From e6cc42abea68b5d28981fb0f5639fb7a0bacdcbe Mon Sep 17 00:00:00 2001
From: dewniMW <dewni.matheesha@gmail.com>
Date: Wed, 3 Jan 2024 11:57:24 +0530
Subject: [PATCH] Add app sharing API resource access control configs

---
 .../resources/system-api-resource.xml           |  9 +++++++++
 .../resources/system-api-resource.xml.j2        |  9 +++++++++
 .../resources/resource-access-control-v2.xml    | 17 +++++++++++++++++
 .../resources/resource-access-control-v2.xml.j2 | 17 +++++++++++++++++
 4 files changed, 52 insertions(+)

diff --git a/features/api-resource-mgt/org.wso2.carbon.identity.api.resource.mgt.server.feature/resources/system-api-resource.xml b/features/api-resource-mgt/org.wso2.carbon.identity.api.resource.mgt.server.feature/resources/system-api-resource.xml
index 3f259d643d5b..306535e65bc1 100644
--- a/features/api-resource-mgt/org.wso2.carbon.identity.api.resource.mgt.server.feature/resources/system-api-resource.xml
+++ b/features/api-resource-mgt/org.wso2.carbon.identity.api.resource.mgt.server.feature/resources/system-api-resource.xml
@@ -35,6 +35,15 @@
             <Scope displayName="Delete API Resource" name="internal_api_resource_delete"/>
         </Scopes>
     </APIResource>
+    <APIResource name="Shared Application Management API" identifier="/api/server/v1/applications/share"
+                 requiresAuthorization="true"
+                 description="API representation of the Shared Application Management API" type="TENANT_ADMIN">
+        <Scopes>
+            <Scope displayName="Create Shared Application" name="internal_shared_application_create"/>
+            <Scope displayName="View Shared Application" name="internal_shared_application_view"/>
+            <Scope displayName="Delete Shared Application" name="internal_shared_application_delete"/>
+        </Scopes>
+    </APIResource>
     <APIResource name="Application Management API" identifier="/api/server/v1/applications"
                  requiresAuthorization="true"
                  description="API representation of the Application Management API" type="TENANT_ADMIN">
diff --git a/features/api-resource-mgt/org.wso2.carbon.identity.api.resource.mgt.server.feature/resources/system-api-resource.xml.j2 b/features/api-resource-mgt/org.wso2.carbon.identity.api.resource.mgt.server.feature/resources/system-api-resource.xml.j2
index a950313e6a76..6984795ed99f 100644
--- a/features/api-resource-mgt/org.wso2.carbon.identity.api.resource.mgt.server.feature/resources/system-api-resource.xml.j2
+++ b/features/api-resource-mgt/org.wso2.carbon.identity.api.resource.mgt.server.feature/resources/system-api-resource.xml.j2
@@ -44,6 +44,15 @@
             <Scope displayName="Delete API Resource" name="internal_api_resource_delete"/>
         </Scopes>
     </APIResource>
+    <APIResource name="Shared Application Management API" identifier="/api/server/v1/applications/share"
+                 requiresAuthorization="true"
+                 description="API representation of the Shared Application Management API" type="TENANT_ADMIN">
+        <Scopes>
+            <Scope displayName="Create Shared Application" name="internal_shared_application_create"/>
+            <Scope displayName="View Shared Application" name="internal_shared_application_view"/>
+            <Scope displayName="Delete Shared Application" name="internal_shared_application_delete"/>
+        </Scopes>
+    </APIResource>
     <APIResource name="Application Management API" identifier="/api/server/v1/applications"
                  requiresAuthorization="true"
                  description="API representation of the Application Management API" type="TENANT_ADMIN">
diff --git a/features/identity-core/org.wso2.carbon.identity.core.server.feature/resources/resource-access-control-v2.xml b/features/identity-core/org.wso2.carbon.identity.core.server.feature/resources/resource-access-control-v2.xml
index 79742392d8d6..61dd0ecc0426 100644
--- a/features/identity-core/org.wso2.carbon.identity.core.server.feature/resources/resource-access-control-v2.xml
+++ b/features/identity-core/org.wso2.carbon.identity.core.server.feature/resources/resource-access-control-v2.xml
@@ -787,6 +787,23 @@
         <Scopes>internal_keystore_update</Scopes>
     </Resource>
 
+    <!-- Shared Application Management API -->
+    <Resource context="(.*)/api/server/v1/applications/(.*)/share" secured="true" http-method="GET">
+        <Scopes>internal_shared_application_view</Scopes>
+    </Resource>
+    <Resource context="(.*)/api/server/v1/applications/(.*)/shared-apps" secured="true" http-method="GET">
+        <Scopes>internal_shared_application_view</Scopes>
+    </Resource>
+    <Resource context="(.*)/api/server/v1/applications/(.*)/share" secured="true" http-method="POST">
+        <Scopes>internal_shared_application_create</Scopes>
+    </Resource>
+    <Resource context="(.*)/api/server/v1/applications/(.*)/shared-apps" secured="true" http-method="DELETE">
+        <Scopes>internal_shared_application_delete</Scopes>
+    </Resource>
+    <Resource context="(.*)/api/server/v1/applications/(.*)/share/(.*)" secured="true" http-method="DELETE">
+        <Scopes>internal_shared_application_delete</Scopes>
+    </Resource>
+
     <!-- [Organization] Application Management API -->
     <Resource context="(.*)/o/api/server/v1/applications(.*)" secured="true" http-method="PATCH, PUT">
         <Scopes>internal_org_application_mgt_update</Scopes>
diff --git a/features/identity-core/org.wso2.carbon.identity.core.server.feature/resources/resource-access-control-v2.xml.j2 b/features/identity-core/org.wso2.carbon.identity.core.server.feature/resources/resource-access-control-v2.xml.j2
index 8b382c7285ce..32d47005ea83 100644
--- a/features/identity-core/org.wso2.carbon.identity.core.server.feature/resources/resource-access-control-v2.xml.j2
+++ b/features/identity-core/org.wso2.carbon.identity.core.server.feature/resources/resource-access-control-v2.xml.j2
@@ -809,6 +809,23 @@
             <Scopes>internal_keystore_update</Scopes>
         </Resource>
 
+        <!-- Shared Application Management API -->
+        <Resource context="(.*)/api/server/v1/applications/(.*)/share" secured="true" http-method="GET">
+            <Scopes>internal_shared_application_view</Scopes>
+        </Resource>
+        <Resource context="(.*)/api/server/v1/applications/(.*)/shared-apps" secured="true" http-method="GET">
+            <Scopes>internal_shared_application_view</Scopes>
+        </Resource>
+        <Resource context="(.*)/api/server/v1/applications/(.*)/share" secured="true" http-method="POST">
+            <Scopes>internal_shared_application_create</Scopes>
+        </Resource>
+        <Resource context="(.*)/api/server/v1/applications/(.*)/shared-apps" secured="true" http-method="DELETE">
+            <Scopes>internal_shared_application_delete</Scopes>
+        </Resource>
+        <Resource context="(.*)/api/server/v1/applications/(.*)/share/(.*)" secured="true" http-method="DELETE">
+            <Scopes>internal_shared_application_delete</Scopes>
+        </Resource>
+
         <!-- [Organization] Application Management API -->
         <Resource context="(.*)/o/api/server/v1/applications(.*)" secured="true" http-method="PATCH, PUT">
             <Scopes>internal_org_application_mgt_update</Scopes>