permissions.tf

data discord_permission new_member {
  create_instant_invite = "allow"
  change_nickname       = "allow"

  use_external_emojis      = "allow"
  use_external_stickers    = "allow"
  read_message_history     = "allow"
  use_application_commands = "allow"
}

data discord_permission member {
  allow_extends = data.discord_permission.new_member.allow_bits

  view_channel = "allow"

  send_messages          = "allow"
  send_thread_messages   = "allow"
  create_public_threads  = "allow"
  create_private_threads = "allow"
  embed_links            = "allow"
  attach_files           = "allow"
  add_reactions          = "allow"

  connect                   = "allow"
  speak                     = "allow"
  stream                    = "allow"
  use_vad                   = "allow"
  start_embedded_activities = "allow"
}

data discord_permission player {
  allow_extends = data.discord_permission.member.allow_bits
}

data discord_permission bots {
  allow_extends = data.discord_permission.member.allow_bits
  # any additional bot-specific permissions granted in the bot's individual role
}

data discord_permission dm {
  allow_extends = data.discord_permission.member.allow_bits
}

data discord_permission staff {
  allow_extends = data.discord_permission.member.allow_bits

  view_audit_log      = "allow"
  manage_messages     = "allow"
  view_guild_insights = "allow"
  mute_members        = "allow"
  deafen_members      = "allow"
  move_members        = "allow"
  manage_nicknames    = "allow"
  manage_webhooks     = "allow"
  manage_emojis       = "allow"
  manage_events       = "allow"
  manage_threads      = "allow"
  moderate_members    = "allow"
  manage_roles        = "allow"
  mention_everyone    = "allow"
  kick_members        = "allow"
  ban_members         = "allow"
}

data discord_permission admin {
  administrator = "allow"
}

# ==== granular permissions ====
# permissions to deny to everyone for resource channels
data discord_permission resource_channel {
  send_messages          = "allow"
  add_reactions          = "allow"
  send_thread_messages   = "allow"
  create_public_threads  = "allow"
  create_private_threads = "allow"
}

locals {
  // https://discord.com/developers/docs/topics/permissions#permissions-bitwise-permission-flags
  permissions = {
    add_reactions            = 64
    view_channel             = 1024
    send_messages            = 2048
    send_and_manage_messages = 10240
    create_public_threads    = 34359738368 # 0x800000000
    resource_channel         = data.discord_permission.resource_channel.allow_bits
  }
}