permission

Documentation

Index

• type EvalRequest
• type OpaPermissionEvaluator
  • func NewOpaPermissionEvaluator() (*OpaPermissionEvaluator, error)
  • func (x *OpaPermissionEvaluator) HasObjectPermission(a auth.Authentication, perm Permission, objectOwner string) bool
  • func (x *OpaPermissionEvaluator) HasPermission(a auth.Authentication, perm Permission) bool
  • func (x *OpaPermissionEvaluator) HasRole(a auth.Authentication, role auth.Role) bool
• type Permission
• type PermissionEvaluator
  • func NewPermissionEvaluator() PermissionEvaluator
• type StaticRoleManager
  • func NewStaticRoleManager() *StaticRoleManager

Types

type EvalRequest

type EvalRequest struct {
	Tenant      string      `json:"tenant"`
	Roles       []auth.Role `json:"roles"`
	Action      Permission  `json:"action"`
	ObjectOwner string      `json:"objectOwner,omitempty"`
}

type OpaPermissionEvaluator

type OpaPermissionEvaluator struct {
	// contains filtered or unexported fields
}

func NewOpaPermissionEvaluator

func NewOpaPermissionEvaluator() (*OpaPermissionEvaluator, error)

func (*OpaPermissionEvaluator) HasObjectPermission

func (x *OpaPermissionEvaluator) HasObjectPermission(
	a auth.Authentication,
	perm Permission,
	objectOwner string,
) bool

func (*OpaPermissionEvaluator) HasPermission

func (x *OpaPermissionEvaluator) HasPermission(
	a auth.Authentication,
	perm Permission,
) bool

func (*OpaPermissionEvaluator) HasRole

func (x *OpaPermissionEvaluator) HasRole(a auth.Authentication, role auth.Role) bool

type Permission

type Permission string

const (
	PermissionRegisterEvent   Permission = "register-event"
	PermissionDeleteEvent     Permission = "delete-event"
	PermissionUpdateEvent     Permission = "update-event"
	PermissionUnregisterEvent Permission = "unregister-event"
	PermissionPostRacedata    Permission = "post-racedata"
)

const (
	PermissionCreateTenant Permission = "create-tenant"
	PermissionDeleteTenant Permission = "delete-tenant"
	PermissionUpdateTenant Permission = "update-tenant"
	PermissionReadTenant   Permission = "read-tenant"
)

const (
	PermissionCreateTrack Permission = "create-track"
	PermissionDeleteTrack Permission = "delete-track"
	PermissionUpdateTrack Permission = "update-track"
)

const (
	PermissionAdminUnregisterAllEvents Permission = "unregister-all-events"
)

collection of admin specific permissions

type PermissionEvaluator

type PermissionEvaluator interface {
	// deprecated
	HasRole(auth auth.Authentication, role auth.Role) bool
	HasPermission(auth auth.Authentication, perm Permission) bool
	HasObjectPermission(auth auth.Authentication, perm Permission, objectOwner string) bool
}

func NewPermissionEvaluator

func NewPermissionEvaluator() PermissionEvaluator

type StaticRoleManager

type StaticRoleManager struct {
	PermissionEvaluator
}

func NewStaticRoleManager

func NewStaticRoleManager() *StaticRoleManager