rbac

Documentation

Index

• type Role
• type RoleManager
  • func NewDefaultRoleManager(level int) RoleManager
  • func NewSessionRoleManager(maxHierarchyLevel int) RoleManager
• type RoleManagerConstructor
  • func DefaultRoleManager() RoleManagerConstructor
  • func SessionRoleManager() RoleManagerConstructor
• type Session
• type SessionRole

Types

type Role

type Role struct {
	// contains filtered or unexported fields
}

Role represents the data structure for a role in RBAC.

type RoleManager

type RoleManager interface {
	// AddLink adds the inheritance link between two roles. role: name1 and role: name2.
	// domain is a prefix to the roles (can be used for other purposes).
	AddLink(name1 string, name2 string, domain ...string)
	// DeleteLink deletes the inheritance link between two roles. role: name1 and role: name2.
	// domain is a prefix to the roles (can be used for other purposes).
	DeleteLink(name1 string, name2 string, domain ...string)
	// HasLink determines whether a link exists between two roles. role: name1 inherits role: name2.
	// domain is a prefix to the roles (can be used for other purposes).
	HasLink(name1 string, name2 string, domain ...string) bool
	// GetRoles gets the roles that a user inherits.
	// domain is a prefix to the roles (can be used for other purposes).
	GetRoles(name string, domain ...string) []string
	// GetUsers gets the users that inherits a role.
	// domain is a prefix to the users (can be used for other purposes).
	GetUsers(name string, domain ...string) []string
	// PrintRoles prints all the roles to log.
	PrintRoles()
}

RoleManager provides interface to define the operations for managing roles.

func NewDefaultRoleManager

func NewDefaultRoleManager(level int) RoleManager

NewDefaultRoleManager is the constructor for creating an instance of the default RoleManager implementation.

func NewSessionRoleManager

func NewSessionRoleManager(maxHierarchyLevel int) RoleManager

NewSessionRoleManager is the constructor for creating an instance of the SessionRoleManager implementation.

type RoleManagerConstructor

type RoleManagerConstructor func() RoleManager

RoleManagerConstructor provides a definition for constructing a RoleManager.

func DefaultRoleManager

func DefaultRoleManager() RoleManagerConstructor

DefaultRoleManager provides an implementation for the RoleManagerConstructor that creates the default RoleManager as it was previously created.

func SessionRoleManager

func SessionRoleManager() RoleManagerConstructor

SessionRoleManager provides an implementation for the RoleManagerConstructor that supports RBAC sessions with a start time and an end time.

type Session

type Session struct {
	// contains filtered or unexported fields
}

Session represents the activation of a role inheritance for a specified time. A role inheritance is always bound to its temporal validity. As soon as a session loses its validity, the corresponding role inheritance becomes invalid too.

type SessionRole

type SessionRole struct {
	// contains filtered or unexported fields
}

SessionRole is a modified version of the default role. A SessionRole not only has a name, but also a list of sessions.