svc

package

v0.38.0 Latest Latest Go to latest Published: Aug 7, 2024 License: Apache-2.0 Imports: 41 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/cerbos/cerbos

Links

Open Source Insights

Documentation ¶

Index ¶

func ExtractRequestFields(fullMethod string, req any) map[string]any
func SetHTTPStatusCode(ctx context.Context, code int)
type CerbosAdminService
- func NewCerbosAdminService(store storage.Store, auditLog audit.Log, adminUser string, ...) *CerbosAdminService
type CerbosPlaygroundService
- func NewCerbosPlaygroundService(reqLimits RequestLimits) *CerbosPlaygroundService
type CerbosService
- func NewCerbosService(eng *engine.Engine, auxData *auxdata.AuxData, reqLimits RequestLimits) *CerbosService
type RequestLimits

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func ExtractRequestFields ¶

func ExtractRequestFields(fullMethod string, req any) map[string]any

func SetHTTPStatusCode ¶

func SetHTTPStatusCode(ctx context.Context, code int)

Types ¶

type CerbosAdminService ¶

type CerbosAdminService struct {
	*svcv1.UnimplementedCerbosAdminServiceServer
	// contains filtered or unexported fields
}

CerbosAdminService implements the Cerbos administration service.

func NewCerbosAdminService ¶

func NewCerbosAdminService(store storage.Store, auditLog audit.Log, adminUser string, adminPasswdHash []byte) *CerbosAdminService

func (*CerbosAdminService) AddOrUpdatePolicy ¶

func (cas *CerbosAdminService) AddOrUpdatePolicy(ctx context.Context, req *requestv1.AddOrUpdatePolicyRequest) (*responsev1.AddOrUpdatePolicyResponse, error)

func (*CerbosAdminService) AddOrUpdateSchema ¶ added in v0.11.0

func (cas *CerbosAdminService) AddOrUpdateSchema(ctx context.Context, req *requestv1.AddOrUpdateSchemaRequest) (*responsev1.AddOrUpdateSchemaResponse, error)

func (*CerbosAdminService) DeleteSchema ¶ added in v0.11.0

func (cas *CerbosAdminService) DeleteSchema(ctx context.Context, req *requestv1.DeleteSchemaRequest) (*responsev1.DeleteSchemaResponse, error)

func (*CerbosAdminService) DisablePolicy ¶ added in v0.25.0

func (cas *CerbosAdminService) DisablePolicy(ctx context.Context, req *requestv1.DisablePolicyRequest) (*responsev1.DisablePolicyResponse, error)

func (*CerbosAdminService) EnablePolicy ¶ added in v0.26.0

func (cas *CerbosAdminService) EnablePolicy(ctx context.Context, req *requestv1.EnablePolicyRequest) (*responsev1.EnablePolicyResponse, error)

func (*CerbosAdminService) GetPolicy ¶ added in v0.12.0

func (cas *CerbosAdminService) GetPolicy(ctx context.Context, req *requestv1.GetPolicyRequest) (*responsev1.GetPolicyResponse, error)

func (*CerbosAdminService) GetSchema ¶ added in v0.11.0

func (cas *CerbosAdminService) GetSchema(ctx context.Context, req *requestv1.GetSchemaRequest) (*responsev1.GetSchemaResponse, error)

func (*CerbosAdminService) InspectPolicies ¶ added in v0.35.0

func (cas *CerbosAdminService) InspectPolicies(ctx context.Context, req *requestv1.InspectPoliciesRequest) (*responsev1.InspectPoliciesResponse, error)

func (*CerbosAdminService) ListAuditLogEntries ¶

func (cas *CerbosAdminService) ListAuditLogEntries(req *requestv1.ListAuditLogEntriesRequest, stream svcv1.CerbosAdminService_ListAuditLogEntriesServer) error

func (*CerbosAdminService) ListPolicies ¶ added in v0.7.0

func (cas *CerbosAdminService) ListPolicies(ctx context.Context, req *requestv1.ListPoliciesRequest) (*responsev1.ListPoliciesResponse, error)

func (*CerbosAdminService) ListSchemas ¶ added in v0.11.0

func (cas *CerbosAdminService) ListSchemas(ctx context.Context, _ *requestv1.ListSchemasRequest) (*responsev1.ListSchemasResponse, error)

func (*CerbosAdminService) ReloadStore ¶ added in v0.15.0

func (cas *CerbosAdminService) ReloadStore(ctx context.Context, req *requestv1.ReloadStoreRequest) (*responsev1.ReloadStoreResponse, error)

type CerbosPlaygroundService ¶

type CerbosPlaygroundService struct {
	*svcv1.UnimplementedCerbosPlaygroundServiceServer
	// contains filtered or unexported fields
}

CerbosPlaygroundService implements the playground API.

func NewCerbosPlaygroundService ¶

func NewCerbosPlaygroundService(reqLimits RequestLimits) *CerbosPlaygroundService

func (*CerbosPlaygroundService) PlaygroundEvaluate ¶

func (cs *CerbosPlaygroundService) PlaygroundEvaluate(ctx context.Context, req *requestv1.PlaygroundEvaluateRequest) (*responsev1.PlaygroundEvaluateResponse, error)

func (*CerbosPlaygroundService) PlaygroundProxy ¶ added in v0.5.0

func (cs *CerbosPlaygroundService) PlaygroundProxy(ctx context.Context, req *requestv1.PlaygroundProxyRequest) (*responsev1.PlaygroundProxyResponse, error)

func (*CerbosPlaygroundService) PlaygroundTest ¶ added in v0.15.0

func (cs *CerbosPlaygroundService) PlaygroundTest(ctx context.Context, req *requestv1.PlaygroundTestRequest) (*responsev1.PlaygroundTestResponse, error)

func (*CerbosPlaygroundService) PlaygroundValidate ¶

func (cs *CerbosPlaygroundService) PlaygroundValidate(ctx context.Context, req *requestv1.PlaygroundValidateRequest) (*responsev1.PlaygroundValidateResponse, error)

type CerbosService ¶

type CerbosService struct {
	*svcv1.UnimplementedCerbosServiceServer
	// contains filtered or unexported fields
}

CerbosService implements the policy checking service.

func NewCerbosService ¶

func NewCerbosService(eng *engine.Engine, auxData *auxdata.AuxData, reqLimits RequestLimits) *CerbosService

func (*CerbosService) CheckResourceBatch ¶

func (cs *CerbosService) CheckResourceBatch(ctx context.Context, req *requestv1.CheckResourceBatchRequest) (*responsev1.CheckResourceBatchResponse, error)

CheckResourceBatch checks a batch of heterogenous resources. Deprecated: Since 0.16.0. Use CheckResources instead.

func (*CerbosService) CheckResourceSet ¶

func (cs *CerbosService) CheckResourceSet(ctx context.Context, req *requestv1.CheckResourceSetRequest) (*responsev1.CheckResourceSetResponse, error)

CheckResourceSet checks a batch of homogenous resources. Deprecated: Since 0.16.0. Use CheckResources instead.

func (*CerbosService) CheckResources ¶ added in v0.16.0

func (cs *CerbosService) CheckResources(ctx context.Context, req *requestv1.CheckResourcesRequest) (*responsev1.CheckResourcesResponse, error)

CheckResources checks a batch of heterogenous resources.

func (*CerbosService) PlanResources ¶ added in v0.16.0

func (cs *CerbosService) PlanResources(ctx context.Context, request *requestv1.PlanResourcesRequest) (*responsev1.PlanResourcesResponse, error)

func (CerbosService) ServerInfo ¶ added in v0.5.0

func (CerbosService) ServerInfo(_ context.Context, _ *requestv1.ServerInfoRequest) (*responsev1.ServerInfoResponse, error)

type RequestLimits ¶ added in v0.17.0

type RequestLimits struct {
	MaxActionsPerResource  uint
	MaxResourcesPerRequest uint
}

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL