feat(rbac): ee

Author: jordan-umusu

frontend/src/client/schemas.gen.ts

@@ -7960,6 +7960,7 @@ export const $FeatureFlag = {
     "case-durations",
     "case-tasks",
     "case-triggers",
+    "rbac",
   ],
   title: "FeatureFlag",
   description: "Feature flag enum.",

frontend/src/client/services.gen.ts

@@ -8362,6 +8362,28 @@ export const vcsGetGithubAppCredentialsStatus =
     })
   }
 
+/**
+ * Get My Scopes
+ * Get the current user's effective scopes.
+ *
+ * Returns a breakdown of scopes by source:
+ * - org_role_scopes: From org membership role (OWNER/ADMIN/MEMBER)
+ * - workspace_role_scopes: From workspace membership role (if in workspace context)
+ * - group_scopes: From group memberships and their role assignments (EE only)
+ * - user_role_scopes: From direct user role assignments (EE only)
+ *
+ * The combined `scopes` list is what's actually used for authorization.
+ * @returns UserScopesRead Successful Response
+ * @throws ApiError
+ */
+export const usersGetMyScopes =
+  (): CancelablePromise<UsersGetMyScopesResponse> => {
+    return __request(OpenAPI, {
+      method: "GET",
+      url: "/users/me/scopes",
+    })
+  }
+
 /**
  * List Scopes
  * List scopes available to the organization.
@@ -9024,28 +9046,6 @@ export const rbacDeleteUserAssignment = (
   })
 }
 
-/**
- * Get My Scopes
- * Get the current user's effective scopes.
- *
- * Returns a breakdown of scopes by source:
- * - org_role_scopes: From org membership role (OWNER/ADMIN/MEMBER)
- * - workspace_role_scopes: From workspace membership role (if in workspace context)
- * - group_scopes: From group memberships and their role assignments
- * - user_role_scopes: From direct user role assignments
- *
- * The combined `scopes` list is what's actually used for authorization.
- * @returns UserScopesRead Successful Response
- * @throws ApiError
- */
-export const usersGetMyScopes =
-  (): CancelablePromise<UsersGetMyScopesResponse> => {
-    return __request(OpenAPI, {
-      method: "GET",
-      url: "/users/me/scopes",
-    })
-  }
-
 /**
  * Users:Current User
  * @returns UserRead Successful Response

frontend/src/client/types.gen.ts

@@ -2419,6 +2419,7 @@ export type FeatureFlag =
   | "case-durations"
   | "case-tasks"
   | "case-triggers"
+  | "rbac"
 
 /**
  * Response model for feature flags.
@@ -8903,6 +8904,8 @@ export type VcsDeleteGithubAppCredentialsResponse = void
 export type VcsGetGithubAppCredentialsStatusResponse =
   GitHubAppCredentialsStatus
 
+export type UsersGetMyScopesResponse = UserScopesRead
+
 export type RbacListScopesData = {
   /**
    * Include system/registry scopes
@@ -9080,8 +9083,6 @@ export type RbacDeleteUserAssignmentData = {
 
 export type RbacDeleteUserAssignmentResponse = void
 
-export type UsersGetMyScopesResponse = UserScopesRead
-
 export type UsersUsersCurrentUserResponse = UserRead
 
 export type UsersUsersPatchCurrentUserData = {
@@ -13267,6 +13268,16 @@ export type $OpenApiTs = {
       }
     }
   }
+  "/users/me/scopes": {
+    get: {
+      res: {
+        /**
+         * Successful Response
+         */
+        200: UserScopesRead
+      }
+    }
+  }
   "/rbac/scopes": {
     get: {
       req: RbacListScopesData
@@ -13621,16 +13632,6 @@ export type $OpenApiTs = {
       }
     }
   }
-  "/users/me/scopes": {
-    get: {
-      res: {
-        /**
-         * Successful Response
-         */
-        200: UserScopesRead
-      }
-    }
-  }
   "/users/me": {
     get: {
       res: {

packages/tracecat-ee/tracecat_ee/rbac/__init__.py

@@ -0,0 +1 @@
+"""Enterprise Edition RBAC management module."""