Documentation ¶
Index ¶
- Variables
- func DatastoreFromSchemaAndTestRelationships(ds datastore.Datastore, schema string, relationships []*core.RelationTuple, ...) (datastore.Datastore, datastore.Revision)
- func EmptyDatastore(ds datastore.Datastore, require *require.Assertions) (datastore.Datastore, datastore.Revision)
- func NewValidatingDatastore(delegate datastore.Datastore) datastore.Datastore
- func StandardDatastoreWithCaveatedData(ds datastore.Datastore, require *require.Assertions) (datastore.Datastore, datastore.Revision)
- func StandardDatastoreWithData(ds datastore.Datastore, require *require.Assertions) (datastore.Datastore, datastore.Revision)
- func StandardDatastoreWithSchema(ds datastore.Datastore, require *require.Assertions) (datastore.Datastore, datastore.Revision)
- type TupleChecker
- func (tc TupleChecker) ExactRelationshipIterator(ctx context.Context, tpl *core.RelationTuple, rev datastore.Revision) datastore.RelationshipIterator
- func (tc TupleChecker) NoTupleExists(ctx context.Context, tpl *core.RelationTuple, rev datastore.Revision)
- func (tc TupleChecker) TupleExists(ctx context.Context, tpl *core.RelationTuple, rev datastore.Revision)
- func (tc TupleChecker) VerifyIteratorCount(iter datastore.RelationshipIterator, count int)
- func (tc TupleChecker) VerifyIteratorResults(iter datastore.RelationshipIterator, tpls ...*core.RelationTuple)
Constants ¶
This section is empty.
Variables ¶
var CaveatDef = ns.MustCaveatDefinition( caveats.MustEnvForVariables(map[string]caveattypes.VariableType{ "secret": caveattypes.StringType, "expectedSecret": caveattypes.StringType, }), "test", "secret == expectedSecret", )
var DocumentNS = ns.Namespace( "document", ns.MustRelation("owner", nil, ns.AllowedRelation("user", "..."), ), ns.MustRelation("editor", nil, ns.AllowedRelation("user", "..."), ), ns.MustRelation("viewer", nil, ns.AllowedRelation("user", "..."), ), ns.MustRelation("viewer_and_editor", nil, ns.AllowedRelation("user", "..."), ), ns.MustRelation("caveated_viewer", nil, ns.AllowedRelationWithCaveat("user", "...", ns.AllowedCaveat("test")), ), ns.MustRelation("parent", nil, ns.AllowedRelation("folder", "...")), ns.MustRelation("edit", ns.Union( ns.ComputedUserset("owner"), ns.ComputedUserset("editor"), ), ), ns.MustRelation("view", ns.Union( ns.ComputedUserset("viewer"), ns.ComputedUserset("edit"), ns.TupleToUserset("parent", "view"), ), ), ns.MustRelation("view_and_edit", ns.Intersection( ns.ComputedUserset("viewer_and_editor"), ns.ComputedUserset("edit"), ), ), )
var FolderNS = ns.Namespace( "folder", ns.MustRelation("owner", nil, ns.AllowedRelation("user", "..."), ), ns.MustRelation("editor", nil, ns.AllowedRelation("user", "..."), ), ns.MustRelation("viewer", nil, ns.AllowedRelation("user", "..."), ns.AllowedRelation("folder", "viewer"), ), ns.MustRelation("parent", nil, ns.AllowedRelation("folder", "...")), ns.MustRelation("edit", ns.Union( ns.ComputedUserset("editor"), ns.ComputedUserset("owner"), ), ), ns.MustRelation("view", ns.Union( ns.ComputedUserset("viewer"), ns.ComputedUserset("edit"), ns.TupleToUserset("parent", "view"), ), ), )
var StandardTuples = []string{
"document:companyplan#parent@folder:company#...",
"document:masterplan#parent@folder:strategy#...",
"folder:strategy#parent@folder:company#...",
"folder:company#owner@user:owner#...",
"folder:company#viewer@user:legal#...",
"folder:strategy#owner@user:vp_product#...",
"document:masterplan#owner@user:product_manager#...",
"document:masterplan#viewer@user:eng_lead#...",
"document:masterplan#parent@folder:plans#...",
"folder:plans#viewer@user:chief_financial_officer#...",
"folder:auditors#viewer@user:auditor#...",
"folder:company#viewer@folder:auditors#viewer",
"document:healthplan#parent@folder:plans#...",
"folder:isolated#viewer@user:villain#...",
"document:specialplan#viewer_and_editor@user:multiroleguy#...",
"document:specialplan#editor@user:multiroleguy#...",
"document:specialplan#viewer_and_editor@user:missingrolegal#...",
}
var UserNS = ns.Namespace("user")
Functions ¶
func DatastoreFromSchemaAndTestRelationships ¶ added in v1.15.0
func DatastoreFromSchemaAndTestRelationships(ds datastore.Datastore, schema string, relationships []*core.RelationTuple, require *require.Assertions) (datastore.Datastore, datastore.Revision)
DatastoreFromSchemaAndTestRelationships returns a validating datastore wrapping that specified, loaded with the given scehma and relationships.
func EmptyDatastore ¶ added in v1.5.0
func EmptyDatastore(ds datastore.Datastore, require *require.Assertions) (datastore.Datastore, datastore.Revision)
EmptyDatastore returns an empty datastore for testing.
func NewValidatingDatastore ¶ added in v0.0.2
NewValidatingDatastore creates a proxy which runs validation on all call parameters before passing the call onward.
func StandardDatastoreWithCaveatedData ¶ added in v1.14.0
func StandardDatastoreWithCaveatedData(ds datastore.Datastore, require *require.Assertions) (datastore.Datastore, datastore.Revision)
StandardDatastoreWithCaveatedData returns a datastore populated with both the standard test definitions and some caveated relationships.
func StandardDatastoreWithData ¶
func StandardDatastoreWithData(ds datastore.Datastore, require *require.Assertions) (datastore.Datastore, datastore.Revision)
StandardDatastoreWithData returns a datastore populated with both the standard test definitions and relationships.
func StandardDatastoreWithSchema ¶
func StandardDatastoreWithSchema(ds datastore.Datastore, require *require.Assertions) (datastore.Datastore, datastore.Revision)
StandardDatastoreWithSchema returns a datastore populated with the standard test definitions.
Types ¶
type TupleChecker ¶
type TupleChecker struct { Require *require.Assertions DS datastore.Datastore }
TupleChecker is a helper type which provides an easy way for collecting relationships/tuples from an iterator and verify those found.
func (TupleChecker) ExactRelationshipIterator ¶ added in v1.8.0
func (tc TupleChecker) ExactRelationshipIterator(ctx context.Context, tpl *core.RelationTuple, rev datastore.Revision) datastore.RelationshipIterator
func (TupleChecker) NoTupleExists ¶
func (tc TupleChecker) NoTupleExists(ctx context.Context, tpl *core.RelationTuple, rev datastore.Revision)
func (TupleChecker) TupleExists ¶
func (tc TupleChecker) TupleExists(ctx context.Context, tpl *core.RelationTuple, rev datastore.Revision)
func (TupleChecker) VerifyIteratorCount ¶
func (tc TupleChecker) VerifyIteratorCount(iter datastore.RelationshipIterator, count int)
func (TupleChecker) VerifyIteratorResults ¶
func (tc TupleChecker) VerifyIteratorResults(iter datastore.RelationshipIterator, tpls ...*core.RelationTuple)