package apiv1

import "code.secondbit.org/scopes.hg/types"

var (
	// ScopeViewPushToken is a Scope that grants access to viewing pushTokens for
	// Devices.
	ScopeViewPushToken = scopeTypes.Scope{
		ID:          "https://scopes.useducky.com/devices/pushToken/view",
		Name:        "View device push tokens.",
		Description: "View the push tokens that allow sending messages and notifications to your device. This can be used to force your device to open links, and should be granted with extreme caution.",
	}

	// ScopeViewDevices is a Scope that grants access to viewing the Devices
	// that belong to a user.
	ScopeViewDevices = scopeTypes.Scope{
		ID:          "https://scopes.useducky.com/devices/view",
		Name:        "View devices.",
		Description: "View the devices that are associated with your account.",
	}

	// ScopeImport is a Scope that grants access to bulk importing Devices. It grants
	// what equates to admin permissions, including the ability to create Devices for
	// other users, and thus should be granted with extreme caution.
	ScopeImport = scopeTypes.Scope{
		ID:          "https://scopes.useducky.com/devices/import",
		Name:        "Import devices.",
		Description: "Import devices into the system, including creating devices for other users. This should only ever be granted to system resources.",
	}

	// ScopeCreateOtherUserDevices is a Scope that grants the user the ability to create
	// Devices with an Owner property that doesn't match the authenticated user's ID.
	ScopeCreateOtherUserDevices = scopeTypes.Scope{
		ID:          "https://scopes.useducky.com/devices/otherUser/create",
		Name:        "Create devices for other users.",
		Description: "Create devices like usual, but make a different user the owner of the device.",
	}

	// ScopeUpdateOtherUserDevices is a Scope that grants the user the ability to update
	// Devices with an Owner property that doesn't match the authenticated user's ID.
	ScopeUpdateOtherUserDevices = scopeTypes.Scope{
		ID:          "https://scopes.useducky.com/devices/otherUser/update",
		Name:        "Update devices for other users.",
		Description: "Update devices like usual, but don't check if you're the owner of the device.",
	}

	// ScopeUpdateLastSeen is a Scope that grants the user the ability to update the
	// LastSeen property of their Devices.
	ScopeUpdateLastSeen = scopeTypes.Scope{
		ID:          "https://scopes.useducky.com/devices/lastSeen/update",
		Name:        "Update when a device was last seen.",
		Description: "Update the timestamp tracking when a device was last seen.",
	}
)