docker-infisical/backend/src/validation/role.ts

import { z } from "zod";

export const CreateRoleSchema = z.object({
  body: z.object({
    slug: z.string(),
    name: z.string(),
    description: z.string().optional(),
    workspaceId: z.string().optional(),
    orgId: z.string(),
    permissions: z
      .object({
        subject: z.string(),
        action: z.string(),
        condition: z.record(z.union([z.string(), z.number()])).optional()
      })
      .array()
  })
});

export const UpdateRoleSchema = z.object({
  params: z.object({
    id: z.string()
  }),
  body: z.object({
    slug: z.string().optional(),
    name: z.string().optional(),
    description: z.string().optional(),
    workspaceId: z.string().optional(),
    orgId: z.string(),
    permissions: z
      .object({
        subject: z.string(),
        action: z.string(),
        condition: z.record(z.union([z.string(), z.number()])).optional()
      })
      .array()
      .optional()
  })
});

export const DeleteRoleSchema = z.object({
  params: z.object({
    id: z.string().trim()
  })
});

export const GetRoleSchema = z.object({
  query: z.object({
    workspaceId: z.string().trim().optional(),
    orgId: z.string().trim()
  })
});

export const GetUserPermission = z.object({
  params: z.object({
    orgId: z.string().trim()
  })
});

export const GetUserProjectPermission = z.object({
  params: z.object({
    workspaceId: z.string().trim()
  })
});