Documentation
¶
Index ¶
- Variables
- func NewServer(checker authz.CheckerServer) (http.Handler, error)
- type Action
- type Checker
- func (c *Checker) CheckGlobalAdmin(ctx context.Context) (bool, error)
- func (c *Checker) Feed(ctx context.Context, req *authz.FeedRequest) (*authz.FeedResponse, error)
- func (c *Checker) FeedList(ctx context.Context, req *authz.FeedListRequest) (*authz.FeedListResponse, error)
- func (c *Checker) FeedPermissions(ctx context.Context, req *authz.FeedRequest) (*authz.FeedPermissionsResponse, error)
- func (c *Checker) FeedSetGroup(ctx context.Context, req *authz.FeedSetGroupRequest) (*authz.FeedSaveResponse, error)
- func (c *Checker) FeedVersion(ctx context.Context, req *authz.FeedVersionRequest) (*authz.FeedVersionResponse, error)
- func (c *Checker) FeedVersionAddPermission(ctx context.Context, req *authz.FeedVersionModifyPermissionRequest) (*authz.FeedVersionSaveResponse, error)
- func (c *Checker) FeedVersionList(ctx context.Context, req *authz.FeedVersionListRequest) (*authz.FeedVersionListResponse, error)
- func (c *Checker) FeedVersionPermissions(ctx context.Context, req *authz.FeedVersionRequest) (*authz.FeedVersionPermissionsResponse, error)
- func (c *Checker) FeedVersionRemovePermission(ctx context.Context, req *authz.FeedVersionModifyPermissionRequest) (*authz.FeedVersionSaveResponse, error)
- func (c *Checker) Group(ctx context.Context, req *authz.GroupRequest) (*authz.GroupResponse, error)
- func (c *Checker) GroupAddPermission(ctx context.Context, req *authz.GroupModifyPermissionRequest) (*authz.GroupSaveResponse, error)
- func (c *Checker) GroupList(ctx context.Context, req *authz.GroupListRequest) (*authz.GroupListResponse, error)
- func (c *Checker) GroupPermissions(ctx context.Context, req *authz.GroupRequest) (*authz.GroupPermissionsResponse, error)
- func (c *Checker) GroupRemovePermission(ctx context.Context, req *authz.GroupModifyPermissionRequest) (*authz.GroupSaveResponse, error)
- func (c *Checker) GroupSave(ctx context.Context, req *authz.GroupSaveRequest) (*authz.GroupSaveResponse, error)
- func (c *Checker) GroupSetTenant(ctx context.Context, req *authz.GroupSetTenantRequest) (*authz.GroupSetTenantResponse, error)
- func (c *Checker) Me(ctx context.Context, req *authz.MeRequest) (*authz.MeResponse, error)
- func (c *Checker) Tenant(ctx context.Context, req *authz.TenantRequest) (*authz.TenantResponse, error)
- func (c *Checker) TenantAddPermission(ctx context.Context, req *authz.TenantModifyPermissionRequest) (*authz.TenantSaveResponse, error)
- func (c *Checker) TenantCreate(ctx context.Context, req *authz.TenantCreateRequest) (*authz.TenantSaveResponse, error)
- func (c *Checker) TenantCreateGroup(ctx context.Context, req *authz.TenantCreateGroupRequest) (*authz.GroupSaveResponse, error)
- func (c *Checker) TenantList(ctx context.Context, req *authz.TenantListRequest) (*authz.TenantListResponse, error)
- func (c *Checker) TenantPermissions(ctx context.Context, req *authz.TenantRequest) (*authz.TenantPermissionsResponse, error)
- func (c *Checker) TenantRemovePermission(ctx context.Context, req *authz.TenantModifyPermissionRequest) (*authz.TenantSaveResponse, error)
- func (c *Checker) TenantSave(ctx context.Context, req *authz.TenantSaveRequest) (*authz.TenantSaveResponse, error)
- func (c *Checker) User(ctx context.Context, req *authz.UserRequest) (*authz.UserResponse, error)
- func (c *Checker) UserList(ctx context.Context, req *authz.UserListRequest) (*authz.UserListResponse, error)
- type CheckerConfig
- type EntityKey
- type FGAProvider
- type MockFGAClient
- func (c *MockFGAClient) Check(context.Context, TupleKey, ...TupleKey) (bool, error)
- func (c *MockFGAClient) DeleteTuple(context.Context, TupleKey) error
- func (c *MockFGAClient) GetObjectTuples(context.Context, TupleKey) ([]TupleKey, error)
- func (c *MockFGAClient) ListObjects(context.Context, TupleKey) ([]TupleKey, error)
- func (c *MockFGAClient) SetExclusiveRelation(context.Context, TupleKey) error
- func (c *MockFGAClient) SetExclusiveSubjectRelation(context.Context, TupleKey, ...Relation) error
- func (c *MockFGAClient) WriteTuple(context.Context, TupleKey) error
- type MockUserProvider
- type ObjectType
- type Relation
- type TupleKey
- type UserProvider
Constants ¶
This section is empty.
