v1

package
v0.0.0-...-187538d Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Mar 13, 2024 License: Apache-2.0 Imports: 12 Imported by: 0

Documentation

Overview

Package v1 api version 1.

Index

Constants

View Source
const (
	V1PDPService_GetPermissionsState_FullMethodName = "/policydecisionpoint.V1PDPService/GetPermissionsState"
	V1PDPService_EvaluatePermissions_FullMethodName = "/policydecisionpoint.V1PDPService/EvaluatePermissions"
)

Variables

View Source
var (
	VirtualState_VirtualStateView_name = map[int32]string{
		0: "COMBINED",
		1: "UNCOMBINED",
	}
	VirtualState_VirtualStateView_value = map[string]int32{
		"COMBINED":   0,
		"UNCOMBINED": 1,
	}
)

Enum value maps for VirtualState_VirtualStateView.

View Source
var File_internal_agents_services_pdp_endpoints_api_v1_pdp_proto protoreflect.FileDescriptor
View Source
var V1PDPService_ServiceDesc = grpc.ServiceDesc{
	ServiceName: "policydecisionpoint.V1PDPService",
	HandlerType: (*V1PDPServiceServer)(nil),
	Methods: []grpc.MethodDesc{
		{
			MethodName: "GetPermissionsState",
			Handler:    _V1PDPService_GetPermissionsState_Handler,
		},
		{
			MethodName: "EvaluatePermissions",
			Handler:    _V1PDPService_EvaluatePermissions_Handler,
		},
	},
	Streams:  []grpc.StreamDesc{},
	Metadata: "internal/agents/services/pdp/endpoints/api/v1/pdp.proto",
}

V1PDPService_ServiceDesc is the grpc.ServiceDesc for V1PDPService service. It's only intended for direct use with grpc.RegisterService, and not to be introspected or modified (even as a copy)

Functions

func RegisterV1PDPServiceServer

func RegisterV1PDPServiceServer(s grpc.ServiceRegistrar, srv V1PDPServiceServer)

Types

type ACPermissions

type ACPermissions struct {
	Forbid []*ACPolicyStatementWrapper `protobuf:"bytes,1,rep,name=forbid,proto3" json:"forbid,omitempty"`
	Permit []*ACPolicyStatementWrapper `protobuf:"bytes,2,rep,name=permit,proto3" json:"permit,omitempty"`
	// contains filtered or unexported fields
}

func (*ACPermissions) Descriptor deprecated

func (*ACPermissions) Descriptor() ([]byte, []int)

Deprecated: Use ACPermissions.ProtoReflect.Descriptor instead.

func (*ACPermissions) GetForbid

func (x *ACPermissions) GetForbid() []*ACPolicyStatementWrapper

func (*ACPermissions) GetPermit

func (x *ACPermissions) GetPermit() []*ACPolicyStatementWrapper

func (*ACPermissions) ProtoMessage

func (*ACPermissions) ProtoMessage()

func (*ACPermissions) ProtoReflect

func (x *ACPermissions) ProtoReflect() protoreflect.Message

func (*ACPermissions) Reset

func (x *ACPermissions) Reset()

func (*ACPermissions) String

func (x *ACPermissions) String() string

type ACPolicyStatement

type ACPolicyStatement struct {
	Name      string   `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	Actions   []string `protobuf:"bytes,2,rep,name=actions,proto3" json:"actions,omitempty"`
	Resources []string `protobuf:"bytes,3,rep,name=resources,proto3" json:"resources,omitempty"`
	// contains filtered or unexported fields
}

func (*ACPolicyStatement) Descriptor deprecated

func (*ACPolicyStatement) Descriptor() ([]byte, []int)

Deprecated: Use ACPolicyStatement.ProtoReflect.Descriptor instead.

