[CP-168] Add requires_all_permissions extension for permissions (#115)

Author: Robert-Stam

gen/go/qdrant/cloud/common/v1/common.pb.go

@@ -25,6 +25,8 @@ REQUIRES_AUTHENTICATION_FIELD_NUMBER: _ClassVar[int]
 requires_authentication: _descriptor.FieldDescriptor
 SUPPORTED_ACTOR_TYPES_FIELD_NUMBER: _ClassVar[int]
 supported_actor_types: _descriptor.FieldDescriptor
+REQUIRES_ALL_PERMISSIONS_FIELD_NUMBER: _ClassVar[int]
+requires_all_permissions: _descriptor.FieldDescriptor
 
 class Version(_message.Message):
     __slots__ = ("major", "minor", "patch")

gen/python/qdrant/cloud/common/v1/common_pb2.py

@@ -146,7 +146,9 @@ export enum ActorType {
 export declare const ActorTypeSchema: GenEnum<ActorType>;
 
 /**
- * A list of permissions which ALL need to be met by the current user.
+ * A list of permissions which need to be met by the current user.
+ * If `requires_all_permissions` is true (or missing): ALL of the permissions should be met (and)
+ * If `requires_all_permissions` is false: ANY-OF the permissions should be met (or)
  *
  * @generated from extension: repeated string permissions = 50001;
  */
@@ -176,3 +178,11 @@ export declare const requires_authentication: GenExtension<MethodOptions, boolea
  */
 export declare const supported_actor_types: GenExtension<MethodOptions, ActorType[]>;
 
+/**
+ * If set to true the provided permissions are ALL (and)
+ * if set to false the provided permissions are ANY-OF (or).
+ *
+ * @generated from extension: bool requires_all_permissions = 50005;
+ */
+export declare const requires_all_permissions: GenExtension<MethodOptions, boolean>;
+

gen/python/qdrant/cloud/common/v1/common_pb2.pyi

@@ -10,7 +10,7 @@ import { file_google_protobuf_descriptor } from "@bufbuild/protobuf/wkt";
  * Describes the file qdrant/cloud/common/v1/common.proto.
  */
 export const file_qdrant_cloud_common_v1_common = /*@__PURE__*/
-  fileDesc("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", [file_buf_validate_validate, file_google_protobuf_descriptor]);
+  fileDesc("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", [file_buf_validate_validate, file_google_protobuf_descriptor]);
 
 /**
  * Describes the message qdrant.cloud.common.v1.Version.
@@ -48,7 +48,9 @@ export const ActorType = /*@__PURE__*/
   tsEnum(ActorTypeSchema);
 
 /**
- * A list of permissions which ALL need to be met by the current user.
+ * A list of permissions which need to be met by the current user.
+ * If `requires_all_permissions` is true (or missing): ALL of the permissions should be met (and)
+ * If `requires_all_permissions` is false: ANY-OF the permissions should be met (or)
  *
  * @generated from extension: repeated string permissions = 50001;
  */
@@ -82,3 +84,12 @@ export const requires_authentication = /*@__PURE__*/
 export const supported_actor_types = /*@__PURE__*/
   extDesc(file_qdrant_cloud_common_v1_common, 3);
 
+/**
+ * If set to true the provided permissions are ALL (and)
+ * if set to false the provided permissions are ANY-OF (or).
+ *
+ * @generated from extension: bool requires_all_permissions = 50005;
+ */
+export const requires_all_permissions = /*@__PURE__*/
+  extDesc(file_qdrant_cloud_common_v1_common, 4);
+

gen/typescript/qdrant/cloud/common/v1/common_pb.d.ts

@@ -7,7 +7,9 @@ import "google/protobuf/descriptor.proto";
 
 // The extension for adding permissions to the system
 extend google.protobuf.MethodOptions {
-  // A list of permissions which ALL need to be met by the current user.
+  // A list of permissions which need to be met by the current user.
+  // If `requires_all_permissions` is true (or missing): ALL of the permissions should be met (and)
+  // If `requires_all_permissions` is false: ANY-OF the permissions should be met (or)
   repeated string permissions = 50001;
 }
 
@@ -41,6 +43,14 @@ extend google.protobuf.MethodOptions {
   ];
 }
 
+// The extension for switching `permissions` from ALL to ANY-OF
+// If the extension is missing 'true' will be used (defaulting to ALL).
+extend google.protobuf.MethodOptions {
+  // If set to true the provided permissions are ALL (and)
+  // if set to false the provided permissions are ANY-OF (or).
+  bool requires_all_permissions = 50005;
+}
+
 // ActorType specifies the type of actor that can call a method.
 enum ActorType {
   // Default, unspecified actor type. Should generally not be used explicitly in options