authz

Documentation

Index

• Constants
• Variables
• func Check(ctx context.Context, res restrict.Resource, opts ...CheckOption) (entities.Subject, error)
• func CtxWithRBAC(ctx context.Context, rbac RBAC) context.Context
• func IsErrAccessDenied(err error) error
• func New(pol *restrict.PolicyDefinition) (*rbac, error)
• func UseResource(rsc string) restrict.Resource
• type CheckOption
  • func WithActions(actions ...string) CheckOption
  • func WithContext(ctx restrict.Context) CheckOption
  • func WithTry() CheckOption
• type RBAC
  • func FromCtx(ctx context.Context) RBAC

Constants

const RBACCtxKey rbacCtxKey = "rbac"

Variables

var (
	ErrBadSubject   = errors.New("bad subject in token")
	ErrAccessDenied = errors.New("access denied")
)

var (
	ErrNotAuthorized = errors.New("not authorized")
)

Functions

func Check

func Check(ctx context.Context, res restrict.Resource, opts ...CheckOption) (entities.Subject, error)

Check is a convenience function to pull the RBAC instance out of ctx and Check.

func CtxWithRBAC

func CtxWithRBAC(ctx context.Context, rbac RBAC) context.Context

func IsErrAccessDenied

func IsErrAccessDenied(err error) error

func New

func New(pol *restrict.PolicyDefinition) (*rbac, error)

func UseResource

func UseResource(rsc string) restrict.Resource

Types

type CheckOption

type CheckOption func(*checkOptions)

func WithActions

func WithActions(actions ...string) CheckOption

func WithContext

func WithContext(ctx restrict.Context) CheckOption

func WithTry

func WithTry() CheckOption

WithTry indicates that failures should not be logged.

type RBAC

type RBAC interface {
	Check(ctx context.Context, res restrict.Resource, opts ...CheckOption) (entities.Subject, error)
}

func FromCtx

func FromCtx(ctx context.Context) RBAC