Merge pull request #4 from uptick/sec-60/add-resource-instance-resource

fix: split resource_instance into separate fields and fix __user: pre…

Author: toshke

docs/resources/permitio_condition_set_rule.md

@@ -27,3 +27,12 @@ See [our documentation](https://api.permit.io/v2/redoc#tag/Condition-Set-Rules)
 - `id` (String) Unique id of the condition set rule
 - `organization_id` (String) Unique id of the organization that owns the condition set rule
 - `project_id` (String) Unique id of the project that owns the condition set rule
+
+## Import
+
+Import is supported using the following syntax:
+
+```shell
+# Import a condition set rule using the format: user_set,permission,resource_set
+terraform import permitio_condition_set_rule.example admins,document:read,sensitive-docs
+```

docs/resources/permitio_group_resource_instance_role_assignment.md

@@ -26,3 +26,12 @@ Assigns a role to a group on a specific resource instance within a tenant. This
 ### Read-Only
 
 - `id` (String) Unique identifier of the role assignment
+
+## Import
+
+Import is supported using the following syntax:
+
+```shell
+# Import a group resource instance role assignment using the format: group:role:resource:resource_instance:tenant
+terraform import permitio_group_resource_instance_role_assignment.example engineering:viewer:document:doc-1:default
+```

docs/resources/permitio_resource_instance.md

@@ -34,3 +34,12 @@ Manages a Permit.io resource instance. Resource instances represent specific obj
 - `organization_id` (String) The organization ID. This is a unique identifier for the organization.
 - `project_id` (String) The project ID. This is a unique identifier for the project.
 - `resource_id` (String) The unique resource type ID.
+
+## Import
+
+Import is supported using the following syntax:
+
+```shell
+# Import a resource instance using the format: resource_key:instance_key
+terraform import permitio_resource_instance.example document:doc-1
+```

docs/resources/permitio_resource_instance_role_assignment.md

@@ -17,7 +17,8 @@ Assigns a role to a user on a specific resource instance within a tenant. This i
 
 ### Required
 
-- `resource_instance` (String) Resource instance identifier (e.g., 'document:doc-123' or 'project:proj-456')
+- `resource` (String) Resource type (e.g., 'workspace', 'document')
+- `resource_instance` (String) Resource instance key (e.g., 'ws-123', 'doc-456')
 - `role` (String) Role key to assign
 - `tenant` (String) Tenant key for scoped assignment
 - `user` (String) User key to assign the role to
@@ -29,4 +30,12 @@ Assigns a role to a user on a specific resource instance within a tenant. This i
 - `id` (String) Unique identifier of the role assignment
 - `organization_id` (String)
 - `project_id` (String)
-- `updated_at` (String)
+
+## Import
+
+Import is supported using the following syntax:
+
+```shell
+# Import a resource instance role assignment using the format: user:role:resource:resource_instance:tenant
+terraform import permitio_resource_instance_role_assignment.example john@example.com:viewer:document:doc-1:default
+```

docs/resources/permitio_role.md

@@ -38,3 +38,15 @@ See [the documentation](https://api.permit.io/v2/redoc#tag/Resources/operation/c
 - `organization_id` (String) The organization ID. This is a unique identifier for the organization.
 - `project_id` (String) The project ID. This is a unique identifier for the project.
 - `resource_id` (String) The unique resource ID that the role belongs to.
+
+## Import
+
+Import is supported using the following syntax:
+
+```shell
+# Import a top-level role using the format: role_key
+terraform import permitio_role.example admin
+
+# Import a resource-level role using the format: resource_key:role_key
+terraform import permitio_role.example document:editor
+```

docs/resources/permitio_role_assignment.md

@@ -28,3 +28,12 @@ Assigns a role to a user within a specific tenant.
 - `id` (String) Unique identifier of the role assignment
 - `organization_id` (String)
 - `project_id` (String)
+
+## Import
+
+Import is supported using the following syntax:
+
+```shell
+# Import a role assignment using the format: user:role:tenant
+terraform import permitio_role_assignment.example john@example.com:admin:default
+```

docs/resources/permitio_tenant.md

@@ -0,0 +1,36 @@
+---
+# generated by https://github.com/hashicorp/terraform-plugin-docs
+page_title: "permitio_tenant Resource - terraform-provider-permit-io"
+subcategory: ""
+description: |-
+  Manages a Permit.io tenant. Tenants represent isolated groups or organizations within your application. See the documentation https://api.permit.io/v2/redoc#tag/Tenants for more information about tenants.
+---
+
+# permitio_tenant (Resource)
+
+Manages a Permit.io tenant. Tenants represent isolated groups or organizations within your application. See [the documentation](https://api.permit.io/v2/redoc#tag/Tenants) for more information about tenants.
+
+
+
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Required
+
+- `key` (String) The key. This is a unique identifier.
+- `name` (String) The name. This is a human-readable name for the object.
+
+### Optional
+
+- `attributes` (String) Arbitrary tenant attributes in JSON format that will be used to enforce attribute-based access control policies.
+- `description` (String) The description. This is a human-readable description for the object.
+- `updated_at` (String) The update timestamp. This is a timestamp for when the object was last updated.
+
+### Read-Only
+
+- `created_at` (String) The creation timestamp. This is a timestamp for when the object was created.
+- `environment_id` (String) The environment ID. This is a unique identifier for the environment.
+- `id` (String) The resource ID. This is a unique identifier for the resource.
+- `last_action_at` (String) Date and time when the tenant was last active (ISO_8601 format). In other words, this is the last time a permission check was done on a resource belonging to this tenant.
+- `organization_id` (String) The organization ID. This is a unique identifier for the organization.
+- `project_id` (String) The project ID. This is a unique identifier for the project.

examples/resources/permitio_condition_set_rule/import.sh

@@ -0,0 +1,2 @@
+# Import a condition set rule using the format: user_set,permission,resource_set
+terraform import permitio_condition_set_rule.example admins,document:read,sensitive-docs

examples/resources/permitio_group_resource_instance_role_assignment/import.sh

@@ -0,0 +1,2 @@
+# Import a group resource instance role assignment using the format: group:role:resource:resource_instance:tenant
+terraform import permitio_group_resource_instance_role_assignment.example engineering:viewer:document:doc-1:default

examples/resources/permitio_resource_instance/import.sh

@@ -0,0 +1,2 @@
+# Import a resource instance using the format: resource_key:instance_key
+terraform import permitio_resource_instance.example document:doc-1