write-operations
_lte: X-Hasura-Scope-browser-write-operation
check:
_and:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-browser-write-operations
_lte: X-Hasura-Scope-browser-write-operation
hasura-docker/metadata/databases/default/tables/public_operation.yaml
+3 -3
View File
@@ -214,7 +214,7 @@ select_permissions:
- id:
_eq: X-Hasura-current-operation-id
- id:
_in: X-Hasura-Scope-operation-read-operations
_lte: X-Hasura-Scope-operation-read-operation
- role: operator
permission:
columns:
@@ -235,7 +235,7 @@ select_permissions:
- id:
_eq: X-Hasura-current-operation-id
- id:
_in: X-Hasura-Scope-operation-read-operations
_lte: X-Hasura-Scope-operation-read-operation
- role: spectator
permission:
columns:
@@ -256,4 +256,4 @@ select_permissions:
- id:
_eq: X-Hasura-current-operation-id
- id:
_in: X-Hasura-Scope-operation-read-operations
_lte: X-Hasura-Scope-operation-read-operation
hasura-docker/metadata/databases/default/tables/public_operationeventlog.yaml
+10 -10
View File
@@ -19,7 +19,7 @@ insert_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-eventlog-write-operations
_lte: X-Hasura-Scope-eventlog-write-operation
set:
operation_id: x-hasura-current-operation-id
operator_id: x-hasura-user-id
@@ -41,7 +41,7 @@ insert_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-eventlog-write-operations
_lte: X-Hasura-Scope-eventlog-write-operation
set:
operation_id: x-hasura-current-operation-id
operator_id: x-hasura-user-id
@@ -63,7 +63,7 @@ insert_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-eventlog-write-operations
_lte: X-Hasura-Scope-eventlog-write-operation
set:
operation_id: x-hasura-current-operation-id
operator_id: x-hasura-user-id
@@ -99,7 +99,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-eventlog-read-operations
_lte: X-Hasura-Scope-eventlog-read-operation
allow_aggregations: true
- role: operation_admin
permission:
@@ -121,7 +121,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-eventlog-read-operations
_lte: X-Hasura-Scope-eventlog-read-operation
allow_aggregations: true
- role: operator
permission:
@@ -143,7 +143,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-eventlog-read-operations
_lte: X-Hasura-Scope-eventlog-read-operation
allow_aggregations: true
- role: spectator
permission:
@@ -165,7 +165,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-eventlog-read-operations
_lte: X-Hasura-Scope-eventlog-read-operation
allow_aggregations: true
update_permissions:
- role: mythic_admin
@@ -180,7 +180,7 @@ update_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-eventlog-write-operations
_lte: X-Hasura-Scope-eventlog-write-operation
check: null
- role: operation_admin
permission:
@@ -194,7 +194,7 @@ update_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-eventlog-write-operations
_lte: X-Hasura-Scope-eventlog-write-operation
check: null
- role: operator
permission:
@@ -208,5 +208,5 @@ update_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-eventlog-write-operations
_lte: X-Hasura-Scope-eventlog-write-operation
check: null
hasura-docker/metadata/databases/default/tables/public_operator.yaml
+8 -8
View File
@@ -190,7 +190,7 @@ select_permissions:
- view_utc_time
filter:
id:
_in: X-Hasura-Scope-operator-read-operators
_lte: X-Hasura-Scope-operator-read-operator
- role: operation_admin
permission:
columns:
@@ -210,7 +210,7 @@ select_permissions:
- view_utc_time
filter:
id:
_in: X-Hasura-Scope-operator-read-operators
_lte: X-Hasura-Scope-operator-read-operator
- role: operator
permission:
columns:
@@ -230,7 +230,7 @@ select_permissions:
- view_utc_time
filter:
id:
_in: X-Hasura-Scope-operator-read-operators
_lte: X-Hasura-Scope-operator-read-operator
- role: spectator
permission:
columns:
@@ -248,7 +248,7 @@ select_permissions:
- view_utc_time
filter:
id:
_in: X-Hasura-Scope-operator-read-operators
_lte: X-Hasura-Scope-operator-read-operator
update_permissions:
- role: mythic_admin
permission:
@@ -257,7 +257,7 @@ update_permissions:
- view_utc_time
filter:
id:
_in: X-Hasura-Scope-operator-write-operators
