fix(specs): add ACL to missing endpoints

eslint/src/rules/validACL.ts

@@ -1,7 +1,7 @@
 // @ts-ignore
 import { createRule } from 'eslint-plugin-yml/lib/utils';
 
-import { isPairWithKey, isScalar } from '../utils.js';
+import { isPairWithKey, isPairWithValue, isScalar } from '../utils.js';
 
 const ACLs = [
   'search',
@@ -23,12 +23,13 @@ const ACLs = [
 export const validACL = createRule('validACL', {
   meta: {
     docs: {
-      description: 'x-acl enum must contains valid Algolia ACLs',
+      description: 'x-acl enum must be set and contain valid Algolia ACLs',
       categories: null,
       extensionRule: false,
       layout: false,
     },
     messages: {
+      missingACL: 'x-acl is missing',
       validString: 'is not a string',
       validACL: `{{entry}} is not a valid Algolia ACL, must be one of: ${ACLs.join(', ')}.`,
       validArray: 'is not an array of string',
@@ -43,6 +44,41 @@ export const validACL = createRule('validACL', {
 
     return {
       YAMLPair(node): void {
+        const spec = context.getFilename().match(/specs\/([a-z-]+?)\//)?.[1];
+        if (!spec) {
+          return;
+        }
+        if (spec === 'monitoring') {
+          // monitoring uses a special API key and doesn't need ACLs
+          return;
+        }
+
+        if (spec === 'crawler') {
+          // no clients are generated for the crawler API
+          return;
+        }
+
+        // if we find then prop operationId, there must be x-acl on the same level
+        if (isPairWithKey(node, 'operationId')) {
+          const hasACL = node.parent.pairs.some((item: any) => isPairWithKey(item, 'x-acl'));
+
+          // ignore custom helpers
+          if (isPairWithValue(node, 'customGet') || isPairWithValue(node, 'customPost') || isPairWithValue(node, 'customPut') || isPairWithValue(node, 'customDelete')) {
+            return;
+          }
+
+
+          if (!hasACL) {
+            context.report({
+              node: node as any,
+              messageId: 'missingACL',
+            });
+          }
+
+          return;
+        }
+
+        // check the validity of x-acl
         if (!isPairWithKey(node, 'x-acl')) {
           return;
         }

eslint/tests/validACL.test.ts

@@ -30,6 +30,16 @@ nested:
     ],
     invalid: [
       {
+       filename: 'api-client-automation/specs/search/path/test.yml',
+        code: `
+post:
+  operationId: test
+  description: Test endpoint without ACL
+`,
+        errors: [{ messageId: 'missingACL' }],
+      },
+      {
+        filename: 'api-client-automation/specs/search/path/test.yml',
         code: `
 x-acl:
   - notACL
@@ -38,6 +48,7 @@ x-acl:
         errors: [{ messageId: 'validACL' }],
       },
       {
+        filename: 'api-client-automation/specs/search/path/test.yml',
         code: `
 nested:
   inside:
@@ -48,12 +59,14 @@ nested:
         errors: [{ messageId: 'validACL' }],
       },
       {
+        filename: 'api-client-automation/specs/search/path/test.yml',
         code: `
 x-acl: notList
     `,
         errors: [{ messageId: 'validArray' }],
       },
       {
+        filename: 'api-client-automation/specs/search/path/test.yml',
         code: `
 x-acl:
   - ['search']

specs/common/helpers/setClientApiKey.yml

@@ -2,6 +2,7 @@ method:
   get:
     x-helper: true
     x-asynchronous-helper: false
+    x-acl: []
     tags:
       - Api Key
     operationId: setClientApiKey

specs/composition/helpers/waitForCompositionTask.yml

@@ -4,6 +4,12 @@ method:
     tags:
       - Records
     operationId: waitForCompositionTask
+    x-acl:
+      - editSettings
+      - settings
+      - addObject
+      - deleteObject
+      - deleteIndex
     summary: Wait for operation to complete
     description: |
       Wait for a task to complete to ensure synchronized composition updates.

