rbac

Documentation

Index

• Constants
• func VisitRoles(member *models.Member, role *types.Role, attr auth.Attributes) (_ auth.Decision, reason string, err error)
• type Authorizer
  • func NewAuthorizer(roleservice role.Service, memberservice memberservice.Service) Authorizer
• type VisitorFunc

Constants

const (
	NotChecked        = "not checked"
	ResourceFormatErr = "format error"
	AnonymousUser     = "anonymous user"
	InternalError     = "internal error"
	MemberNotExist    = "member not exist"
	RoleNotExist      = "role not exist"
	AdminAllow        = "admin allows everything"
)

Functions

func VisitRoles

func VisitRoles(member *models.Member, role *types.Role,
	attr auth.Attributes) (_ auth.Decision, reason string, err error)

Types

type Authorizer

type Authorizer interface {
	Authorize(ctx context.Context, attributes auth.Attributes) (auth.Decision, string, error)
}

Authorizer use the basic rbac rules to check if the user have the permissions

func NewAuthorizer

func NewAuthorizer(roleservice role.Service, memberservice memberservice.Service) Authorizer

type VisitorFunc

type VisitorFunc func(fmt.Stringer, *types.PolicyRule, error) bool