func (*ACPolicyStatement) GetActions

func (x *ACPolicyStatement) GetActions() []string

func (*ACPolicyStatement) GetName

func (x *ACPolicyStatement) GetName() string

func (*ACPolicyStatement) GetResources

func (x *ACPolicyStatement) GetResources() []string

func (*ACPolicyStatement) ProtoMessage

func (*ACPolicyStatement) ProtoMessage()

func (*ACPolicyStatement) ProtoReflect

func (x *ACPolicyStatement) ProtoReflect() protoreflect.Message

func (*ACPolicyStatement) Reset

func (x *ACPolicyStatement) Reset()

func (*ACPolicyStatement) String

func (x *ACPolicyStatement) String() string

type ACPolicyStatementWrapper

type ACPolicyStatementWrapper struct {
	Statement      *ACPolicyStatement `protobuf:"bytes,1,opt,name=statement,proto3" json:"statement,omitempty"`
	StatmentHashed string             `protobuf:"bytes,2,opt,name=statmentHashed,proto3" json:"statmentHashed,omitempty"`
	// contains filtered or unexported fields
}

func (*ACPolicyStatementWrapper) Descriptor deprecated

func (*ACPolicyStatementWrapper) Descriptor() ([]byte, []int)

Deprecated: Use ACPolicyStatementWrapper.ProtoReflect.Descriptor instead.

func (*ACPolicyStatementWrapper) GetStatement

func (x *ACPolicyStatementWrapper) GetStatement() *ACPolicyStatement

func (*ACPolicyStatementWrapper) GetStatmentHashed

func (x *ACPolicyStatementWrapper) GetStatmentHashed() string

func (*ACPolicyStatementWrapper) ProtoMessage

func (*ACPolicyStatementWrapper) ProtoMessage()

func (*ACPolicyStatementWrapper) ProtoReflect

func (x *ACPolicyStatementWrapper) ProtoReflect() protoreflect.Message

func (*ACPolicyStatementWrapper) Reset

func (x *ACPolicyStatementWrapper) Reset()

func (*ACPolicyStatementWrapper) String

func (x *ACPolicyStatementWrapper) String() string

type Attribute

type Attribute struct {
	Key   string `protobuf:"bytes,1,opt,name=key,proto3" json:"key,omitempty"`
	Value string `protobuf:"bytes,2,opt,name=value,proto3" json:"value,omitempty"`
	// contains filtered or unexported fields
}

func (*Attribute) Descriptor deprecated

func (*Attribute) Descriptor() ([]byte, []int)

Deprecated: Use Attribute.ProtoReflect.Descriptor instead.

func (*Attribute) GetKey

func (x *Attribute) GetKey() string

func (*Attribute) GetValue

func (x *Attribute) GetValue() string

func (*Attribute) ProtoMessage

func (*Attribute) ProtoMessage()

func (*Attribute) ProtoReflect

func (x *Attribute) ProtoReflect() protoreflect.Message

func (*Attribute) Reset

func (x *Attribute) Reset()

func (*Attribute) String

func (x *Attribute) String() string

type Identity

type Identity struct {
	Uur        string       `protobuf:"bytes,1,opt,name=uur,proto3" json:"uur,omitempty"`
	Attributes []*Attribute `protobuf:"bytes,2,rep,name=attributes,proto3" json:"attributes,omitempty"`
	// contains filtered or unexported fields
}

func (*Identity) Descriptor deprecated

func (*Identity) Descriptor() ([]byte, []int)

Deprecated: Use Identity.ProtoReflect.Descriptor instead.

func (*Identity) GetAttributes

func (x *Identity) GetAttributes() []*Attribute

func (*Identity) GetUur

func (x *Identity) GetUur() string

func (*Identity) ProtoMessage

func (*Identity) ProtoMessage()

func (*Identity) ProtoReflect

func (x *Identity) ProtoReflect() protoreflect.Message

func (*Identity) Reset

func (x *Identity) Reset()

func (*Identity) String

func (x *Identity) String() string

type PDPService

type PDPService interface {
	Setup() error
	GetPermissionsState(identityUUR azpolicies.UURString, settings ...azpermissions.PermissionsEngineOption) (*azpermissions.PermissionsState, error)
}

PDPService is the service for the PDP.