_lte: X-Hasura-Scope-operator-write-operator
check: null
- role: operation_admin
permission:
@@ -269,7 +269,7 @@ update_permissions:
- id:
_eq: X-Hasura-User-Id
- id:
_in: X-Hasura-Scope-operator-write-operators
_lte: X-Hasura-Scope-operator-write-operator
check: null
- role: operator
permission:
@@ -281,7 +281,7 @@ update_permissions:
- id:
_eq: X-Hasura-User-Id
- id:
_in: X-Hasura-Scope-operator-write-operators
_lte: X-Hasura-Scope-operator-write-operator
check: null
- role: spectator
permission:
@@ -293,5 +293,5 @@ update_permissions:
- id:
_eq: X-Hasura-User-Id
- id:
_in: X-Hasura-Scope-operator-write-operators
_lte: X-Hasura-Scope-operator-write-operator
check: null
hasura-docker/metadata/databases/default/tables/public_operatoroperation.yaml
+3 -3
View File
@@ -41,7 +41,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-operation-read-operations
_lte: X-Hasura-Scope-operation-read-operation
- role: operator
permission:
columns:
@@ -57,7 +57,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-operation-read-operations
_lte: X-Hasura-Scope-operation-read-operation
- role: spectator
permission:
columns:
@@ -73,4 +73,4 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-operation-read-operations
_lte: X-Hasura-Scope-operation-read-operation
hasura-docker/metadata/databases/default/tables/public_payload.yaml
+4 -4
View File
@@ -144,7 +144,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-payload-read-operations
_lte: X-Hasura-Scope-payload-read-operation
allow_aggregations: true
- role: operation_admin
permission:
@@ -178,7 +178,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-payload-read-operations
_lte: X-Hasura-Scope-payload-read-operation
allow_aggregations: true
- role: operator
permission:
@@ -212,7 +212,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-payload-read-operations
_lte: X-Hasura-Scope-payload-read-operation
allow_aggregations: true
- role: spectator
permission:
@@ -246,5 +246,5 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-payload-read-operations
_lte: X-Hasura-Scope-payload-read-operation
allow_aggregations: true
hasura-docker/metadata/databases/default/tables/public_payload_build_step.yaml
+4 -4
View File
@@ -37,7 +37,7 @@ select_permissions:
_is_null: false
- payload:
operation_id:
_in: X-Hasura-Scope-payload-read-operations
_lte: X-Hasura-Scope-payload-read-operation
- role: operation_admin
permission:
columns:
@@ -66,7 +66,7 @@ select_permissions:
_is_null: false
- payload:
operation_id:
_in: X-Hasura-Scope-payload-read-operations
_lte: X-Hasura-Scope-payload-read-operation
- role: operator
permission:
columns:
@@ -95,7 +95,7 @@ select_permissions:
_is_null: false
- payload:
operation_id:
_in: X-Hasura-Scope-payload-read-operations
_lte: X-Hasura-Scope-payload-read-operation
- role: spectator
permission:
columns:
@@ -124,4 +124,4 @@ select_permissions:
_is_null: false
- payload:
operation_id:
_in: X-Hasura-Scope-payload-read-operations
_lte: X-Hasura-Scope-payload-read-operation
hasura-docker/metadata/databases/default/tables/public_payloadc2profiles.yaml
+4 -4
View File
@@ -22,7 +22,7 @@ select_permissions:
_eq: X-Hasura-current-operation-id
- payload:
operation_id:
_in: X-Hasura-Scope-payload-read-operations
_lte: X-Hasura-Scope-payload-read-operation
- role: operation_admin
permission:
columns:
@@ -36,7 +36,7 @@ select_permissions:
_eq: X-Hasura-current-operation-id
- payload:
operation_id:
_in: X-Hasura-Scope-payload-read-operations
_lte: X-Hasura-Scope-payload-read-operation
- role: operator
permission:
columns:
@@ -50,7 +50,7 @@ select_permissions:
_eq: X-Hasura-current-operation-id
- payload:
operation_id:
_in: X-Hasura-Scope-payload-read-operations
_lte: X-Hasura-Scope-payload-read-operation
- role: spectator
permission:
columns:
@@ -64,4 +64,4 @@ select_permissions:
_eq: X-Hasura-current-operation-id
- payload:
operation_id:
_in: X-Hasura-Scope-payload-read-operations
_lte: X-Hasura-Scope-payload-read-operation
hasura-docker/metadata/databases/default/tables/public_payloadcommand.yaml
+10 -10
View File
@@ -18,7 +18,7 @@ insert_permissions:
