iamregistry

Documentation

Overview

Package iamregistry provides data structures for resolving IAM roles and permissions.

Index

• type Roles
  • func NewRoles(roles ...*adminpb.Role) (*Roles, error)
  • func (r *Roles) Count() int
  • func (r *Roles) FindRoleByName(name string) (*adminpb.Role, bool)
  • func (r *Roles) RangeRoles(fn func(*adminpb.Role) bool)
  • func (r *Roles) RangeRolesByPermission(permission string, fn func(*adminpb.Role) bool)
  • func (r *Roles) RoleHasPermission(name, permission string) bool

Types

type Roles

type Roles struct {
	// contains filtered or unexported fields
}

Roles are a set of roles.

func NewRoles

func NewRoles(roles ...*adminpb.Role) (*Roles, error)

NewRoles creates a set of Roles from a pre-defined roles annotation.

func (*Roles) Count

func (r *Roles) Count() int

Count returns a count of the roles.

func (*Roles) FindRoleByName

func (r *Roles) FindRoleByName(name string) (*adminpb.Role, bool)

FindRoleByName looks up a role by resource name.

func (*Roles) RangeRoles

func (r *Roles) RangeRoles(fn func(*adminpb.Role) bool)

RangeRoles iterates over all registered roles while f returns true. The iteration order is undefined.

func (*Roles) RangeRolesByPermission

func (r *Roles) RangeRolesByPermission(permission string, fn func(*adminpb.Role) bool)

RangeRolesByPermission iterates over all registered roles with the provided permission while f returns true. The iteration order is undefined, and permissions with wildcards are not allowed.

func (*Roles) RoleHasPermission

func (r *Roles) RoleHasPermission(name, permission string) bool

RoleHasPermission checks whether the role with the provided name has the provided permission.