rbac

Documentation

Index

• type RBAC
  • func New(client client.Client, namespace string) *RBAC
  • func (r *RBAC) GetOrganizatons(ctx context.Context) (*unikornv1.OrganizationList, error)
  • func (r *RBAC) UserExists(ctx context.Context, email string) (bool, error)
  • func (r *RBAC) UserPermissions(ctx context.Context, email string) (*rbac.Permissions, error)

Types

type RBAC

type RBAC struct {
	// contains filtered or unexported fields
}

RBAC contains all the scoping rules for services across the platform.

func New

func New(client client.Client, namespace string) *RBAC

New creates a new RBAC client.

func (*RBAC) GetOrganizatons

func (r *RBAC) GetOrganizatons(ctx context.Context) (*unikornv1.OrganizationList, error)

GetOrganizatons grabs all organizations for the system.

func (*RBAC) UserExists

func (r *RBAC) UserExists(ctx context.Context, email string) (bool, error)

UserExists is an optimized version of the permissions builder that is used to authorize authentication requests. Failure here means the user need to signup and register themselves with an organization uing a back-channel.

func (*RBAC) UserPermissions

func (r *RBAC) UserPermissions(ctx context.Context, email string) (*rbac.Permissions, error)

UserPermissions builds up a hierarchy of permissions for a user, this is used both internally and given out to resource servers via token introspection.