rbac

Documentation

Index

• type RBAC
  • func New(client client.Client, namespace string) *RBAC
  • func (r *RBAC) GetACL(ctx context.Context, permissions *rbac.Permissions, organization string) (*rbac.ACL, error)
  • func (r *RBAC) UserExists(ctx context.Context, email string) (bool, error)
  • func (r *RBAC) UserPermissions(ctx context.Context, email string) (*rbac.Permissions, error)

Types

type RBAC

type RBAC struct {
	// contains filtered or unexported fields
}

RBAC contains all the scoping rules for services across the platform.

func New

func New(client client.Client, namespace string) *RBAC

New creates a new RBAC client.

func (*RBAC) GetACL

func (r *RBAC) GetACL(ctx context.Context, permissions *rbac.Permissions, organization string) (*rbac.ACL, error)

GetACL returns a granualr set of permissions for a user based on their scope. This is used for API leval access control and UX.

func (*RBAC) UserExists

func (r *RBAC) UserExists(ctx context.Context, email string) (bool, error)

UserExists is an optimized version of the permissions builder that is used to authorize authentication requests. Failure here means the user need to signup and register themselves with an organization uing a back-channel.

func (*RBAC) UserPermissions

func (r *RBAC) UserPermissions(ctx context.Context, email string) (*rbac.Permissions, error)

UserPermissions builds up a hierarchy of permissions for a user, this is used both internally and given out to resource servers via token introspection.