c8b1cc0046
* Add Action Search render-decision API for ABAC file actions * Add render-permission store, client method, and useRenderPermission hook * Wire upload/download render decisions into UI with invalidation and e2e coverage * Work around false-literal bug in ABAC file-access e2e specs * add related schemas and fix format * remove redundant comment in upload file enforcement test * Fix stale post-list ETags and missing live updates after ABAC policy or attribute changes * Enhance channel access control event handling by marking non-current channels stale for lazy reconciliation * Refactor ETag handling and improve permission policy checks in channel and post APIs * Remove unnecessary blank line in access control policy update function * Align action search API with AuthZEN spec: add results list, discovery mode, reserve subject/page fields * Nest ActionSearchResult to AuthZEN canonical shape and apply code review fixes * Refactor action search request type formatting and update test loop for clarity * Implement ABAC permission checks for channel access in searchAccessControlDecisionActions * Scope ABAC render ETag to target channel, cache policy and CPA epochs in localcachelayer, and fail-closed on unknown resource types * add stub for ETag cache invalidation in access control policy tests * Jitter render reconcile on system-scoped permission policy updates to avoid a thundering herd * Make the ABAC ETag epochs deletion-sensitive by folding a row count into each * Address web app review: reuse RESET_POSTS_IN_CHANNEL, batch decision fetches, and simplify the upload affordance * Split the render-decision reducer per key and scope invalidation stamps per resource * MM-68283 - Use aria-disabled on the policy-restricted upload button so its tooltip still opens * MM-68283 - Cover live post redaction without reload and use native Playwright assertions * MM-68283 - Trim comments to the load-bearing reasons and drop dead test fixture fields * MM-68283 - Refetch the channel in view after a policy change instead of relying on a remount * MM-68283 - Apply a refetched post whose file metadata was redacted or restored * MM-68283 - Require metadata on both sides before treating a post's redaction state as changed * Keep the ABAC render caches and materialized attribute view in step with every attribute write * Restructure the ABAC file-permission e2e specs and cover upload enforcement server-side --------- Co-authored-by: Mattermost Build <build@mattermost.com> Co-authored-by: Harshil Sharma <harshilsharma63@gmail.com>
Mattermost API Documentation
This repository holds the API reference documentation for Mattermost available at https://developers.mattermost.com/api-reference.
The Mattermost API reference uses the OpenAPI standard and the ReDoc document generator.
All documentation is available under the terms of a Creative Commons License.
Contributing
We're accepting pull requests! See something that could be documented better or is missing documentation? Make a PR and we'll gladly accept it.
All the documentation is written in YAML and found in the v4/source directories. APIv4 documentation is in the v4 directory. APIs for Playbooks are retrieved from GitHub at build time and integrated into the final YAML file.
- When adding a new route, please add it to the correct file. For example, a channel route will go in channels.yaml.
- To add a new tag, please do so in introduction.yaml
- Definitions should be added to definitions.yaml
There is no strict style guide but please try to follow the example of the existing documentation.
To build the full YAML, run make build and it will be output to v4/html/static/mattermost-openapi-v4.yaml. This will also check syntax using swagger-cli.
To test locally, run make build, make run and navigate to http://127.0.0.1:8080. For any updates to the source files, re-run the same commands.
Deployment
Deployment is handled automatically by our Github Actions. When a pull request is merged, it will automatically be deployed to https://developers.mattermost.com/api-reference.