rule

Documentation

Index

• func AllowIfAdmin() privacy.QueryMutationRule
• func DenyIfNoViewer() privacy.QueryMutationRule
• func DenyMismatchedTenants() privacy.MutationRule
• func FilterTenantRule() privacy.QueryMutationRule

Functions

func AllowIfAdmin

func AllowIfAdmin() privacy.QueryMutationRule

AllowIfAdmin is a rule that returns allow decision if the viewer is admin.

func DenyIfNoViewer

func DenyIfNoViewer() privacy.QueryMutationRule

DenyIfNoViewer is a rule that returns deny decision if the viewer is missing in the context.

func DenyMismatchedTenants

func DenyMismatchedTenants() privacy.MutationRule

DenyMismatchedTenants is a rule that runs only on create operations and returns a deny decision if the operation tries to add users to groups that are not in the same tenant.

func FilterTenantRule

func FilterTenantRule() privacy.QueryMutationRule

FilterTenantRule is a query/mutation rule that filters out entities that are not in the tenant.