type PermissionsEngine

type PermissionsEngine struct {
	VirtualState *VirtualState `protobuf:"bytes,1,opt,name=virtualState,proto3" json:"virtualState,omitempty"`
	// contains filtered or unexported fields
}

func (*PermissionsEngine) Descriptor deprecated

func (*PermissionsEngine) Descriptor() ([]byte, []int)

Deprecated: Use PermissionsEngine.ProtoReflect.Descriptor instead.

func (*PermissionsEngine) GetVirtualState

func (x *PermissionsEngine) GetVirtualState() *VirtualState

func (*PermissionsEngine) ProtoMessage

func (*PermissionsEngine) ProtoMessage()

func (*PermissionsEngine) ProtoReflect

func (x *PermissionsEngine) ProtoReflect() protoreflect.Message

func (*PermissionsEngine) Reset

func (x *PermissionsEngine) Reset()

func (*PermissionsEngine) String

func (x *PermissionsEngine) String() string

type PermissionsEvaluation

type PermissionsEvaluation struct {
	Account  string   `protobuf:"bytes,1,opt,name=account,proto3" json:"account,omitempty"`
	Tenant   string   `protobuf:"bytes,2,opt,name=tenant,proto3" json:"tenant,omitempty"`
	Project  string   `protobuf:"bytes,3,opt,name=project,proto3" json:"project,omitempty"`
	Domain   string   `protobuf:"bytes,4,opt,name=domain,proto3" json:"domain,omitempty"`
	Resource string   `protobuf:"bytes,5,opt,name=resource,proto3" json:"resource,omitempty"`
	Actions  []string `protobuf:"bytes,6,rep,name=actions,proto3" json:"actions,omitempty"`
	// contains filtered or unexported fields
}

func (*PermissionsEvaluation) Descriptor deprecated

func (*PermissionsEvaluation) Descriptor() ([]byte, []int)

Deprecated: Use PermissionsEvaluation.ProtoReflect.Descriptor instead.

func (*PermissionsEvaluation) GetAccount

func (x *PermissionsEvaluation) GetAccount() string

func (*PermissionsEvaluation) GetActions

func (x *PermissionsEvaluation) GetActions() []string

func (*PermissionsEvaluation) GetDomain

func (x *PermissionsEvaluation) GetDomain() string

func (*PermissionsEvaluation) GetProject

func (x *PermissionsEvaluation) GetProject() string

func (*PermissionsEvaluation) GetResource

func (x *PermissionsEvaluation) GetResource() string

func (*PermissionsEvaluation) GetTenant

func (x *PermissionsEvaluation) GetTenant() string

func (*PermissionsEvaluation) ProtoMessage

func (*PermissionsEvaluation) ProtoMessage()

func (*PermissionsEvaluation) ProtoReflect

func (x *PermissionsEvaluation) ProtoReflect() protoreflect.Message

func (*PermissionsEvaluation) Reset

func (x *PermissionsEvaluation) Reset()

func (*PermissionsEvaluation) String

func (x *PermissionsEvaluation) String() string

type PermissionsEvaluationOutcome

type PermissionsEvaluationOutcome struct {
	Evaluation  *PermissionsEvaluation                   `protobuf:"bytes,1,opt,name=evaluation,proto3" json:"evaluation,omitempty"`
	Permitted   bool                                     `protobuf:"varint,2,opt,name=permitted,proto3" json:"permitted,omitempty"`
	Explanation *PermissionsEvaluationOutcomeExplanation `protobuf:"bytes,3,opt,name=explanation,proto3" json:"explanation,omitempty"`
	// contains filtered or unexported fields
}

func (*PermissionsEvaluationOutcome) Descriptor deprecated

func (*PermissionsEvaluationOutcome) Descriptor() ([]byte, []int)

Deprecated: Use PermissionsEvaluationOutcome.ProtoReflect.Descriptor instead.