_eq: X-Hasura-current-operation-id
- payload:
operation_id:
_in: X-Hasura-scope-payload-write-operations
_lte: X-Hasura-scope-payload-write-operation
columns:
- command_id
- payload_id
@@ -31,7 +31,7 @@ insert_permissions:
_eq: X-Hasura-current-operation-id
- payload:
operation_id:
_in: X-Hasura-scope-payload-write-operations
_lte: X-Hasura-scope-payload-write-operation
columns:
- command_id
- payload_id
@@ -44,7 +44,7 @@ insert_permissions:
_eq: X-Hasura-current-operation-id
- payload:
operation_id:
_in: X-Hasura-scope-payload-write-operations
_lte: X-Hasura-scope-payload-write-operation
columns:
- command_id
- payload_id
@@ -64,7 +64,7 @@ select_permissions:
_eq: X-Hasura-current-operation-id
- payload:
operation_id:
_in: X-Hasura-Scope-payload-read-operations
_lte: X-Hasura-Scope-payload-read-operation
- role: operation_admin
permission:
columns:
@@ -80,7 +80,7 @@ select_permissions:
_eq: X-Hasura-current-operation-id
- payload:
operation_id:
_in: X-Hasura-Scope-payload-read-operations
_lte: X-Hasura-Scope-payload-read-operation
- role: operator
permission:
columns:
@@ -96,7 +96,7 @@ select_permissions:
_eq: X-Hasura-current-operation-id
- payload:
operation_id:
_in: X-Hasura-Scope-payload-read-operations
_lte: X-Hasura-Scope-payload-read-operation
- role: spectator
permission:
columns:
@@ -112,7 +112,7 @@ select_permissions:
_eq: X-Hasura-current-operation-id
- payload:
operation_id:
_in: X-Hasura-Scope-payload-read-operations
_lte: X-Hasura-Scope-payload-read-operation
delete_permissions:
- role: mythic_admin
permission:
@@ -123,7 +123,7 @@ delete_permissions:
_eq: X-Hasura-current-operation-id
- payload:
operation_id:
_in: X-Hasura-scope-payload-write-operations
_lte: X-Hasura-scope-payload-write-operation
- role: operation_admin
permission:
filter:
@@ -133,7 +133,7 @@ delete_permissions:
_eq: X-Hasura-current-operation-id
- payload:
operation_id:
_in: X-Hasura-scope-payload-write-operations
_lte: X-Hasura-scope-payload-write-operation
- role: operator
permission:
filter:
@@ -143,4 +143,4 @@ delete_permissions:
_eq: X-Hasura-current-operation-id
- payload:
operation_id:
_in: X-Hasura-scope-payload-write-operations
_lte: X-Hasura-scope-payload-write-operation
hasura-docker/metadata/databases/default/tables/public_payloadonhost.yaml
+13 -13
View File
@@ -19,7 +19,7 @@ insert_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-payload-write-operations
_lte: X-Hasura-Scope-payload-write-operation
set:
operation_id: x-hasura-current-operation-id
columns:
@@ -32,7 +32,7 @@ insert_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-payload-write-operations
_lte: X-Hasura-Scope-payload-write-operation
set:
operation_id: x-hasura-current-operation-id
columns:
@@ -45,7 +45,7 @@ insert_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-payload-write-operations
_lte: X-Hasura-Scope-payload-write-operation
set:
operation_id: x-hasura-current-operation-id
columns:
@@ -67,7 +67,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-payload-read-operations
_lte: X-Hasura-Scope-payload-read-operation
- role: operation_admin
permission:
columns:
@@ -83,7 +83,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-payload-read-operations
_lte: X-Hasura-Scope-payload-read-operation
- role: operator
permission:
columns:
@@ -99,7 +99,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-payload-read-operations
_lte: X-Hasura-Scope-payload-read-operation
- role: spectator
permission:
columns:
@@ -115,7 +115,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-payload-read-operations
_lte: X-Hasura-Scope-payload-read-operation
update_permissions:
- role: mythic_admin
permission:
@@ -126,7 +126,7 @@ update_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-payload-write-operations
_lte: X-Hasura-Scope-payload-write-operation
check: null
- role: operation_admin
permission:
@@ -137,7 +137,7 @@ update_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-payload-write-operations
_lte: X-Hasura-Scope-payload-write-operation
check: null
- role: operator
permission:
