feat: [backend] Resource admin should be able to see all resource shares

Author: stainless-app[bot]

.stats.yml

@@ -1,4 +1,4 @@
 configured_endpoints: 170
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/gitpod%2Fgitpod-4e4b65aac5cad420f0090e1925de4d9c576b7cae6e839120963c94b5b245e335.yml
-openapi_spec_hash: ebc6921eaa311aaaff497646f16adf10
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/gitpod%2Fgitpod-23f7678921f123913793223b36eb15c9f483ec734e49f2ba25f771dba409e781.yml
+openapi_spec_hash: cad5d5f46f759aea198ce46ba9c16aeb
 config_hash: d726afb2a92132197e4eae04303e8041

src/gitpod/types/groups/role_assignment_list_params.py

@@ -33,6 +33,14 @@ class Filter(TypedDict, total=False):
     Empty string is allowed and means no filtering by group
     """
 
+    resource_id: Annotated[str, PropertyInfo(alias="resourceId")]
+    """
+    resource_id filters the response to only role assignments for this specific
+    resource When provided, users with :grant permission on the resource can see its
+    role assignments even if they don't belong to the assigned groups Empty string
+    is allowed and means no filtering by resource
+    """
+
     resource_roles: Annotated[List[ResourceRole], PropertyInfo(alias="resourceRoles")]
     """
     resource_roles filters the response to only role assignments with these specific

tests/api_resources/groups/test_role_assignments.py

@@ -74,6 +74,7 @@ def test_method_list_with_all_params(self, client: Gitpod) -> None:
             page_size=0,
             filter={
                 "group_id": "groupId",
+                "resource_id": "resourceId",
                 "resource_roles": ["RESOURCE_ROLE_UNSPECIFIED"],
                 "resource_types": ["RESOURCE_TYPE_RUNNER"],
                 "user_id": "userId",
@@ -202,6 +203,7 @@ async def test_method_list_with_all_params(self, async_client: AsyncGitpod) -> N
             page_size=0,
             filter={
                 "group_id": "groupId",
+                "resource_id": "resourceId",
                 "resource_roles": ["RESOURCE_ROLE_UNSPECIFIED"],
                 "resource_types": ["RESOURCE_TYPE_RUNNER"],
                 "user_id": "userId",