update

Documentation

Index

• func AddAdmin(ctx ACLCustomizerContext, acl []iam.AccessControlRequest) ([]iam.AccessControlRequest, error)
• func AddCurrentUserAsManage(ctx ACLCustomizerContext, acl []iam.AccessControlRequest) ([]iam.AccessControlRequest, error)
• func Not(condition func(ACLCustomizerContext, []iam.AccessControlRequest) bool) func(ACLCustomizerContext, []iam.AccessControlRequest) bool
• func ObjectIdMatches(expected string) func(ACLCustomizerContext, []iam.AccessControlRequest) bool
• type ACLCustomizer
  • func If(condition func(ACLCustomizerContext, []iam.AccessControlRequest) bool, ...) ACLCustomizer
  • func RewritePermissions(mapping map[iam.PermissionLevel]iam.PermissionLevel) ACLCustomizer
• type ACLCustomizerContext

Functions

func AddAdmin

func AddAdmin(ctx ACLCustomizerContext, acl []iam.AccessControlRequest) ([]iam.AccessControlRequest, error)

AddAdmin adds an explicit CAN_MANAGE permission for the 'admins' group if explicitAdminPermissionCheck returns true for the provided object ID.

func AddCurrentUserAsManage

func AddCurrentUserAsManage(ctx ACLCustomizerContext, acl []iam.AccessControlRequest) ([]iam.AccessControlRequest, error)

Whether the object requires explicit manage permissions for the calling user if not set. As described in https://github.com/databricks/terraform-provider-databricks/issues/1504, certain object types require that we explicitly grant the calling user CAN_MANAGE permissions when POSTing permissions changes through the REST API, to avoid accidentally revoking the calling user's ability to manage the current object.

func Not

func Not(condition func(ACLCustomizerContext, []iam.AccessControlRequest) bool) func(ACLCustomizerContext, []iam.AccessControlRequest) bool

func ObjectIdMatches

func ObjectIdMatches(expected string) func(ACLCustomizerContext, []iam.AccessControlRequest) bool

ObjectIdMatches returns a condition that checks if the object ID matches the expected value.

Types

type ACLCustomizer

type ACLCustomizer func(ctx ACLCustomizerContext, objectAcls []iam.AccessControlRequest) ([]iam.AccessControlRequest, error)

ACLCustomizer is a function that modifies the access control list of an object before it is updated.

func If

func If(condition func(ACLCustomizerContext, []iam.AccessControlRequest) bool, customizer ACLCustomizer) ACLCustomizer

If applies ths customizer if the condition is true.

func RewritePermissions

func RewritePermissions(mapping map[iam.PermissionLevel]iam.PermissionLevel) ACLCustomizer

type ACLCustomizerContext

type ACLCustomizerContext struct {
	GetCurrentUser func() (string, error)
	GetId          func() string
}

Context that is available to aclUpdateCustomizer implementations.