authorization

Documentation

Index

• type Authorizer
  • func New(cfg config.Config) Authorizer
• type DummyAuthorizer
  • func (d *DummyAuthorizer) Authorize(principal *models.Principal, verb, resource string) error

Types

type Authorizer

type Authorizer interface {
	Authorize(principal *models.Principal, verb, resource string) error
}

Authorizer always makes a yes/no decision on a specific resource. Which authorization technique is used in the background (e.g. RBAC, adminlist, ...) is hidden through this interface

func New

func New(cfg config.Config) Authorizer

New Authorizer based on the application-wide config

type DummyAuthorizer

type DummyAuthorizer struct{}

DummyAuthorizer is a pluggable Authorizor which can be used if no specific authorizor is configured. It will allow every authz decision, i.e. it is effectively the same as "no authorization at all"

func (*DummyAuthorizer) Authorize

func (d *DummyAuthorizer) Authorize(principal *models.Principal, verb, resource string) error

Authorize on the DummyAuthorizer will allow any subject access to any resource