func (*PermissionsEvaluationOutcome) GetEvaluation

func (*PermissionsEvaluationOutcome) GetExplanation

func (*PermissionsEvaluationOutcome) GetPermitted

func (x *PermissionsEvaluationOutcome) GetPermitted() bool

func (*PermissionsEvaluationOutcome) ProtoMessage

func (*PermissionsEvaluationOutcome) ProtoMessage()

func (*PermissionsEvaluationOutcome) ProtoReflect

func (*PermissionsEvaluationOutcome) Reset

func (x *PermissionsEvaluationOutcome) Reset()

func (*PermissionsEvaluationOutcome) String

type PermissionsEvaluationOutcomeExplanation

type PermissionsEvaluationOutcomeExplanation struct {
	IsExplicitlyForbidden bool `protobuf:"varint,1,opt,name=isExplicitlyForbidden,proto3" json:"isExplicitlyForbidden,omitempty"`
	IsImplicitlyForbidden bool `protobuf:"varint,2,opt,name=isImplicitlyForbidden,proto3" json:"isImplicitlyForbidden,omitempty"`
	// contains filtered or unexported fields
}

func (*PermissionsEvaluationOutcomeExplanation) Descriptor deprecated

func (*PermissionsEvaluationOutcomeExplanation) Descriptor() ([]byte, []int)

Deprecated: Use PermissionsEvaluationOutcomeExplanation.ProtoReflect.Descriptor instead.

func (*PermissionsEvaluationOutcomeExplanation) GetIsExplicitlyForbidden

func (x *PermissionsEvaluationOutcomeExplanation) GetIsExplicitlyForbidden() bool

func (*PermissionsEvaluationOutcomeExplanation) GetIsImplicitlyForbidden

func (x *PermissionsEvaluationOutcomeExplanation) GetIsImplicitlyForbidden() bool

func (*PermissionsEvaluationOutcomeExplanation) ProtoMessage

func (*PermissionsEvaluationOutcomeExplanation) ProtoReflect

func (*PermissionsEvaluationOutcomeExplanation) Reset

func (*PermissionsEvaluationOutcomeExplanation) String

type PermissionsEvaluationRequest

type PermissionsEvaluationRequest struct {
	Identity    *Identity                `protobuf:"bytes,1,opt,name=identity,proto3" json:"identity,omitempty"`
	Evaluations []*PermissionsEvaluation `protobuf:"bytes,2,rep,name=evaluations,proto3" json:"evaluations,omitempty"`
	// contains filtered or unexported fields
}

func (*PermissionsEvaluationRequest) Descriptor deprecated

func (*PermissionsEvaluationRequest) Descriptor() ([]byte, []int)

Deprecated: Use PermissionsEvaluationRequest.ProtoReflect.Descriptor instead.

func (*PermissionsEvaluationRequest) GetEvaluations

func (x *PermissionsEvaluationRequest) GetEvaluations() []*PermissionsEvaluation

func (*PermissionsEvaluationRequest) GetIdentity

func (x *PermissionsEvaluationRequest) GetIdentity() *Identity

func (*PermissionsEvaluationRequest) ProtoMessage

func (*PermissionsEvaluationRequest) ProtoMessage()

func (*PermissionsEvaluationRequest) ProtoReflect

func (*PermissionsEvaluationRequest) Reset

func (x *PermissionsEvaluationRequest) Reset()

func (*PermissionsEvaluationRequest) String

type PermissionsEvaluationResponse

type PermissionsEvaluationResponse struct {
	Identity    *Identity                       `protobuf:"bytes,1,opt,name=identity,proto3" json:"identity,omitempty"`
	Evaluations []*PermissionsEvaluationOutcome `protobuf:"bytes,2,rep,name=evaluations,proto3" json:"evaluations,omitempty"`
	Permitted   bool                            `protobuf:"varint,3,opt,name=permitted,proto3" json:"permitted,omitempty"`
	// contains filtered or unexported fields
}

func (*PermissionsEvaluationResponse) Descriptor deprecated

func (*PermissionsEvaluationResponse) Descriptor() ([]byte, []int)

Deprecated: Use PermissionsEvaluationResponse.ProtoReflect.Descriptor instead.

