rbacutils

Documentation

Index

• Constants
• type SRbacPolicy
  • func (policy *SRbacPolicy) Allow(userCred jsonutils.JSONObject, service, resource, action string, ...) TRbacResult
  • func (policy *SRbacPolicy) Decode(policyJson jsonutils.JSONObject) error
  • func (policy *SRbacPolicy) Encode() (jsonutils.JSONObject, error)
  • func (policy *SRbacPolicy) Explain(request [][]string) [][]string
  • func (policy *SRbacPolicy) GetMatchRule(service string, resource string, action string, extra ...string) *SRbacRule
• type SRbacRule
  • func CompactRules(rules []SRbacRule) []SRbacRule
• type TRbacResult
  • func (r1 TRbacResult) StricterThan(r2 TRbacResult) bool
  • func (r TRbacResult) Strictness() int

Constants

const (
	WILD_MATCH = "*"

	AdminAllow = TRbacResult("allow")
	OwnerAllow = TRbacResult("owner")
	UserAllow  = TRbacResult("user")
	GuestAllow = TRbacResult("guest")
	Deny       = TRbacResult("deny")
)

Types

type SRbacPolicy

type SRbacPolicy struct {
	Condition string
	IsAdmin   bool
	Rules     []SRbacRule
}

func (*SRbacPolicy) Allow

func (policy *SRbacPolicy) Allow(userCred jsonutils.JSONObject, service, resource, action string, extra ...string) TRbacResult

func (*SRbacPolicy) Decode

func (policy *SRbacPolicy) Decode(policyJson jsonutils.JSONObject) error

func (*SRbacPolicy) Encode

func (policy *SRbacPolicy) Encode() (jsonutils.JSONObject, error)

func (*SRbacPolicy) Explain

func (policy *SRbacPolicy) Explain(request [][]string) [][]string

func (*SRbacPolicy) GetMatchRule

func (policy *SRbacPolicy) GetMatchRule(service string, resource string, action string, extra ...string) *SRbacRule

type SRbacRule

type SRbacRule struct {
	Service  string
	Resource string
	Action   string
	Extra    []string
	Result   TRbacResult
}

func CompactRules

func CompactRules(rules []SRbacRule) []SRbacRule

type TRbacResult

type TRbacResult string

func (TRbacResult) StricterThan

func (r1 TRbacResult) StricterThan(r2 TRbacResult) bool

func (TRbacResult) Strictness

func (r TRbacResult) Strictness() int