cmind/permissions/v1/types.proto
Package: cmind.permissions.v1
Enums
SubjectType
| Value | Number | Description |
|---|
SUBJECT_TYPE_UNSPECIFIED | 0 | |
SUBJECT_TYPE_USER | 1 | |
SUBJECT_TYPE_GROUP | 2 | |
DeploymentRole
DeploymentRole is the union of user-managed roles across deployment resources. Per-resource validity (enforced server-side): rag_deployment: ADMIN, READER, WRITER model_deployment / external_model: ADMIN, DIRECT_INVOKER
| Value | Number | Description |
|---|
DEPLOYMENT_ROLE_UNSPECIFIED | 0 | |
DEPLOYMENT_ROLE_ADMIN | 1 | |
DEPLOYMENT_ROLE_READER | 2 | |
DEPLOYMENT_ROLE_WRITER | 3 | |
DEPLOYMENT_ROLE_DIRECT_INVOKER | 4 | |
Messages
Subject
| Field | Type | Number | Description |
|---|
type | SubjectType | 1 | |
id | string | 2 | |
DeploymentPermission
| Field | Type | Number | Description |
|---|
subject | Subject | 1 | |
role | DeploymentRole | 2 | |
metadata | SubjectMetadata | 3 | metadata is populated by List responses only; writes ignore it. Absent when the referenced user or group can no longer be resolved (deleted from the identity provider) — clients should fall back to displaying the bare subject id. |
| Field | Type | Number | Description |
|---|
user | UserMetadata | 1 | |
group | GroupMetadata | 2 | |
Oneof kind: one of user, group
| Field | Type | Number | Description |
|---|
username | string | 1 | |
email | string | 2 | |
| Field | Type | Number | Description |
|---|
name | string | 1 | |