Versions in this module Expand all Collapse all v0 v0.2.0 Jun 11, 2026 Changes in this version + var ErrConflict = store.ErrConflict + var ErrNotFound = store.ErrNotFound + var ErrValidation = errors.New("validation error") + func AssignRole(shared store.Shared, tenant store.Tenant, sub, roleName string) error + func Authorize(tenant store.Tenant, sub, operation string) (bool, error) + func BootstrapMeta(stores *store.Stores, adminSub string) error + func CreateOperation(shared store.Shared, name string) error + func CreateResource(shared store.Shared, name string) error + func CreateRole(tenant store.Tenant, name string) error + func DeleteOperation(shared store.Shared, name string) error + func DeleteResource(shared store.Shared, name string) error + func DeleteRole(tenant store.Tenant, name string) error + func EffectiveOperations(tenant store.Tenant, sub string) ([]model.OperationScope, error) + func EnsureOperation(shared store.Shared, name string) error + func EnsureRole(tenant store.Tenant, name string) error + func EnsureUser(shared store.Shared, sub string) error + func GetRole(tenant store.Tenant, name string) (*store.Role, error) + func ListOperations(shared store.Shared) ([]store.Operation, error) + func ListResources(shared store.Shared) ([]store.Resource, error) + func ListRoles(tenant store.Tenant) ([]store.Role, error) + func ListUsers(shared store.Shared) ([]store.User, error) + func MetaOperations(tenant store.Tenant, sub string) ([]model.OperationScope, error) + func RecordIDs(tenant store.Tenant, sub string, operations []string) (map[string][]string, error) + func RemoveRolePermission(tenant store.Tenant, roleName, operation string) error + func RemoveUserPermission(tenant store.Tenant, sub, operation string) error + func RenameRole(tenant store.Tenant, name, newName string) error + func RolePermissions(tenant store.Tenant, name string) ([]model.OperationScope, error) + func SetRolePermission(shared store.Shared, tenant store.Tenant, roleName, operation string, ...) error + func SetUserPermission(shared store.Shared, tenant store.Tenant, sub, operation string, ...) error + func Sync(stores *store.Stores, files []BootstrapFile) error + func UnassignRole(tenant store.Tenant, sub, roleName string) error + func UpdateRoleRestrictedIDs(tenant store.Tenant, roleName, operation string, add, remove []string) error + func UpdateUserRestrictedIDs(tenant store.Tenant, sub, operation string, add, remove []string) error + func UserRoles(tenant store.Tenant, sub string) ([]string, error) + type BootstrapFile struct + Operations []string + Resources []string + Tenants map[string]TenantBootstrap + func LoadBootstrapFiles(patterns []string) ([]BootstrapFile, error) + type PermissionSpec struct + IDs []string + Scope model.Scope + func (p *PermissionSpec) UnmarshalYAML(node *yaml.Node) error + type TenantBootstrap struct + Roles map[string]map[string]PermissionSpec + Users map[string]UserBootstrap + type UserBootstrap struct + Permissions map[string]PermissionSpec + Roles []string v0.1.1 Jun 10, 2026