acl

Documentation

Index

• Variables
• type BasicChecker
  • func NewBasicChecker(c SenderClassifier, cnr core.Source, next object.Service) BasicChecker
  • func (b BasicChecker) Delete(ctx context.Context, request *object.DeleteRequest) (*object.DeleteResponse, error)
  • func (b BasicChecker) Get(ctx context.Context, request *object.GetRequest) (object.GetObjectStreamer, error)
  • func (b BasicChecker) GetRange(ctx context.Context, request *object.GetRangeRequest) (object.GetRangeObjectStreamer, error)
  • func (b BasicChecker) GetRangeHash(ctx context.Context, request *object.GetRangeHashRequest) (*object.GetRangeHashResponse, error)
  • func (b BasicChecker) Head(ctx context.Context, request *object.HeadRequest) (*object.HeadResponse, error)
  • func (b BasicChecker) Put(ctx context.Context) (object.PutObjectStreamer, error)
  • func (b BasicChecker) Search(ctx context.Context, request *object.SearchRequest) (object.SearchObjectStreamer, error)
• type InnerRingFetcher
• type RequestV2
• type SenderClassifier
  • func NewSenderClassifier(ir InnerRingFetcher, nm core.Source) SenderClassifier
  • func (c SenderClassifier) Classify(req RequestV2, cid *container.ID, cnr *container.Container) acl.Role

Variables

var (
	ErrMalformedRequest  = errors.New("malformed request")
	ErrUnknownRole       = errors.New("can't classify request sender")
	ErrUnknownContainer  = errors.New("can't fetch container info")
	ErrBasicAccessDenied = errors.New("access denied by basic acl")
)

Types

type BasicChecker

type BasicChecker struct {
	// contains filtered or unexported fields
}

BasicChecker checks basic ACL rules.

func NewBasicChecker

func NewBasicChecker(
	c SenderClassifier,
	cnr core.Source,
	next object.Service) BasicChecker

NewBasicChecker is a constructor for basic ACL checker of object requests.

func (BasicChecker) Delete

func (b BasicChecker) Delete(
	ctx context.Context,
	request *object.DeleteRequest) (*object.DeleteResponse, error)

func (BasicChecker) Get

func (b BasicChecker) Get(
	ctx context.Context,
	request *object.GetRequest) (object.GetObjectStreamer, error)

func (BasicChecker) GetRange

func (b BasicChecker) GetRange(
	ctx context.Context,
	request *object.GetRangeRequest) (object.GetRangeObjectStreamer, error)

func (BasicChecker) GetRangeHash

func (b BasicChecker) GetRangeHash(
	ctx context.Context,
	request *object.GetRangeHashRequest) (*object.GetRangeHashResponse, error)

func (BasicChecker) Head

func (b BasicChecker) Head(
	ctx context.Context,
	request *object.HeadRequest) (*object.HeadResponse, error)

func (BasicChecker) Put

func (b BasicChecker) Put(ctx context.Context) (object.PutObjectStreamer, error)

func (BasicChecker) Search

func (b BasicChecker) Search(
	ctx context.Context,
	request *object.SearchRequest) (object.SearchObjectStreamer, error)

type InnerRingFetcher

type InnerRingFetcher interface {
	InnerRingKeys() ([][]byte, error)
}

type RequestV2

type RequestV2 interface {
	GetMetaHeader() *session.RequestMetaHeader
	GetVerificationHeader() *session.RequestVerificationHeader
}

type SenderClassifier

type SenderClassifier struct {
	// contains filtered or unexported fields
}

func NewSenderClassifier

func NewSenderClassifier(ir InnerRingFetcher, nm core.Source) SenderClassifier

fixme: update classifier constructor

func (SenderClassifier) Classify

func (c SenderClassifier) Classify(
	req RequestV2,
	cid *container.ID,
	cnr *container.Container) acl.Role