@@ -148,7 +148,7 @@ update_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-payload-write-operations
_lte: X-Hasura-Scope-payload-write-operation
check: null
delete_permissions:
- role: mythic_admin
@@ -158,7 +158,7 @@ delete_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-payload-write-operations
_lte: X-Hasura-Scope-payload-write-operation
- role: operation_admin
permission:
filter:
@@ -166,7 +166,7 @@ delete_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-payload-write-operations
_lte: X-Hasura-Scope-payload-write-operation
- role: operator
permission:
filter:
@@ -174,4 +174,4 @@ delete_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-payload-write-operations
_lte: X-Hasura-Scope-payload-write-operation
hasura-docker/metadata/databases/default/tables/public_response.yaml
+4 -4
View File
@@ -72,7 +72,7 @@ select_permissions:
- task:
callback:
operation_id:
_in: X-Hasura-Scope-response-read-operations
_lte: X-Hasura-Scope-response-read-operation
allow_aggregations: true
- role: operation_admin
permission:
@@ -98,7 +98,7 @@ select_permissions:
- task:
callback:
operation_id:
_in: X-Hasura-Scope-response-read-operations
_lte: X-Hasura-Scope-response-read-operation
allow_aggregations: true
- role: operator
permission:
@@ -124,7 +124,7 @@ select_permissions:
- task:
callback:
operation_id:
_in: X-Hasura-Scope-response-read-operations
_lte: X-Hasura-Scope-response-read-operation
allow_aggregations: true
- role: spectator
permission:
@@ -150,5 +150,5 @@ select_permissions:
- task:
callback:
operation_id:
_in: X-Hasura-Scope-response-read-operations
_lte: X-Hasura-Scope-response-read-operation
allow_aggregations: true
hasura-docker/metadata/databases/default/tables/public_tag.yaml
+16 -16
View File
@@ -49,7 +49,7 @@ insert_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-tag-write-operations
_lte: X-Hasura-Scope-tag-write-operation
set:
operation_id: x-hasura-current-operation-id
columns:
@@ -75,7 +75,7 @@ insert_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-tag-write-operations
_lte: X-Hasura-Scope-tag-write-operation
set:
operation_id: x-hasura-current-operation-id
columns:
@@ -101,7 +101,7 @@ insert_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-tag-write-operations
_lte: X-Hasura-Scope-tag-write-operation
set:
operation_id: x-hasura-current-operation-id
columns:
@@ -146,7 +146,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-tag-read-operations
_lte: X-Hasura-Scope-tag-read-operation
allow_aggregations: true
- role: operation_admin
permission:
@@ -173,7 +173,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-tag-read-operations
_lte: X-Hasura-Scope-tag-read-operation
allow_aggregations: true
- role: operator
permission:
@@ -200,7 +200,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-tag-read-operations
_lte: X-Hasura-Scope-tag-read-operation
allow_aggregations: true
- role: spectator
permission:
@@ -227,7 +227,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-tag-read-operations
_lte: X-Hasura-Scope-tag-read-operation
allow_aggregations: true
update_permissions:
- role: mythic_admin
@@ -252,13 +252,13 @@ update_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-tag-write-operations
_lte: X-Hasura-Scope-tag-write-operation
check:
_and:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-tag-write-operations
_lte: X-Hasura-Scope-tag-write-operation
- role: operation_admin
permission:
columns:
@@ -281,13 +281,13 @@ update_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-tag-write-operations
_lte: X-Hasura-Scope-tag-write-operation
check:
_and:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-tag-write-operations
_lte: X-Hasura-Scope-tag-write-operation
- role: operator
permission:
columns:
@@ -310,13 +310,13 @@ update_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-tag-write-operations
_lte: X-Hasura-Scope-tag-write-operation
check:
_and:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-tag-write-operations
_lte: X-Hasura-Scope-tag-write-operation
delete_permissions:
- role: mythic_admin
