ossaccesscontrol

Documentation

Index

• type OSSAccessControlService
  • func ProvideService(cfg *setting.Cfg, usageStats usagestats.Service) *OSSAccessControlService
  • func (ac *OSSAccessControlService) DeclareFixedRoles(registrations ...accesscontrol.RoleRegistration) error
  • func (ac *OSSAccessControlService) Evaluate(ctx context.Context, user *models.SignedInUser, ...) (bool, error)
  • func (ac *OSSAccessControlService) GetUserBuiltInRoles(user *models.SignedInUser) []string
  • func (ac *OSSAccessControlService) GetUserPermissions(ctx context.Context, user *models.SignedInUser) ([]*accesscontrol.Permission, error)
  • func (ac *OSSAccessControlService) GetUserRoles(ctx context.Context, user *models.SignedInUser) ([]*accesscontrol.RoleDTO, error)
  • func (ac *OSSAccessControlService) IsDisabled() bool
  • func (ac *OSSAccessControlService) RegisterFixedRoles() error

Types

type OSSAccessControlService

type OSSAccessControlService struct {
	Cfg        *setting.Cfg
	UsageStats usagestats.Service
	Log        log.Logger
	// contains filtered or unexported fields
}

OSSAccessControlService is the service implementing role based access control.

func ProvideService

func ProvideService(cfg *setting.Cfg, usageStats usagestats.Service) *OSSAccessControlService

func (*OSSAccessControlService) DeclareFixedRoles

func (ac *OSSAccessControlService) DeclareFixedRoles(registrations ...accesscontrol.RoleRegistration) error

DeclareFixedRoles allow the caller to declare, to the service, fixed roles and their assignments to organization roles ("Viewer", "Editor", "Admin") or "Grafana Admin"

func (*OSSAccessControlService) Evaluate

func (ac *OSSAccessControlService) Evaluate(ctx context.Context, user *models.SignedInUser, evaluator accesscontrol.Evaluator) (bool, error)

Evaluate evaluates access to the given resources

func (*OSSAccessControlService) GetUserBuiltInRoles

func (ac *OSSAccessControlService) GetUserBuiltInRoles(user *models.SignedInUser) []string

func (*OSSAccessControlService) GetUserPermissions

func (ac *OSSAccessControlService) GetUserPermissions(ctx context.Context, user *models.SignedInUser) ([]*accesscontrol.Permission, error)

GetUserPermissions returns user permissions based on built-in roles

func (*OSSAccessControlService) GetUserRoles

func (ac *OSSAccessControlService) GetUserRoles(ctx context.Context, user *models.SignedInUser) ([]*accesscontrol.RoleDTO, error)

GetUserRoles returns user permissions based on built-in roles

func (*OSSAccessControlService) IsDisabled

func (ac *OSSAccessControlService) IsDisabled() bool

func (*OSSAccessControlService) RegisterFixedRoles

func (ac *OSSAccessControlService) RegisterFixedRoles() error

RegisterFixedRoles registers all declared roles in RAM