globalnamespaceaccess

Documentation

Index

• Constants
• func CheckAccessToUpdateMembers(members []v3.Member, data map[string]interface{}, ownerAccess bool) error
• type MemberAccess
  • func (ma *MemberAccess) CheckCallerAccessToTargets(request *types.APIContext, targets []string, resourceType string, ...) error
  • func (ma *MemberAccess) EnsureRoleInTargets(targetProjects, roleTemplates []string, callerID string) error
  • func (ma *MemberAccess) GetAccessTypeOfCaller(callerID, creatorID, name string, members []v3.Member) (string, error)
  • func (ma *MemberAccess) IsAdmin(callerID string) (bool, error)
  • func (ma *MemberAccess) RemoveRolesFromTargets(targetProjects, rolesToRemove []string, mcappName string, removeAllRoles bool) error

Constants

const (
	ImpersonateUserHeader  = "Impersonate-User"
	ImpersonateGroupHeader = "Impersonate-Group"
	OwnerAccess            = "owner"
	ReadonlyAccess         = "read-only"
)

Functions

func CheckAccessToUpdateMembers

func CheckAccessToUpdateMembers(members []v3.Member, data map[string]interface{}, ownerAccess bool) error

CheckAccessToUpdateMembers checks if the request is updating members list, and if the caller has permission to do so

Types

type MemberAccess

type MemberAccess struct {
	Users              v3.UserInterface
	RoleTemplateLister v3.RoleTemplateLister
	PrtbLister         v3.ProjectRoleTemplateBindingLister
	CrtbLister         v3.ClusterRoleTemplateBindingLister
	GrbLister          v3.GlobalRoleBindingLister
	GrLister           v3.GlobalRoleLister
	Prtbs              v3.ProjectRoleTemplateBindingInterface
	Crtbs              v3.ClusterRoleTemplateBindingInterface
	ProjectLister      v3.ProjectLister
	ClusterLister      v3.ClusterLister
}

func (*MemberAccess) CheckCallerAccessToTargets

func (ma *MemberAccess) CheckCallerAccessToTargets(request *types.APIContext, targets []string, resourceType string, into interface{}) error

func (*MemberAccess) EnsureRoleInTargets

func (ma *MemberAccess) EnsureRoleInTargets(targetProjects, roleTemplates []string, callerID string) error

func (*MemberAccess) GetAccessTypeOfCaller

func (ma *MemberAccess) GetAccessTypeOfCaller(callerID, creatorID, name string, members []v3.Member) (string, error)

func (*MemberAccess) IsAdmin

func (ma *MemberAccess) IsAdmin(callerID string) (bool, error)

func (*MemberAccess) RemoveRolesFromTargets

func (ma *MemberAccess) RemoveRolesFromTargets(targetProjects, rolesToRemove []string, mcappName string, removeAllRoles bool) error