@@ -326,7 +326,7 @@ delete_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-tag-write-operations
_lte: X-Hasura-Scope-tag-write-operation
- role: operation_admin
permission:
filter:
@@ -334,7 +334,7 @@ delete_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-tag-write-operations
_lte: X-Hasura-Scope-tag-write-operation
- role: operator
permission:
filter:
@@ -342,4 +342,4 @@ delete_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-tag-write-operations
_lte: X-Hasura-Scope-tag-write-operation
hasura-docker/metadata/databases/default/tables/public_tagtype.yaml
+13 -13
View File
@@ -27,7 +27,7 @@ insert_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-tag-write-operations
_lte: X-Hasura-Scope-tag-write-operation
set:
operation_id: x-hasura-current-operation-id
columns:
@@ -44,7 +44,7 @@ insert_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-tag-write-operations
_lte: X-Hasura-Scope-tag-write-operation
set:
operation_id: x-hasura-current-operation-id
columns:
@@ -61,7 +61,7 @@ insert_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-tag-write-operations
_lte: X-Hasura-Scope-tag-write-operation
set:
operation_id: x-hasura-current-operation-id
columns:
@@ -87,7 +87,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-tag-read-operations
_lte: X-Hasura-Scope-tag-read-operation
allow_aggregations: true
- role: operation_admin
permission:
@@ -104,7 +104,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-tag-read-operations
_lte: X-Hasura-Scope-tag-read-operation
allow_aggregations: true
- role: operator
permission:
@@ -121,7 +121,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-tag-read-operations
_lte: X-Hasura-Scope-tag-read-operation
allow_aggregations: true
- role: spectator
permission:
@@ -138,7 +138,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-tag-read-operations
_lte: X-Hasura-Scope-tag-read-operation
allow_aggregations: true
update_permissions:
- role: mythic_admin
@@ -152,13 +152,13 @@ update_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-tag-write-operations
_lte: X-Hasura-Scope-tag-write-operation
check:
_and:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-tag-write-operations
_lte: X-Hasura-Scope-tag-write-operation
- role: operation_admin
permission:
columns:
@@ -170,13 +170,13 @@ update_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-tag-write-operations
_lte: X-Hasura-Scope-tag-write-operation
check:
_and:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-tag-write-operations
_lte: X-Hasura-Scope-tag-write-operation
- role: operator
permission:
columns:
@@ -188,10 +188,10 @@ update_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-tag-write-operations
_lte: X-Hasura-Scope-tag-write-operation
check:
_and:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-tag-write-operations
_lte: X-Hasura-Scope-tag-write-operation
hasura-docker/metadata/databases/default/tables/public_task.yaml
+7 -7
View File
@@ -199,7 +199,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-task-read-operations
_lte: X-Hasura-Scope-task-read-operation
allow_aggregations: true
- role: operation_admin
permission:
@@ -261,7 +261,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-task-read-operations
_lte: X-Hasura-Scope-task-read-operation
allow_aggregations: true
- role: operator
permission:
@@ -323,7 +323,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-task-read-operations
_lte: X-Hasura-Scope-task-read-operation
allow_aggregations: true
- role: spectator
permission:
@@ -385,7 +385,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-task-read-operations
_lte: X-Hasura-Scope-task-read-operation
allow_aggregations: true
update_permissions:
- role: mythic_admin
@@ -399,7 +399,7 @@ update_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-task-write-operations
_lte: X-Hasura-Scope-task-write-operation
check: null
set:
comment_operator_id: x-hasura-User-Id
@@ -414,7 +414,7 @@ update_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-task-write-operations
_lte: X-Hasura-Scope-task-write-operation
check: null
set:
comment_operator_id: x-hasura-User-Id
