authz

Documentation

Index

• Variables
• func Load(fname string) error
• type AccessControlRules
• type Group
• type IdentitySet
• type ProtectedResource
• type Role
• type RoleMap
• type User

Variables

var (
	// Groups is an in-memory collection of groups
	Groups = map[string]*Group{}

	// Users is an in-memory collection of users
	Users = map[string]*User{}
)

Functions

func Load

func Load(fname string) error

Load loads the authz data onto memory

Types

type AccessControlRules

type AccessControlRules map[string]RoleMap

AccessControlRules is a mapping of resource name to the role map which governs access control for it

type Group

type Group struct {
	Roles []Role
}

Group represents privilege held by a group

type IdentitySet

type IdentitySet struct {
	Users  []string
	Groups []string
}

IdentitySet represents a set of identities

type ProtectedResource

type ProtectedResource struct {
	Name string
}

ProtectedResource represents a uniquely named, rbac-protected resource.

type Role

type Role struct {
	Name     string
	Resource string
}

Role represents a role with privilege over a resource

type RoleMap

type RoleMap map[string]IdentitySet

RoleMap is a map of role name to the set of identities which can assume the role

type User

type User struct {
	Roles  []Role
	Groups []*Group
}

User represents privilege held by a user