dbrole

Documentation

Overview

Corresponding *INSTANCE_* roles access is determined by the Instancer's configuration, allowing it to access records exclusively with a specific instance.

• `TENANT_INSTANCE_READER` - has read access to its tenant instance's data
• `INSTANCE_READER` - has read access to specific instance data
• `TENANT_INSTANCE_WRITER` - has read & write access to its tenant instance's data
• `INSTANCE_WRITER` - has read & write access to specific instance data

DAL allows to map a user's service role to the DB role that will be used for that user. If a user has multiple service roles which map to several DB roles, the DB role with the most extensive privileges will be used (see `DbRoles()` for reference to ordered list of DbRoles.

Index

• type DbRole
  • func Max(dbRoles []DbRole) DbRole
  • func Min(dbRoles []DbRole) DbRole
  • func (dbRole DbRole) GetRoleWithInstancer() DbRole
  • func (dbRole DbRole) IsDbRoleInstanceScoped() bool
  • func (dbRole DbRole) IsDbRoleTenantScoped() bool
• type DbRoleSlice
  • func DbRoles() DbRoleSlice
  • func (a DbRoleSlice) Len() int
  • func (a DbRoleSlice) Less(i, j int) bool
  • func (a DbRoleSlice) Swap(i, j int)

Types

type DbRole

type DbRole string

DbRole Database roles/users.

const (
	// NO_ROLE DB Roles.
	NO_ROLE                DbRole = ""
	TENANT_INSTANCE_READER DbRole = "tenant_instance_reader"
	TENANT_READER          DbRole = "tenant_reader"
	INSTANCE_READER        DbRole = "instance_reader"
	READER                 DbRole = "reader"
	TENANT_INSTANCE_WRITER DbRole = "tenant_instance_writer"
	TENANT_WRITER          DbRole = "tenant_writer"
	INSTANCE_WRITER        DbRole = "instance_writer"
	WRITER                 DbRole = "writer"
	MAIN                   DbRole = "main"
)

func Max

func Max(dbRoles []DbRole) DbRole

func Min

func Min(dbRoles []DbRole) DbRole

func (DbRole) GetRoleWithInstancer

func (dbRole DbRole) GetRoleWithInstancer() DbRole

Map roles to instancer based when Instancer is set. Useful for backward compatibility when role Mapping do not reference *INSTANCE* roles, but an Instancer is configured to limit the access to an instance.

func (DbRole) IsDbRoleInstanceScoped

func (dbRole DbRole) IsDbRoleInstanceScoped() bool

func (DbRole) IsDbRoleTenantScoped

func (dbRole DbRole) IsDbRoleTenantScoped() bool

type DbRoleSlice

type DbRoleSlice []DbRole // Needed for sorting records

func DbRoles

func DbRoles() DbRoleSlice

Returns *Ordered* slice of DbRoles. A reader role is always considered to have fewer permissions than a writer role. and a tenant-specific reader/writer role is always considered to have fewer permissions, than a non-tenant specific reader/writer role, respectively.

func (DbRoleSlice) Len

func (a DbRoleSlice) Len() int

func (DbRoleSlice) Less

func (a DbRoleSlice) Less(i, j int) bool

Returns true if the first role has fewer permissions than the second role, and true if the two roles are the same or the second role has more permissions.

func (DbRoleSlice) Swap

func (a DbRoleSlice) Swap(i, j int)