catalogacl

Documentation

Overview

Package catalogacl contains the logic to authorise access to catalog resources based on user requesting it.

Index

• type CatalogRules
  • func NewCatalogRules(repository ScopeRepository, mediaAlbumResolver MediaAlbumResolver, ...) CatalogRules
  • func OptimiseRulesWithAccessToken(delegate CatalogRules, claims aclcore.Claims) CatalogRules
• type MediaAlbumResolver
• type ScopeRepository
• type ShareAlbumCase
  • func (s *ShareAlbumCase) ShareAlbumWith(albumId catalog.AlbumId, userEmail usermodel.UserId, scope aclcore.ScopeType) error
• type ShareAlbumCatalogPort
• type UnShareAlbumCase
  • func (u *UnShareAlbumCase) StopSharingAlbum(albumId catalog.AlbumId, email usermodel.UserId) error

Types

type CatalogRules

type CatalogRules interface {
	Owner() (*ownermodel.Owner, error)
	SharedWithUserAlbum() ([]catalog.AlbumId, error)
	SharedByUserGrid(owner ownermodel.Owner) (map[string]map[usermodel.UserId]aclcore.ScopeType, error)
	CanListMediasFromAlbum(id catalog.AlbumId) error
	CanReadMedia(owner ownermodel.Owner, id catalog.MediaId) error

	CanManageAlbum(id catalog.AlbumId) error
}

func NewCatalogRules

func NewCatalogRules(repository ScopeRepository, mediaAlbumResolver MediaAlbumResolver, email usermodel.UserId) CatalogRules

NewCatalogRules creates an adapter catalogacl -> aclcore which will always request DB layer

func OptimiseRulesWithAccessToken

func OptimiseRulesWithAccessToken(delegate CatalogRules, claims aclcore.Claims) CatalogRules

OptimiseRulesWithAccessToken creates an adapter catalogacl -> aclcore with pre-authorised scopes from the Access Token

type MediaAlbumResolver

type MediaAlbumResolver interface {
	FindAlbumOfMedia(owner ownermodel.Owner, mediaId catalog.MediaId) (catalog.AlbumId, error)
}

type ScopeRepository

type ScopeRepository interface {
	aclcore.ScopesReader
	aclcore.ReverseScopesReader
}

type ShareAlbumCase

type ShareAlbumCase struct {
	ScopeWriter aclcore.ScopeWriter
	CatalogPort ShareAlbumCatalogPort
}

func (*ShareAlbumCase) ShareAlbumWith

func (s *ShareAlbumCase) ShareAlbumWith(albumId catalog.AlbumId, userEmail usermodel.UserId, scope aclcore.ScopeType) error

type ShareAlbumCatalogPort

type ShareAlbumCatalogPort interface {
	FindAlbum(albumId catalog.AlbumId) (*catalog.Album, error)
}

type UnShareAlbumCase

type UnShareAlbumCase struct {
	RevokeScopeRepository aclcore.ScopeWriter
}

func (*UnShareAlbumCase) StopSharingAlbum

func (u *UnShareAlbumCase) StopSharingAlbum(albumId catalog.AlbumId, email usermodel.UserId) error