Variables ¶
View Source
var AdminRelation = authz.AdminRelation
View Source
var CanCreateFeed = authz.CanCreateFeed
View Source
var CanCreateFeedVersion = authz.CanCreateFeedVersion
View Source
var CanCreateOrg = authz.CanCreateOrg
View Source
var CanDeleteFeed = authz.CanDeleteFeed
View Source
var CanDeleteFeedVersion = authz.CanDeleteFeedVersion
View Source
var CanDeleteOrg = authz.CanDeleteOrg
View Source
var CanEdit = authz.CanEdit
View Source
var CanEditMembers = authz.CanEditMembers
View Source
var CanSetGroup = authz.CanSetGroup
View Source
var CanSetTenant = authz.CanSetTenant
View Source
var CanView = authz.CanView
View Source
var EditorRelation = authz.EditorRelation
View Source
var FeedType = authz.FeedType
View Source
var FeedVersionType = authz.FeedVersionType
View Source
var GroupType = authz.GroupType
View Source
var ManagerRelation = authz.ManagerRelation
View Source
var MemberRelation = authz.MemberRelation
View Source
var ParentRelation = authz.ParentRelation
View Source
var TenantType = authz.TenantType
View Source
var UserType = authz.UserType
View Source
var ViewerRelation = authz.ViewerRelation
Functions ¶
Types ¶
type Checker ¶
type Checker struct { authz.UnsafeCheckerServer // contains filtered or unexported fields }
func NewChecker ¶
func NewChecker(n UserProvider, p FGAProvider, db sqlx.Ext) *Checker
func NewCheckerFromConfig ¶
func (*Checker) CheckGlobalAdmin ¶
func (*Checker) Feed ¶
func (c *Checker) Feed(ctx context.Context, req *authz.FeedRequest) (*authz.FeedResponse, error)
func (*Checker) FeedList ¶
func (c *Checker) FeedList(ctx context.Context, req *authz.FeedListRequest) (*authz.FeedListResponse, error)
func (*Checker) FeedPermissions ¶
func (c *Checker) FeedPermissions(ctx context.Context, req *authz.FeedRequest) (*authz.FeedPermissionsResponse, error)
func (*Checker) FeedSetGroup ¶
func (c *Checker) FeedSetGroup(ctx context.Context, req *authz.FeedSetGroupRequest) (*authz.FeedSaveResponse, error)
func (*Checker) FeedVersion ¶
func (c *Checker) FeedVersion(ctx context.Context, req *authz.FeedVersionRequest) (*authz.FeedVersionResponse, error)
func (*Checker) FeedVersionAddPermission ¶
func (c *Checker) FeedVersionAddPermission(ctx context.Context, req *authz.FeedVersionModifyPermissionRequest) (*authz.FeedVersionSaveResponse, error)
func (*Checker) FeedVersionList ¶
func (c *Checker) FeedVersionList(ctx context.Context, req *authz.FeedVersionListRequest) (*authz.FeedVersionListResponse, error)
func (*Checker) FeedVersionPermissions ¶
func (c *Checker) FeedVersionPermissions(ctx context.Context, req *authz.FeedVersionRequest) (*authz.FeedVersionPermissionsResponse, error)
func (*Checker) FeedVersionRemovePermission ¶
func (c *Checker) FeedVersionRemovePermission(ctx context.Context, req *authz.FeedVersionModifyPermissionRequest) (*authz.FeedVersionSaveResponse, error)
func (*Checker) Group ¶
func (c *Checker) Group(ctx context.Context, req *authz.GroupRequest) (*authz.GroupResponse, error)
func (*Checker) GroupAddPermission ¶
func (c *Checker) GroupAddPermission(ctx context.Context, req *authz.GroupModifyPermissionRequest) (*authz.GroupSaveResponse, error)
func (*Checker) GroupList ¶
func (c *Checker) GroupList(ctx context.Context, req *authz.GroupListRequest) (*authz.GroupListResponse, error)
func (*Checker) GroupPermissions ¶
func (c *Checker) GroupPermissions(ctx context.Context, req *authz.GroupRequest) (*authz.GroupPermissionsResponse, error)
func (*Checker) GroupRemovePermission ¶
func (c *Checker) GroupRemovePermission(ctx context.Context, req *authz.GroupModifyPermissionRequest) (*authz.GroupSaveResponse, error)
func (*Checker) GroupSave ¶
func (c *Checker) GroupSave(ctx context.Context, req *authz.GroupSaveRequest) (*authz.GroupSaveResponse, error)
func (*Checker) GroupSetTenant ¶
func (c *Checker) GroupSetTenant(ctx context.Context, req *authz.GroupSetTenantRequest) (*authz.GroupSetTenantResponse, error)
func (*Checker) Tenant ¶
func (c *Checker) Tenant(ctx context.Context, req *authz.TenantRequest) (*authz.TenantResponse, error)
func (*Checker) TenantAddPermission ¶
func (c *Checker) TenantAddPermission(ctx context.Context, req *authz.TenantModifyPermissionRequest) (*authz.TenantSaveResponse, error)
func (*Checker) TenantCreate ¶
func (c *Checker) TenantCreate(ctx context.Context, req *authz.TenantCreateRequest) (*authz.TenantSaveResponse, error)
func (*Checker) TenantCreateGroup ¶
func (c *Checker) TenantCreateGroup(ctx context.Context, req *authz.TenantCreateGroupRequest) (*authz.GroupSaveResponse, error)
func (*Checker) TenantList ¶
func (c *Checker) TenantList(ctx context.Context, req *authz.TenantListRequest) (*authz.TenantListResponse, error)
func (*Checker) TenantPermissions ¶
func (c *Checker) TenantPermissions(ctx context.Context, req *authz.TenantRequest) (*authz.TenantPermissionsResponse, error)
func (*Checker) TenantRemovePermission ¶
func (c *Checker) TenantRemovePermission(ctx context.Context, req *authz.TenantModifyPermissionRequest) (*authz.TenantSaveResponse, error)
func (*Checker) TenantSave ¶
func (c *Checker) TenantSave(ctx context.Context, req *authz.TenantSaveRequest) (*authz.TenantSaveResponse, error)
func (*Checker) User ¶
func (c *Checker) User(ctx context.Context, req *authz.UserRequest) (*authz.UserResponse, error)
func (*Checker) UserList ¶
func (c *Checker) UserList(ctx context.Context, req *authz.UserListRequest) (*authz.UserListResponse, error)
type CheckerConfig ¶
type FGAProvider ¶
type FGAProvider interface { Check(context.Context, TupleKey, ...TupleKey) (bool, error) ListObjects(context.Context, TupleKey) ([]TupleKey, error) GetObjectTuples(context.Context, TupleKey) ([]TupleKey, error) WriteTuple(context.Context, TupleKey) error SetExclusiveSubjectRelation(context.Context, TupleKey, ...Relation) error SetExclusiveRelation(context.Context, TupleKey) error DeleteTuple(context.Context, TupleKey) error }
type MockFGAClient ¶
type MockFGAClient struct{}
func NewMockFGAClient ¶
func NewMockFGAClient() *MockFGAClient
func (*MockFGAClient) DeleteTuple ¶
func (c *MockFGAClient) DeleteTuple(context.Context, TupleKey) error
func (*MockFGAClient) GetObjectTuples ¶
func (*MockFGAClient) ListObjects ¶
func (*MockFGAClient) SetExclusiveRelation ¶
func (c *MockFGAClient) SetExclusiveRelation(context.Context, TupleKey) error
func (*MockFGAClient) SetExclusiveSubjectRelation ¶
func (*MockFGAClient) WriteTuple ¶
func (c *MockFGAClient) WriteTuple(context.Context, TupleKey) error
type MockUserProvider ¶
type MockUserProvider struct {
// contains filtered or unexported fields
}
func NewMockUserProvider ¶
func NewMockUserProvider() *MockUserProvider
type ObjectType ¶
type ObjectType = authz.ObjectType
Click to show internal directories.
Click to hide internal directories.