defaultrolemanager

Documentation

Index

• func NewRoleManager(maxHierarchyLevel int) rbac.RoleManager
• type MatchingFunc
• type Role
• type RoleManager
  • func (rm *RoleManager) AddLink(name1 string, name2 string, domain ...string) error
  • func (rm *RoleManager) AddMatchingFunc(name string, fn MatchingFunc)
  • func (rm *RoleManager) Clear() error
  • func (rm *RoleManager) DeleteLink(name1 string, name2 string, domain ...string) error
  • func (rm *RoleManager) GetRoles(name string, domain ...string) ([]string, error)
  • func (rm *RoleManager) GetUsers(name string, domain ...string) ([]string, error)
  • func (rm *RoleManager) HasLink(name1 string, name2 string, domain ...string) (bool, error)
  • func (rm *RoleManager) PrintRoles() error

Functions

func NewRoleManager

func NewRoleManager(maxHierarchyLevel int) rbac.RoleManager

NewRoleManager is the constructor for creating an instance of the default RoleManager implementation.

Types

type MatchingFunc

type MatchingFunc func(arg1, arg2 string) bool

type Role

type Role struct {
	// contains filtered or unexported fields
}

Role represents the data structure for a role in RBAC.

type RoleManager

type RoleManager struct {
	// contains filtered or unexported fields
}

RoleManager provides a default implementation for the RoleManager interface

func (*RoleManager) AddLink

func (rm *RoleManager) AddLink(name1 string, name2 string, domain ...string) error

AddLink adds the inheritance link between role: name1 and role: name2. aka role: name1 inherits role: name2. domain is a prefix to the roles.

func (*RoleManager) AddMatchingFunc

func (rm *RoleManager) AddMatchingFunc(name string, fn MatchingFunc)

func (*RoleManager) Clear

func (rm *RoleManager) Clear() error

Clear clears all stored data and resets the role manager to the initial state.

func (*RoleManager) DeleteLink

func (rm *RoleManager) DeleteLink(name1 string, name2 string, domain ...string) error

DeleteLink deletes the inheritance link between role: name1 and role: name2. aka role: name1 does not inherit role: name2 any more. domain is a prefix to the roles.

func (*RoleManager) GetRoles

func (rm *RoleManager) GetRoles(name string, domain ...string) ([]string, error)

GetRoles gets the roles that a subject inherits. domain is a prefix to the roles.

func (*RoleManager) GetUsers

func (rm *RoleManager) GetUsers(name string, domain ...string) ([]string, error)

GetUsers gets the users that inherits a subject. domain is an unreferenced parameter here, may be used in other implementations.

func (*RoleManager) HasLink

func (rm *RoleManager) HasLink(name1 string, name2 string, domain ...string) (bool, error)

HasLink determines whether role: name1 inherits role: name2. domain is a prefix to the roles.

func (*RoleManager) PrintRoles

func (rm *RoleManager) PrintRoles() error

PrintRoles prints all the roles to log.