access

Documentation

Overview

Package access provides Identity Tracking and optional Permissions management for managing and restricting namespace resources

Index

• func RegisterNewIdentity()
• type Identity
• type Permission
  • func (p *Permission) ApprovedAction()
• type PermissionSet
• type Role
• type RoleUsageHookFunc

Functions

func RegisterNewIdentity

func RegisterNewIdentity()

Types

type Identity

type Identity struct {
	// contains filtered or unexported fields
}

Identity is where your application tracks the Security Identity (a user, etc) that is accessing/leasing/locking a namespace element

type Permission

type Permission struct {
}

Permission implements access control over a given PathElement and possible all of its descendents

func (*Permission) ApprovedAction

func (p *Permission) ApprovedAction()

ApprovedAction resolves if a given role can perform the requested action

type PermissionSet

type PermissionSet struct {
}

type Role

type Role struct {
	Name        string
	UsageHook   RoleUsageHookFunc
	Permissions *PermissionSet
}

Role is where your application tracks what capability a given identity is using to access/lease/lock a namespace resource

type RoleUsageHookFunc

type RoleUsageHookFunc func()

RoleUsageHookFunc declares a function provided by your code which will be called (as a separate goroutine) when a declared role is used to grant access to a Namespace Path Element