feat(signals): Add support for subscribeSignals ACL (#2500)

Author: VerstraeteBert

cognite/client/data_classes/capabilities.py

@@ -1196,6 +1196,21 @@ class Scope:
         SpaceID = SpaceIDScope
 
 
+@dataclass
+class SubscribeSignalsAcl(Capability):
+    _capability_name = "subscribeSignalsAcl"
+    actions: Sequence[Action]
+    scope: AllScope | CurrentUserScope
+
+    class Action(Capability.Action):  # type: ignore [misc]
+        Read = "READ"
+        Write = "WRITE"
+
+    class Scope:
+        All = AllScope
+        CurrentUser = CurrentUserScope
+
+
 @dataclass
 class DataModelInstancesAcl(Capability):
     _capability_name = "dataModelInstancesAcl"

scripts/toolkit/modules/access/auth/readonly.Group.yaml

@@ -238,6 +238,11 @@ capabilities:
       - READ
       scope:
         all: {}
+  - subscribeSignalsAcl:
+      actions:
+      - READ
+      scope:
+        all: {}
   - templateGroupsAcl:
       actions:
       - READ

scripts/toolkit/modules/access/auth/readwrite.Group.yaml

@@ -293,6 +293,12 @@ capabilities:
       - DELETE
       scope:
         all: {}
+  - subscribeSignalsAcl:
+      actions:
+      - WRITE
+      - READ
+      scope:
+        all: {}
   - templateGroupsAcl:
       actions:
       - WRITE

tests/tests_unit/test_data_classes/test_capabilities.py

@@ -141,6 +141,8 @@ def all_acls():
                 "scope": {"spaceIdScope": {"spaceIds": ["space-1", "space-2", "prod-space"]}},
             }
         },
+        {"subscribeSignalsAcl": {"actions": ["READ", "WRITE"], "scope": {"all": {}}}},
+        {"subscribeSignalsAcl": {"actions": ["READ"], "scope": {"currentuserscope": {}}}},
         {"templateGroupsAcl": {"actions": ["READ", "WRITE"], "scope": {"all": {}}}},
         {"templateGroupsAcl": {"actions": ["READ", "WRITE"], "scope": {"datasetScope": {"ids": ["1", "42"]}}}},
         {"templateInstancesAcl": {"actions": ["READ", "WRITE"], "scope": {"datasetScope": {"ids": ["4", "365"]}}}},