specs/crawler/paths/crawler.yml

@@ -5,6 +5,8 @@ get:
     Retrieves details about the specified crawler, optionally with its configuration.
   tags:
     - crawlers
+  x-acl:
+    - settings
   parameters:
     - $ref: '../common/parameters.yml#/CrawlerIdParameter'
     - in: query
@@ -42,6 +44,8 @@ patch:
     description: Update configuration.
   tags:
     - crawlers
+  x-acl:
+    - editSettings
   parameters:
     - $ref: '../common/parameters.yml#/CrawlerIdParameter'
   requestBody:
@@ -70,6 +74,8 @@ delete:
   description: Delete the specified crawler.
   tags:
     - crawlers
+  x-acl:
+    - editSettings
   parameters:
     - $ref: '#/components/parameters/CrawlerIdParameter'
   responses:

specs/crawler/paths/crawlerConfig.yml

@@ -6,6 +6,8 @@ patch:
     Every time you update the configuration, a new version is created.
   tags:
     - config
+  x-acl:
+    - editSettings
   parameters:
     - $ref: '../common/parameters.yml#/CrawlerIdParameter'
   requestBody:

specs/crawler/paths/crawlerConfigVersion.yml

@@ -7,6 +7,8 @@ get:
     You can use this to restore a previous version of the configuration.
   tags:
     - config
+  x-acl:
+    - settings
   parameters:
     - $ref: '../common/parameters.yml#/CrawlerIdParameter'
     - $ref: '../common/parameters.yml#/CrawlerVersionParameter'

specs/crawler/paths/crawlerConfigVersions.yml

@@ -6,6 +6,8 @@ get:
     Every time you update a crawler's configuration, a new version is added.
   tags:
     - config
+  x-acl:
+    - settings
   parameters:
     - $ref: '../common/parameters.yml#/CrawlerIdParameter'
     - $ref: '../common/parameters.yml#/ItemsPerPage'

specs/crawler/paths/crawlerCrawl.yml

@@ -9,6 +9,7 @@ post:
     This operation is rate-limited to 500 requests every 24 hours.
   tags:
     - actions
+  x-acl: []
   parameters:
     - $ref: '../common/parameters.yml#/CrawlerIdParameter'
   requestBody:

specs/crawler/paths/crawlerPause.yml

@@ -4,6 +4,7 @@ post:
   description: Pauses the specified crawler.
   tags:
     - actions
+  x-acl: []
   parameters:
     - $ref: '../common/parameters.yml#/CrawlerIdParameter'
   responses:

specs/crawler/paths/crawlerReindex.yml

@@ -4,6 +4,7 @@ post:
   description: Starts or resumes a crawl.
   tags:
     - actions
+  x-acl: []
   parameters:
     - $ref: '../common/parameters.yml#/CrawlerIdParameter'
   responses:

specs/crawler/paths/crawlerRun.yml

@@ -7,6 +7,7 @@ post:
     Otherwise, the crawler waits for its next scheduled run.
   tags:
     - actions
+  x-acl: []
   parameters:
     - $ref: '../common/parameters.yml#/CrawlerIdParameter'
   responses:

specs/crawler/paths/crawlerStats.yml

@@ -4,6 +4,8 @@ get:
   description: Retrieves information about the number of crawled, skipped, and failed URLs.
   tags:
     - crawlers
+  x-acl:
+    - settings
   parameters:
     - $ref: '../common/parameters.yml#/CrawlerIdParameter'
   responses:

specs/crawler/paths/crawlerTask.yml

@@ -4,6 +4,8 @@ get:
   description: Retrieves the status of the specified tasks, whether they're pending or completed.
   tags:
     - tasks
+  x-acl:
+    - settings
   parameters:
     - $ref: '../common/parameters.yml#/CrawlerIdParameter'
     - $ref: '../common/parameters.yml#/TaskIdParameter'

specs/crawler/paths/crawlerTaskCancel.yml

@@ -8,6 +8,7 @@ post:
     To unblock the crawler, cancel the blocking task.
   tags:
     - tasks
+  x-acl: []
   parameters:
     - $ref: '../common/parameters.yml#/CrawlerIdParameter'
     - $ref: '../common/parameters.yml#/TaskIdParameter'

specs/crawler/paths/crawlerTest.yml

@@ -7,6 +7,7 @@ post:
     You can test configuration changes by overriding specific parts before updating the full configuration.
   tags:
     - actions
+  x-acl: []
   parameters:
     - $ref: '../common/parameters.yml#/CrawlerIdParameter'
   requestBody:

specs/crawler/paths/crawlers.yml

@@ -4,6 +4,8 @@ get:
   description: Lists all your crawlers.
   tags:
     - crawlers
+  x-acl:
+    - settings
   parameters:
     - $ref: '../common/parameters.yml#/ItemsPerPage'
     - $ref: '../common/parameters.yml#/Page'
@@ -30,6 +32,8 @@ post:
   description: Creates a new crawler with the provided configuration.
   tags:
     - crawlers
+  x-acl:
+    - editSettings
   requestBody:
     content:
       application/json:

specs/crawler/paths/docsearch.yml

@@ -2,6 +2,7 @@ post:
   operationId: createDocSearchApp
   summary: Create a new Algolia app with the DocSearch plan
   description: Create a new Algolia app with the DocSearch plan.
+  x-acl: []
   requestBody:
     content:
       application/json:

specs/crawler/paths/domains.yml

@@ -7,6 +7,8 @@ get:
     Crawlers will only run if the URLs match any of the registered domains.
   tags:
     - domains
+  x-acl:
+    - settings
   parameters:
     - $ref: '../common/parameters.yml#/ItemsPerPage'
     - $ref: '../common/parameters.yml#/Page'

specs/ingestion/helpers/chunkedPush.yml

@@ -10,6 +10,10 @@ method:
       - javascript
       - php
       - python
+    x-acl:
+      - addObject
+      - deleteIndex
+      - editSettings
     operationId: chunkedPush
     summary: Replace all records in an index
     description: |

specs/ingestion/paths/tasks/v1/taskID.yml

@@ -27,6 +27,10 @@ patch:
   summary: Update a task V1
   description: Updates a task by its ID using the v1 endpoint, please use `updateTask` instead.
   operationId: updateTaskV1
+  x-acl:
+    - addObject
+    - deleteIndex
+    - editSettings
   deprecated: true
   parameters:
     - $ref: '../../../common/parameters.yml#/pathTaskID'
@@ -53,6 +57,10 @@ delete:
   summary: Delete a task
   description: Deletes a task by its ID using the v1 endpoint, please use `deleteTask` instead.
   operationId: deleteTaskV1
+  x-acl:
+    - addObject
+    - deleteIndex
+    - editSettings
   deprecated: true
   parameters:
     - $ref: '../../../common/parameters.yml#/pathTaskID'

specs/ingestion/paths/tasks/v1/tasks.yml

@@ -48,6 +48,10 @@ post:
   summary: Create a task V1
   description: Creates a new task using the v1 endpoint, please use `createTask` instead.
   operationId: createTaskV1
+  x-acl:
+    - addObject
+    - deleteIndex
+    - editSettings
   deprecated: true
   x-codegen-request-body-name: taskCreate
   requestBody:

specs/ingestion/paths/tasks/v2/taskID.yml

@@ -1,13 +1,13 @@
 get:
   tags:
     - tasks
-  summary: Retrieve a task
-  description: Retrieves a task by its ID.
-  operationId: getTask
   x-acl:
     - addObject
     - deleteIndex
     - editSettings
+  summary: Retrieve a task
+  description: Retrieves a task by its ID.
+  operationId: getTask
   parameters:
     - $ref: '../../../common/parameters.yml#/pathTaskID'
   responses:
@@ -23,6 +23,10 @@ get:
 put:
   tags:
     - tasks
+  x-acl:
+    - addObject
+    - deleteIndex
+    - editSettings
   summary: Fully update a task
   description: Fully updates a task by its ID, use partialUpdateTask if you only want to update a subset of fields.
   operationId: replaceTask
@@ -48,6 +52,10 @@ put:
 patch:
   tags:
     - tasks
+  x-acl:
+    - addObject
+    - deleteIndex
+    - editSettings
   summary: Partially update a task
   description: Partially updates a task by its ID.
   operationId: updateTask
@@ -72,6 +80,10 @@ patch:
 delete:
   tags:
     - tasks
+  x-acl:
+    - addObject
+    - deleteIndex
+    - editSettings
   summary: Delete a task
   description: Deletes a task by its ID.
   operationId: deleteTask

specs/ingestion/paths/tasks/v2/tasks.yml

@@ -50,6 +50,10 @@ post:
   summary: Create a task
   description: Creates a new task.
   operationId: createTask
+  x-acl:
+    - addObject
+    - deleteIndex
+    - editSettings
   requestBody:
     description: Request body for creating a task.
     content: