adminlist

Documentation

Index

• Constants
• type Authorizer
  • func New(cfg Config) *Authorizer
  • func (a *Authorizer) Authorize(principal *models.Principal, verb string, resources ...string) error
  • func (a *Authorizer) AuthorizeSilent(principal *models.Principal, verb string, resources ...string) error
  • func (a *Authorizer) FilterAuthorizedResources(principal *models.Principal, verb string, resources ...string) ([]string, error)
• type Config
  • func (c Config) Validate() error

Constants

const AnonymousPrincipalUsername = "anonymous"

Types

type Authorizer

type Authorizer struct {
	// contains filtered or unexported fields
}

Authorizer provides either full (admin) or no access

func New

func New(cfg Config) *Authorizer

New Authorizer using the AdminList method

func (*Authorizer) Authorize

func (a *Authorizer) Authorize(principal *models.Principal, verb string, resources ...string) error

Authorize will give full access (to any resource!) if the user is part of the admin list or no access at all if they are not

func (*Authorizer) AuthorizeSilent

func (a *Authorizer) AuthorizeSilent(principal *models.Principal, verb string, resources ...string) error

func (*Authorizer) FilterAuthorizedResources

func (a *Authorizer) FilterAuthorizedResources(principal *models.Principal, verb string, resources ...string) ([]string, error)

type Config

type Config struct {
	Enabled        bool     `json:"enabled" yaml:"enabled"`
	Users          []string `json:"users" yaml:"users"`
	ReadOnlyUsers  []string `json:"read_only_users" yaml:"read_only_users"`
	Groups         []string `json:"groups" yaml:"groups"`
	ReadOnlyGroups []string `json:"read_only_groups" yaml:"read_only_groups"`
}

Config makes every subject on the list an admin, whereas everyone else has no rights whatsoever

func (Config) Validate

func (c Config) Validate() error

Validate admin list config for viability, can be called from the central config package