permissions

Documentation

Index

• Constants
• Variables
• func BranchArn(repoID, branchID string) string
• func GroupArn(groupID string) string
• func IsValidAction(name string) error
• func ObjectArn(repoID, key string) string
• func PolicyArn(policyID string) string
• func RepoArn(repoID string) string
• func StorageNamespace(namespace string) string
• func TagArn(repoID, tagID string) string
• func TemplateArn(templateID string) string
• func UserArn(userID string) string
• type Node
• type NodeType
• type Permission

Constants

const (
	ReadRepositoryAction     = "fs:ReadRepository"
	CreateRepositoryAction   = "fs:CreateRepository"
	AttachStorageNamespace   = "fs:AttachStorageNamespace"
	ImportFromStorage        = "fs:ImportFromStorage"
	DeleteRepositoryAction   = "fs:DeleteRepository"
	ListRepositoriesAction   = "fs:ListRepositories"
	ReadObjectAction         = "fs:ReadObject"
	WriteObjectAction        = "fs:WriteObject"
	DeleteObjectAction       = "fs:DeleteObject"
	ListObjectsAction        = "fs:ListObjects"
	CreateCommitAction       = "fs:CreateCommit"
	CreateMetaRangeAction    = "fs:CreateMetaRange"
	ReadCommitAction         = "fs:ReadCommit"
	ListCommitsAction        = "fs:ListCommits"
	CreateBranchAction       = "fs:CreateBranch"
	DeleteBranchAction       = "fs:DeleteBranch"
	ReadBranchAction         = "fs:ReadBranch"
	RevertBranchAction       = "fs:RevertBranch"
	ListBranchesAction       = "fs:ListBranches"
	CreateTagAction          = "fs:CreateTag"
	DeleteTagAction          = "fs:DeleteTag"
	ReadTagAction            = "fs:ReadTag"
	ListTagsAction           = "fs:ListTags"
	ReadStorageConfiguration = "fs:ReadConfig"

	ReadUserAction          = "auth:ReadUser"
	CreateUserAction        = "auth:CreateUser"
	DeleteUserAction        = "auth:DeleteUser"
	ListUsersAction         = "auth:ListUsers"
	ReadGroupAction         = "auth:ReadGroup"
	CreateGroupAction       = "auth:CreateGroup"
	DeleteGroupAction       = "auth:DeleteGroup"
	ListGroupsAction        = "auth:ListGroups"
	AddGroupMemberAction    = "auth:AddGroupMember"
	RemoveGroupMemberAction = "auth:RemoveGroupMember"
	ReadPolicyAction        = "auth:ReadPolicy"
	CreatePolicyAction      = "auth:CreatePolicy"
	UpdatePolicyAction      = "auth:UpdatePolicy"
	DeletePolicyAction      = "auth:DeletePolicy"
	ListPoliciesAction      = "auth:ListPolicies"
	AttachPolicyAction      = "auth:AttachPolicy"
	DetachPolicyAction      = "auth:DetachPolicy"
	ReadCredentialsAction   = "auth:ReadCredentials"   //nolint:gosec
	CreateCredentialsAction = "auth:CreateCredentials" //nolint:gosec
	DeleteCredentialsAction = "auth:DeleteCredentials" //nolint:gosec
	ListCredentialsAction   = "auth:ListCredentials"   //nolint:gosec

	ReadActionsAction = "ci:ReadAction"

	PrepareGarbageCollectionCommitsAction = "retention:PrepareGarbageCollectionCommits"
	GetGarbageCollectionRulesAction       = "retention:GetGarbageCollectionRules"
	SetGarbageCollectionRulesAction       = "retention:SetGarbageCollectionRules"

	GetBranchProtectionRulesAction = "branches:GetBranchProtectionRules"
	SetBranchProtectionRulesAction = "branches:SetBranchProtectionRules"
)

const (
	All = "*"
)

Variables

var (
	ErrInvalidAction      = errors.New("invalid action")
	ErrInvalidServiceName = errors.New("invalid service name")
)

Functions

func BranchArn

func BranchArn(repoID, branchID string) string

func GroupArn

func GroupArn(groupID string) string

func IsValidAction

func IsValidAction(name string) error

func ObjectArn

func ObjectArn(repoID, key string) string

func PolicyArn

func PolicyArn(policyID string) string

func RepoArn

func RepoArn(repoID string) string

func StorageNamespace

func StorageNamespace(namespace string) string

func TagArn

func TagArn(repoID, tagID string) string

func TemplateArn

func TemplateArn(templateID string) string

func UserArn

func UserArn(userID string) string

Types

type Node

type Node struct {
	Type       NodeType
	Permission Permission
	Nodes      []Node
}

type NodeType

type NodeType int

const (
	NodeTypeNode NodeType = iota
	NodeTypeOr
	NodeTypeAnd
)

type Permission

type Permission struct {
	Action   string
	Resource string
}