@@ -429,7 +429,7 @@ update_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-task-write-operations
_lte: X-Hasura-Scope-task-write-operation
check: null
set:
comment_operator_id: x-hasura-User-Id
hasura-docker/metadata/databases/default/tables/public_taskartifact.yaml
+14 -14
View File
@@ -46,7 +46,7 @@ insert_permissions:
operation_id:
_eq: x-hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-task-write-operations
_lte: X-Hasura-Scope-task-write-operation
set:
operation_id: x-hasura-current-operation-id
columns:
@@ -70,7 +70,7 @@ insert_permissions:
operation_id:
_eq: x-hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-task-write-operations
_lte: X-Hasura-Scope-task-write-operation
set:
operation_id: x-hasura-current-operation-id
columns:
@@ -94,7 +94,7 @@ insert_permissions:
operation_id:
_eq: x-hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-task-write-operations
_lte: X-Hasura-Scope-task-write-operation
set:
operation_id: x-hasura-current-operation-id
columns:
@@ -137,11 +137,11 @@ select_permissions:
_eq: X-Hasura-current-operation-id
- _or:
- operation_id:
_in: X-Hasura-Scope-task-read-operations
_lte: X-Hasura-Scope-task-read-operation
- task:
callback:
operation_id:
_in: X-Hasura-Scope-task-read-operations
_lte: X-Hasura-Scope-task-read-operation
allow_aggregations: true
- role: operation_admin
permission:
@@ -171,11 +171,11 @@ select_permissions:
_eq: X-Hasura-current-operation-id
- _or:
- operation_id:
_in: X-Hasura-Scope-task-read-operations
_lte: X-Hasura-Scope-task-read-operation
- task:
callback:
operation_id:
_in: X-Hasura-Scope-task-read-operations
_lte: X-Hasura-Scope-task-read-operation
allow_aggregations: true
- role: operator
permission:
@@ -205,11 +205,11 @@ select_permissions:
_eq: X-Hasura-current-operation-id
- _or:
- operation_id:
_in: X-Hasura-Scope-task-read-operations
_lte: X-Hasura-Scope-task-read-operation
- task:
callback:
operation_id:
_in: X-Hasura-Scope-task-read-operations
_lte: X-Hasura-Scope-task-read-operation
allow_aggregations: true
- role: spectator
permission:
@@ -239,11 +239,11 @@ select_permissions:
_eq: X-Hasura-current-operation-id
- _or:
- operation_id:
_in: X-Hasura-Scope-task-read-operations
_lte: X-Hasura-Scope-task-read-operation
- task:
callback:
operation_id:
_in: X-Hasura-Scope-task-read-operations
_lte: X-Hasura-Scope-task-read-operation
allow_aggregations: true
update_permissions:
- role: mythic_admin
@@ -259,7 +259,7 @@ update_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-task-write-operations
_lte: X-Hasura-Scope-task-write-operation
check:
operation_id:
_eq: X-Hasura-current-operation-id
@@ -277,7 +277,7 @@ update_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-task-write-operations
_lte: X-Hasura-Scope-task-write-operation
check:
operation_id:
_eq: X-Hasura-current-operation-id
@@ -295,7 +295,7 @@ update_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-task-write-operations
_lte: X-Hasura-Scope-task-write-operation
check:
operation_id:
_eq: X-Hasura-current-operation-id
hasura-docker/metadata/databases/default/tables/public_token.yaml
+10 -10
View File
@@ -60,7 +60,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-response-read-operations
_lte: X-Hasura-Scope-response-read-operation
allow_aggregations: true
- role: operation_admin
permission:
@@ -92,7 +92,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-response-read-operations
_lte: X-Hasura-Scope-response-read-operation
allow_aggregations: true
- role: operator
permission:
@@ -124,7 +124,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-response-read-operations
_lte: X-Hasura-Scope-response-read-operation
allow_aggregations: true
- role: spectator
permission:
@@ -156,7 +156,7 @@ select_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-response-read-operations
_lte: X-Hasura-Scope-response-read-operation
allow_aggregations: true
update_permissions:
- role: mythic_admin
@@ -185,13 +185,13 @@ update_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-response-write-operations
_lte: X-Hasura-Scope-response-write-operation