func (*PermissionsEvaluationResponse) GetEvaluations

func (*PermissionsEvaluationResponse) GetIdentity

func (x *PermissionsEvaluationResponse) GetIdentity() *Identity

func (*PermissionsEvaluationResponse) GetPermitted

func (x *PermissionsEvaluationResponse) GetPermitted() bool

func (*PermissionsEvaluationResponse) ProtoMessage

func (*PermissionsEvaluationResponse) ProtoMessage()

func (*PermissionsEvaluationResponse) ProtoReflect

func (*PermissionsEvaluationResponse) Reset

func (x *PermissionsEvaluationResponse) Reset()

func (*PermissionsEvaluationResponse) String

type PermissionsState

type PermissionsState struct {
	Permissions *ACPermissions `protobuf:"bytes,1,opt,name=permissions,proto3" json:"permissions,omitempty"`
	// contains filtered or unexported fields
}

func (*PermissionsState) Descriptor deprecated

func (*PermissionsState) Descriptor() ([]byte, []int)

Deprecated: Use PermissionsState.ProtoReflect.Descriptor instead.

func (*PermissionsState) GetPermissions

func (x *PermissionsState) GetPermissions() *ACPermissions

func (*PermissionsState) ProtoMessage

func (*PermissionsState) ProtoMessage()

func (*PermissionsState) ProtoReflect

func (x *PermissionsState) ProtoReflect() protoreflect.Message

func (*PermissionsState) Reset

func (x *PermissionsState) Reset()

func (*PermissionsState) String

func (x *PermissionsState) String() string

type PermissionsStateRequest

type PermissionsStateRequest struct {
	PermissionsEngine *PermissionsEngine `protobuf:"bytes,1,opt,name=permissionsEngine,proto3,oneof" json:"permissionsEngine,omitempty"`
	Identity          *Identity          `protobuf:"bytes,2,opt,name=identity,proto3" json:"identity,omitempty"`
	// contains filtered or unexported fields
}

func (*PermissionsStateRequest) Descriptor deprecated

func (*PermissionsStateRequest) Descriptor() ([]byte, []int)

Deprecated: Use PermissionsStateRequest.ProtoReflect.Descriptor instead.

func (*PermissionsStateRequest) GetIdentity

func (x *PermissionsStateRequest) GetIdentity() *Identity

func (*PermissionsStateRequest) GetPermissionsEngine

func (x *PermissionsStateRequest) GetPermissionsEngine() *PermissionsEngine

func (*PermissionsStateRequest) ProtoMessage

func (*PermissionsStateRequest) ProtoMessage()

func (*PermissionsStateRequest) ProtoReflect

func (x *PermissionsStateRequest) ProtoReflect() protoreflect.Message

func (*PermissionsStateRequest) Reset

func (x *PermissionsStateRequest) Reset()

func (*PermissionsStateRequest) String

func (x *PermissionsStateRequest) String() string

type PermissionsStateResponse

type PermissionsStateResponse struct {
	Identity         *Identity         `protobuf:"bytes,1,opt,name=identity,proto3" json:"identity,omitempty"`
	PermissionsState *PermissionsState `protobuf:"bytes,2,opt,name=permissionsState,proto3" json:"permissionsState,omitempty"`
	// contains filtered or unexported fields
}

func (*PermissionsStateResponse) Descriptor deprecated

func (*PermissionsStateResponse) Descriptor() ([]byte, []int)

Deprecated: Use PermissionsStateResponse.ProtoReflect.Descriptor instead.

func (*PermissionsStateResponse) GetIdentity

func (x *PermissionsStateResponse) GetIdentity() *Identity

func (*PermissionsStateResponse) GetPermissionsState

func (x *PermissionsStateResponse) GetPermissionsState() *PermissionsState

func (*PermissionsStateResponse) ProtoMessage

func (*PermissionsStateResponse) ProtoMessage()

func (*PermissionsStateResponse) ProtoReflect

func (x *PermissionsStateResponse) ProtoReflect() protoreflect.Message

func (*PermissionsStateResponse) Reset

func (x *PermissionsStateResponse) Reset()

func (*PermissionsStateResponse) String

func (x *PermissionsStateResponse) String() string

type UnimplementedV1PDPServiceServer

type UnimplementedV1PDPServiceServer struct {
}

UnimplementedV1PDPServiceServer must be embedded to have forward compatible implementations.

