authz

Documentation

Index

• Constants
• type Authorizer
  • func NewAuthorizer(cache, uncached kclient.Client, devMode bool, ...) *Authorizer
  • func (a *Authorizer) Authorize(req *http.Request, user user.Info) bool
• type GetVar
• type Resources
• type ResourcesAuthorized

Constants

const (
	AdminGroup           = "admin"
	PowerUserPlusGroup   = "power-user-plus"
	PowerUserGroup       = "power-user"
	AuthenticatedGroup   = "authenticated"
	MetricsGroup         = "metrics"
	UnauthenticatedGroup = "unauthenticated"
)

Types

type Authorizer

type Authorizer struct {
	// contains filtered or unexported fields
}

func NewAuthorizer

func NewAuthorizer(cache, uncached kclient.Client, devMode bool, acrHelper *accesscontrolrule.Helper) *Authorizer

func (*Authorizer) Authorize

func (a *Authorizer) Authorize(req *http.Request, user user.Info) bool

type GetVar

type GetVar func(string) string

type Resources

type Resources struct {
	AssistantID         string
	ProjectID           string
	ThreadID            string
	ThreadShareID       string
	TemplateID          string
	TaskID              string
	MCPServerID         string
	MCPServerInstanceID string
	ProjectMCPServerID  string
	// MCPID can be the ID of an MCPServer, an MCPServerInstance, or MCPServerCatalogEntry. It is used for interaction with the MCP gateway.
	MCPID                  string
	RunID                  string
	WorkflowID             string
	PendingAuthorizationID string
	ToolID                 string
	WorkspaceID            string
	Authorizated           ResourcesAuthorized
}

type ResourcesAuthorized

type ResourcesAuthorized struct {
	Assistant          *v1.Agent
	Project            *v1.Thread
	Thread             *v1.Thread
	ThreadShare        *v1.ThreadShare
	Task               *v1.Workflow
	MCPServer          *v1.MCPServer
	MCPServerInstance  *v1.MCPServerInstance
	Run                *v1.WorkflowExecution
	Workflow           *v1.Workflow
	Tool               *v1.Tool
	PowerUserWorkspace *v1.PowerUserWorkspace
}