check:
_and:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-response-write-operations
_lte: X-Hasura-Scope-response-write-operation
- role: operation_admin
permission:
columns:
@@ -218,13 +218,13 @@ update_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-response-write-operations
_lte: X-Hasura-Scope-response-write-operation
check:
_and:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-response-write-operations
_lte: X-Hasura-Scope-response-write-operation
- role: operator
permission:
columns:
@@ -251,10 +251,10 @@ update_permissions:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-response-write-operations
_lte: X-Hasura-Scope-response-write-operation
check:
_and:
- operation_id:
_eq: X-Hasura-current-operation-id
- operation_id:
_in: X-Hasura-Scope-response-write-operations
_lte: X-Hasura-Scope-response-write-operation
mythic-docker/src/authentication/mythicjwt/scopes.go
+2 -7
View File
@@ -280,20 +280,15 @@ func HasuraScopeRequirements() []HasuraScopeRequirement {
requirements := make([]HasuraScopeRequirement, 0, len(scopeDefinitions))
for _, definition := range scopeDefinitions {
anchor := "operation"
suffix := "operations"
if definition.Resource == "apitoken" {
anchor = "user"
suffix = "users"
} else if definition.Resource == "operator" {
if definition.Resource == "apitoken" || definition.Resource == "operator" {
anchor = "operator"
suffix = "operators"
}
requirements = append(requirements, HasuraScopeRequirement{
Resource: definition.Resource,
Access: definition.Access,
Scope: definition.Name,
Anchor: anchor,
SessionClaim: fmt.Sprintf("x-hasura-scope-%s-%s-%s", definition.Resource, definition.Access, suffix),
SessionClaim: fmt.Sprintf("x-hasura-scope-%s-%s-%s", definition.Resource, definition.Access, anchor),
})
}
return requirements
mythic-docker/src/authentication/mythicjwt/scopes_test.go
+74
View File
@@ -194,3 +194,77 @@ func TestCanGrantAPITokenScopes(t *testing.T) {
})
}
}
func TestHasuraScopeRequirementsUseScalarClaims(t *testing.T) {
t.Parallel()
tests := []struct {
scope string
wantAnchor string
wantClaim string
blockedClaim string
}{
{
scope: SCOPE_FILE_READ,
wantAnchor: "operation",
wantClaim: "x-hasura-scope-file-read-operation",
blockedClaim: "x-hasura-scope-file-read-operations",
},
{
scope: SCOPE_APITOKEN_READ,
wantAnchor: "operator",
wantClaim: "x-hasura-scope-apitoken-read-operator",
blockedClaim: "x-hasura-scope-apitoken-read-users",
},
{
scope: SCOPE_OPERATOR_READ,
wantAnchor: "operator",
wantClaim: "x-hasura-scope-operator-read-operator",
blockedClaim: "x-hasura-scope-operator-read-operators",
},
{
scope: SCOPE_OPERATOR_WRITE,
wantAnchor: "operator",
wantClaim: "x-hasura-scope-operator-write-operator",
},
{
scope: SCOPE_OPERATION_WRITE,
wantAnchor: "operation",
wantClaim: "x-hasura-scope-operation-write-operation",
},
}
for _, tt := range tests {
tt := tt
t.Run(tt.wantClaim, func(t *testing.T) {
t.Parallel()
var requirement HasuraScopeRequirement
found := false
for _, possibleRequirement := range HasuraScopeRequirements() {
if possibleRequirement.Scope == tt.scope && possibleRequirement.Anchor == tt.wantAnchor {
requirement = possibleRequirement
found = true
break
}
}
if !found {
t.Fatalf("missing Hasura scope requirement for %s with anchor %s", tt.scope, tt.wantAnchor)
}
if requirement.Anchor != tt.wantAnchor {
t.Fatalf("Anchor = %q, want %q", requirement.Anchor, tt.wantAnchor)
}
if requirement.SessionClaim != tt.wantClaim {
t.Fatalf("SessionClaim = %q, want %q", requirement.SessionClaim, tt.wantClaim)
}
if requirement.SessionClaim == tt.blockedClaim {
t.Fatalf("SessionClaim kept plural list claim %q", tt.blockedClaim)
}
})
}
for _, requirement := range HasuraScopeRequirements() {
if requirement.Anchor == "user" {
t.Fatalf("Hasura scope requirement kept user anchor: %+v", requirement)
}
}
}
mythic-docker/src/webserver/controllers/hasura_claims.go
+9 -36
View File
@@ -19,6 +19,9 @@ var (
hasuraClaimsCacheLock = sync.RWMutex{}
)
// Scope claims are numeric gates: positive IDs pass when scoped and fail against "0" otherwise.
