accesscontrol

Documentation

Index

• Variables
• func CheckDevicePolicy(policy models.DevicePolicy, accessDeviceID, tfaDeviceID, orgID string) (consts.FailedReason, bool, error)
• func CheckTrasaUAC(timezone, clientip string, policy *models.Policy) (bool, consts.FailedReason)
• func InitStore(state *global.State, checkPolicyFunc models.CheckPolicyFunc)
• func TrasaUAC(params *models.ConnectionParams, policy *models.Policy, adHocSwitch bool) (bool, consts.FailedReason)

Variables

var ACStore store

TODO use interface

Functions

func CheckDevicePolicy

func CheckDevicePolicy(policy models.DevicePolicy, accessDeviceID, tfaDeviceID, orgID string) (consts.FailedReason, bool, error)

CheckDevicePolicy checks if device hygiene of user is according to device policy

func CheckTrasaUAC

func CheckTrasaUAC(timezone, clientip string, policy *models.Policy) (bool, consts.FailedReason)

TrasaUAC or User access control is handled when assigning user to application. User access control handles users timing for access, users workstation for access and user IP for access. Access can be assigned for limited time per day, limited day per week or limited access with expiry date.

type TrasaUAC struct {
	Days        []string
	time        []int
	IP          string
	Workstation string
	ExpiryTimer string
}

func InitStore

func InitStore(state *global.State, checkPolicyFunc models.CheckPolicyFunc)

InitStore initialises package state

func TrasaUAC

func TrasaUAC(params *models.ConnectionParams, policy *models.Policy, adHocSwitch bool) (bool, consts.FailedReason)

TrasaUAC validates policy for user access