func (UnimplementedV1PDPServiceServer) GetPermissionsState

type UnsafeV1PDPServiceServer

type UnsafeV1PDPServiceServer interface {
	// contains filtered or unexported methods
}

UnsafeV1PDPServiceServer may be embedded to opt out of forward compatibility for this service. Use of this interface is not recommended, as added methods to V1PDPServiceServer will result in compilation errors.

type V1PDPServer

type V1PDPServer struct {
	UnimplementedV1PDPServiceServer
	// contains filtered or unexported fields
}

V1PDPServer is the gRPC server for the PDP.

func NewV1PDPServer

func NewV1PDPServer(endpointCtx *azservices.EndpointContext, Service PDPService) (*V1PDPServer, error)

NewV1PDPServer creates a new PDP server.

func (V1PDPServer) EvaluatePermissions

EvaluatePermissions evaluates the permissions.

func (V1PDPServer) GetPermissionsState

GetPermissionsState gets the permissions state.

type V1PDPServiceClient

type V1PDPServiceClient interface {
	GetPermissionsState(ctx context.Context, in *PermissionsStateRequest, opts ...grpc.CallOption) (*PermissionsStateResponse, error)
	EvaluatePermissions(ctx context.Context, in *PermissionsEvaluationRequest, opts ...grpc.CallOption) (*PermissionsEvaluationResponse, error)
}

V1PDPServiceClient is the client API for V1PDPService service.

For semantics around ctx use and closing/ending streaming RPCs, please refer to https://pkg.go.dev/google.golang.org/grpc/?tab=doc#ClientConn.NewStream.

type V1PDPServiceServer

type V1PDPServiceServer interface {
	GetPermissionsState(context.Context, *PermissionsStateRequest) (*PermissionsStateResponse, error)
	EvaluatePermissions(context.Context, *PermissionsEvaluationRequest) (*PermissionsEvaluationResponse, error)
	// contains filtered or unexported methods
}

V1PDPServiceServer is the server API for V1PDPService service. All implementations must embed UnimplementedV1PDPServiceServer for forward compatibility

type VirtualState

type VirtualState struct {
	Enabled bool                          `protobuf:"varint,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	View    VirtualState_VirtualStateView `protobuf:"varint,2,opt,name=view,proto3,enum=policydecisionpoint.VirtualState_VirtualStateView" json:"view,omitempty"`
	// contains filtered or unexported fields
}

func (*VirtualState) Descriptor deprecated

func (*VirtualState) Descriptor() ([]byte, []int)

Deprecated: Use VirtualState.ProtoReflect.Descriptor instead.

func (*VirtualState) GetEnabled

func (x *VirtualState) GetEnabled() bool

func (*VirtualState) GetView

func (*VirtualState) ProtoMessage

func (*VirtualState) ProtoMessage()

func (*VirtualState) ProtoReflect

func (x *VirtualState) ProtoReflect() protoreflect.Message

func (*VirtualState) Reset

func (x *VirtualState) Reset()

func (*VirtualState) String

func (x *VirtualState) String() string

type VirtualState_VirtualStateView

type VirtualState_VirtualStateView int32
const (
	VirtualState_COMBINED   VirtualState_VirtualStateView = 0
	VirtualState_UNCOMBINED VirtualState_VirtualStateView = 1
)

func (VirtualState_VirtualStateView) Descriptor

func (VirtualState_VirtualStateView) Enum

func (VirtualState_VirtualStateView) EnumDescriptor deprecated

func (VirtualState_VirtualStateView) EnumDescriptor() ([]byte, []int)

Deprecated: Use VirtualState_VirtualStateView.Descriptor instead.

func (VirtualState_VirtualStateView) Number

func (VirtualState_VirtualStateView) String

func (VirtualState_VirtualStateView) Type

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL