acl

Documentation

Overview

package acl implements ACLs for enforcement in API and UI.

Index

• type AclSets
  • func ValidateAclSets(sets []*messages.AclSet) (AclSets, error)
• type GrantsByRole
  • func ValidateTaskAcls(pSets AclSets, tSets []string, tAcls []*messages.Acl) (*GrantsByRole, error)
  • func (g *GrantsByRole) Equal(o *GrantsByRole) bool
  • func (g *GrantsByRole) IsOwner(c context.Context) (bool, error)
  • func (g *GrantsByRole) IsReader(c context.Context) (bool, error)

Types

type AclSets

type AclSets map[string][]*messages.Acl

AclSets are parsed and indexed `AclSet` of a project.

func ValidateAclSets

func ValidateAclSets(sets []*messages.AclSet) (AclSets, error)

ValidateAclSets validates list of AclSet of a project and returns AclSets.

type GrantsByRole

type GrantsByRole struct {
	Owners  []string `gae:",noindex"`
	Readers []string `gae:",noindex"`
}

GrantsByRole can answer questions who can READ and who OWNS the task.

func ValidateTaskAcls

func ValidateTaskAcls(pSets AclSets, tSets []string, tAcls []*messages.Acl) (*GrantsByRole, error)

ValidateTaskAcls validates task's ACLs and returns TaskAcls.

func (*GrantsByRole) Equal

func (g *GrantsByRole) Equal(o *GrantsByRole) bool

func (*GrantsByRole) IsOwner

func (g *GrantsByRole) IsOwner(c context.Context) (bool, error)

func (*GrantsByRole) IsReader

func (g *GrantsByRole) IsReader(c context.Context) (bool, error)