acl

Documentation

Index

• Constants
• Variables
• func ACLPolicyName(groupID string) string
• func ACLToStatement(acl model.ACL) (model.Statements, error)
• func IsACLPolicyName(policyName string) bool
• func WriteGroupACL(ctx context.Context, svc auth.Service, groupName string, acl model.ACL, ...) error

Constants

const (
	// ACLRead allows reading the specified repositories, as well as
	// managing own credentials.
	ACLRead model.ACLPermission = "Read"
	// ACLWrite allows reading and writing the specified repositories,
	// as well as managing own credentials.
	ACLWrite model.ACLPermission = "Write"
	// ACLSuper allows reading, writing, and all other actions on the
	// specified repositories, as well as managing own credentials.
	ACLSuper model.ACLPermission = "Super"
	// ACLAdmin allows all operations, including all reading, writing,
	// and all other actions on all repositories, and managing
	// authorization and credentials of all users.
	ACLAdmin model.ACLPermission = "Admin"
)

const (
	ACLAdminsGroup  = "Admins"
	ACLSupersGroup  = "Supers"
	ACLWritersGroup = "Writers"
	ACLReadersGroup = "Readers"
)

const ACLPolicyPrefix = "ACL(_-_)"

Variables

var (
	ACLPermissions = []model.ACLPermission{ACLRead, ACLWrite, ACLSuper, ACLAdmin}

	ErrBadACLPermission = fmt.Errorf("%w: Bad ACL permission", model.ErrValidationError)
)

Functions

func ACLPolicyName

func ACLPolicyName(groupID string) string

ACLPolicyName returns the policy identifier for the ACL for groupID.

func ACLToStatement

func ACLToStatement(acl model.ACL) (model.Statements, error)

func IsACLPolicyName

func IsACLPolicyName(policyName string) bool

func WriteGroupACL

func WriteGroupACL(ctx context.Context, svc auth.Service, groupName string, acl model.ACL, creationTime time.Time, warnIfCreate bool) error