policy

Documentation

Index

• type IsAuthorizedReq
• type Module
  • func Policy() *Module
  • func (m *Module) Execute(targets map[string]pgs.File, pkgs map[string]pgs.Package) []pgs.Artifact
  • func (m *Module) InitContext(c pgs.BuildContext)
  • func (m *Module) Name() string
• type ValidateV2ResourceAndActions
  • func (m *ValidateV2ResourceAndActions) GetAction() string
  • func (m *ValidateV2ResourceAndActions) GetResource() string
  • func (m *ValidateV2ResourceAndActions) GetSubjects() []string
• type ValidateV2ResourceAndActionsValidationError
  • func (e ValidateV2ResourceAndActionsValidationError) Error() string

Types

type IsAuthorizedReq

type IsAuthorizedReq struct {
	Subjects             []string `` /* 129-byte string literal not displayed */
	Resource             string   `` /* 129-byte string literal not displayed */
	Action               string   `protobuf:"bytes,3,opt,name=action,proto3" json:"action,omitempty" toml:"action,omitempty" mapstructure:"action,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-" toml:"-" mapstructure:"-,omitempty"`
	XXX_unrecognized     []byte   `json:"-" toml:"-" mapstructure:"-,omitempty"`
	XXX_sizecache        int32    `json:"-" toml:"-" mapstructure:"-,omitempty"`
}

type Module

type Module struct {
	*pgs.ModuleBase
	// contains filtered or unexported fields
}

Module generates the policy mapping calls according to the proto file annotations.

func Policy

func Policy() *Module

Policy returns an initialized policy.Module

func (*Module) Execute

func (m *Module) Execute(targets map[string]pgs.File, pkgs map[string]pgs.Package) []pgs.Artifact

Execute satisfies the pgs.Module interface

func (*Module) InitContext

func (m *Module) InitContext(c pgs.BuildContext)

func (*Module) Name

func (m *Module) Name() string

Name satisfies the pgs.Module interface

type ValidateV2ResourceAndActions

type ValidateV2ResourceAndActions struct {
	Subjects             []string `` /* 129-byte string literal not displayed */
	Resource             string   `` /* 129-byte string literal not displayed */
	Action               string   `protobuf:"bytes,3,opt,name=action,proto3" json:"action,omitempty" toml:"action,omitempty" mapstructure:"action,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-" toml:"-" mapstructure:"-,omitempty"`
	XXX_unrecognized     []byte   `json:"-" toml:"-" mapstructure:"-,omitempty"`
	XXX_sizecache        int32    `json:"-" toml:"-" mapstructure:"-,omitempty"`
}

We were re-using the IAM V2 IsAuthorizedReq's Validate function to validate our V2 AuthZ annotations. Preserving that code here so we can continue to validate.

func (*ValidateV2ResourceAndActions) GetAction

func (m *ValidateV2ResourceAndActions) GetAction() string

func (*ValidateV2ResourceAndActions) GetResource

func (m *ValidateV2ResourceAndActions) GetResource() string

func (*ValidateV2ResourceAndActions) GetSubjects

func (m *ValidateV2ResourceAndActions) GetSubjects() []string

type ValidateV2ResourceAndActionsValidationError

type ValidateV2ResourceAndActionsValidationError struct {
	// contains filtered or unexported fields
}

func (ValidateV2ResourceAndActionsValidationError) Error

func (e ValidateV2ResourceAndActionsValidationError) Error() string