roles

Documentation

Index

• Variables
• type Role
  • func FindRole(name string) *Role
  • func NewRole(name string, nsType permissions.NamespaceType, ...) *Role
• type SystemRole
  • func FindSystemRole(name string) *SystemRole
  • func NewSystemRole(name string, perms ...*permissions.Permission) *SystemRole

Variables

var (
	OrgOwner = NewRole(
		"org_owner",
		permissions.NamespaceOrg,
		permissions.AppCreate, permissions.AppDelete, permissions.AppUpdate, permissions.AppList, permissions.AppStatus,
		permissions.OrgUpdate, permissions.OrgDelete,
		permissions.TokenIssue, permissions.TokenDelete,
	)

	OrgAdmin = NewRole(
		"org_developer",
		permissions.NamespaceOrg,
		permissions.AppCreate, permissions.AppDelete, permissions.AppUpdate, permissions.AppList, permissions.AppStatus,
		permissions.TokenIssue, permissions.TokenDelete,
	)
)

var (
	SystemAuth = NewSystemRole(
		"auth",
		permissions.UserCreate, permissions.UserGetAll, permissions.UserDelete, permissions.UserGet, permissions.UserUpdate,
		permissions.OrgCreate, permissions.OrgList, permissions.OrgListAll, permissions.OrgDelete, permissions.OrgUpdate, permissions.OrgMemberManagement, permissions.OrgMemberList,
		permissions.UserOrgGetRoleBinding,
		permissions.TokenIssue, permissions.TokenValidate,
	)

	SystemAdmin = NewSystemRole(
		"system_admin",
		permissions.UserGetAll, permissions.UserDelete, permissions.UserGet, permissions.UserUpdate,
		permissions.TokenIssue, permissions.TokenDelete,
		permissions.OrgCreate, permissions.OrgList, permissions.OrgListAll, permissions.OrgDelete, permissions.OrgUpdate, permissions.OrgUpdate,
		permissions.AppCreate, permissions.AppUpdate, permissions.AppDelete, permissions.AppList, permissions.AppStatus,
	)

	SystemDeveloper = NewSystemRole(
		"system_developer",
		permissions.UserGetAll,
		permissions.OrgCreate, permissions.OrgList,
	)
)

var (
	Self = NewRole(
		"user_self",
		permissions.NamespaceUser,
		permissions.AppCreate, permissions.AppDelete, permissions.AppUpdate, permissions.AppList, permissions.AppStatus,
		permissions.TokenIssue, permissions.TokenDelete,
		permissions.UserDelete, permissions.UserGet, permissions.UserUpdate,
	)
)

Types

type Role

type Role struct {
	Name        string                    `json:"name" yaml:"name"`
	Type        permissions.NamespaceType `json:"type" yaml:"type"`
	Permissions []*permissions.Permission `json:"permissions" yaml:"permissions"`
}

func FindRole

func FindRole(name string) *Role

func NewRole

func NewRole(name string, nsType permissions.NamespaceType, perms ...*permissions.Permission) *Role

type SystemRole

type SystemRole struct {
	Name        string                    `json:"name" yaml:"name"`
	Permissions []*permissions.Permission `json:"permissions" yaml:"permissions"`
}

func FindSystemRole

func FindSystemRole(name string) *SystemRole

func NewSystemRole

func NewSystemRole(name string, perms ...*permissions.Permission) *SystemRole