const hasuraScopeAllowedID = "2147483647"
func UpdateHasuraClaims(c *gin.Context, invalidateAllOthers bool) error {
if invalidateAllOthers {
hasuraClaimsCacheLock.Lock()
@@ -41,8 +44,6 @@ func UpdateHasuraClaims(c *gin.Context, invalidateAllOthers bool) error {
hasuraClaims := make(map[string]interface{})
//logging.LogTrace("JWT claims", "claims", claims, "user", claims.UserID)
hasuraClaims["x-hasura-user-id"] = fmt.Sprintf("%d", claims.UserID)
hasuraOperations := []string{}
hasuraAdminOperations := []string{}
user, err := database.GetUserFromID(claims.UserID)
//logging.LogTrace("user info", "user", user)
if err != nil {
@@ -50,11 +51,9 @@ func UpdateHasuraClaims(c *gin.Context, invalidateAllOthers bool) error {
return err
}
c.Set(authentication.ContextKeyUsername, user.Username)
if !user.CurrentOperationID.Valid {
hasuraClaims["x-hasura-current-operation-id"] = "0"
hasuraClaims["x-hasura-current_operation"] = "null"
hasuraClaims["x-hasura-role"] = "spectator"
}
hasuraClaims["x-hasura-current-operation-id"] = "0"
hasuraClaims["x-hasura-current_operation"] = "null"
hasuraClaims["x-hasura-role"] = "spectator"
if claims.APITokensID > 0 {
hasuraClaims["x-hasura-apitokens-id"] = fmt.Sprintf("%d", claims.APITokensID)
} else {
@@ -68,10 +67,6 @@ func UpdateHasuraClaims(c *gin.Context, invalidateAllOthers bool) error {
for _, operatorOperation := range *allOperations {
//logging.LogInfo("operatorOperation info", "operatorOperation", operatorOperation)
if operatorOperation.CurrentOperation.AdminID == claims.UserID {
hasuraAdminOperations = append(hasuraAdminOperations, fmt.Sprintf("%d", operatorOperation.CurrentOperation.ID))
}
hasuraOperations = append(hasuraOperations, fmt.Sprintf("%d", operatorOperation.CurrentOperation.ID))
if operatorOperation.CurrentOperation.ID == int(user.CurrentOperationID.Int64) {
hasuraClaims["x-hasura-role"] = operatorOperation.ViewMode
if hasuraClaims["x-hasura-role"] == "lead" {
@@ -86,31 +81,10 @@ func UpdateHasuraClaims(c *gin.Context, invalidateAllOthers bool) error {
if user.Admin {
hasuraClaims["x-hasura-role"] = "mythic_admin"
}
hasuraClaims["x-hasura-operations"] = fmt.Sprintf("{%s}", strings.Join(hasuraOperations, ","))
hasuraClaims["x-hasura-admin-operations"] = fmt.Sprintf("{%s}", strings.Join(hasuraAdminOperations, ","))
hasuraOperatorIDs := []string{}
for _, requirement := range mythicjwt.HasuraScopeRequirements() {
claimValue := "{}"
claimValue := "0"
if mythicjwt.AllowsScope(claims.Scopes, requirement.Scope) {
switch requirement.Anchor {
case "user":
claimValue = fmt.Sprintf("{%d}", claims.UserID)
case "operator":
if len(hasuraOperatorIDs) == 0 {
operatorIDs := []int{}
err = database.DB.Select(&operatorIDs, `SELECT id FROM operator`)
if err != nil {
logging.LogError(err, "Failed to get operator IDs for hasura scope claims")
return err
}
for _, operatorID := range operatorIDs {
hasuraOperatorIDs = append(hasuraOperatorIDs, fmt.Sprintf("%d", operatorID))
}
}
claimValue = fmt.Sprintf("{%s}", strings.Join(hasuraOperatorIDs, ","))
default:
claimValue = fmt.Sprintf("{%s}", strings.Join(hasuraOperations, ","))
}
claimValue = hasuraScopeAllowedID
}
logging.LogInfo("hasura claims", "claim", hasuraClaims)
hasuraClaims[requirement.SessionClaim] = claimValue
@@ -129,8 +103,7 @@ func GetHasuraClaims(c *gin.Context) {
x-hasura-current-operation-id <-- operation id ("0" if not set)
x-hasura-role <-- view mode for current operation
operator, spectator, operation_admin, mythic_admin
x-hasura-operations <-- "{" + "," separated list of operation ids, + "}"
x-hasura-admin-operations <-- "{" + "," separated list of operation ids, + "}"
x-hasura-scope-<resource>-<access>-<anchor> <-- max int if scoped, otherwise "0"
*/
//logging.LogDebug("hasura webhook info", "headers", c.Request.Header)
input, ok := c.Get("hasura")