permissions

Documentation

Overview

Package permissions contains the permission sets and other related functionalities that dictate the level of access a subject has to a Tharsis resource.

Index

• Variables
• func GetAssignablePermissions() []string
• type Action
  • func (p Action) HasViewerAccess() bool
• type Permission
  • func ParsePermissions(perms []string) ([]Permission, error)
  • func (p *Permission) GTE(want *Permission) bool
  • func (p *Permission) IsAssignable() bool
  • func (p *Permission) String() string
• type ResourceType

Variables

var (
	ViewGPGKeyPermission                 = Permission{ResourceType: GPGKeyResourceType, Action: ViewAction}
	CreateGPGKeyPermission               = Permission{ResourceType: GPGKeyResourceType, Action: CreateAction}
	DeleteGPGKeyPermission               = Permission{ResourceType: GPGKeyResourceType, Action: DeleteAction}
	ViewGroupPermission                  = Permission{ResourceType: GroupResourceType, Action: ViewAction}
	CreateGroupPermission                = Permission{ResourceType: GroupResourceType, Action: CreateAction}
	UpdateGroupPermission                = Permission{ResourceType: GroupResourceType, Action: UpdateAction}
	DeleteGroupPermission                = Permission{ResourceType: GroupResourceType, Action: DeleteAction}
	ViewNamespaceMembershipPermission    = Permission{ResourceType: NamespaceMembershipResourceType, Action: ViewAction}
	CreateNamespaceMembershipPermission  = Permission{ResourceType: NamespaceMembershipResourceType, Action: CreateAction}
	UpdateNamespaceMembershipPermission  = Permission{ResourceType: NamespaceMembershipResourceType, Action: UpdateAction}
	DeleteNamespaceMembershipPermission  = Permission{ResourceType: NamespaceMembershipResourceType, Action: DeleteAction}
	ViewWorkspacePermission              = Permission{ResourceType: WorkspaceResourceType, Action: ViewAction}
	CreateWorkspacePermission            = Permission{ResourceType: WorkspaceResourceType, Action: CreateAction}
	UpdateWorkspacePermission            = Permission{ResourceType: WorkspaceResourceType, Action: UpdateAction}
	DeleteWorkspacePermission            = Permission{ResourceType: WorkspaceResourceType, Action: DeleteAction}
	CreateTeamPermission                 = Permission{ResourceType: TeamResourceType, Action: CreateAction}
	UpdateTeamPermission                 = Permission{ResourceType: TeamResourceType, Action: UpdateAction}
	DeleteTeamPermission                 = Permission{ResourceType: TeamResourceType, Action: DeleteAction}
	ViewRunPermission                    = Permission{ResourceType: RunResourceType, Action: ViewAction}
	CreateRunPermission                  = Permission{ResourceType: RunResourceType, Action: CreateAction}
	ViewJobPermission                    = Permission{ResourceType: JobResourceType, Action: ViewAction}
	ClaimJobPermission                   = Permission{ResourceType: JobResourceType, Action: ClaimAction}    // Specifically for claiming jobs.
	UpdateJobPermission                  = Permission{ResourceType: JobResourceType, Action: UpdateAction}   // Write job perm.
	UpdatePlanPermission                 = Permission{ResourceType: PlanResourceType, Action: UpdateAction}  // Write plan perm.
	UpdateApplyPermission                = Permission{ResourceType: ApplyResourceType, Action: UpdateAction} // Write apply perm.
	ViewRunnerPermission                 = Permission{ResourceType: RunnerResourceType, Action: ViewAction}
	CreateRunnerPermission               = Permission{ResourceType: RunnerResourceType, Action: CreateAction}
	UpdateRunnerPermission               = Permission{ResourceType: RunnerResourceType, Action: UpdateAction}
	DeleteRunnerPermission               = Permission{ResourceType: RunnerResourceType, Action: DeleteAction}
	CreateUserPermission                 = Permission{ResourceType: UserResourceType, Action: CreateAction}
	UpdateUserPermission                 = Permission{ResourceType: UserResourceType, Action: UpdateAction}
	DeleteUserPermission                 = Permission{ResourceType: UserResourceType, Action: DeleteAction}
	ViewVariableValuePermission          = Permission{ResourceType: VariableResourceType, Action: ViewValueAction} // Viewing variable values.
	ViewVariablePermission               = Permission{ResourceType: VariableResourceType, Action: ViewAction}
	CreateVariablePermission             = Permission{ResourceType: VariableResourceType, Action: CreateAction}
	UpdateVariablePermission             = Permission{ResourceType: VariableResourceType, Action: UpdateAction}
	DeleteVariablePermission             = Permission{ResourceType: VariableResourceType, Action: DeleteAction}
	ViewTerraformProviderPermission      = Permission{ResourceType: TerraformProviderResourceType, Action: ViewAction}
	CreateTerraformProviderPermission    = Permission{ResourceType: TerraformProviderResourceType, Action: CreateAction}
	UpdateTerraformProviderPermission    = Permission{ResourceType: TerraformProviderResourceType, Action: UpdateAction}
	DeleteTerraformProviderPermission    = Permission{ResourceType: TerraformProviderResourceType, Action: DeleteAction}
	ViewTerraformModulePermission        = Permission{ResourceType: TerraformModuleResourceType, Action: ViewAction}
	CreateTerraformModulePermission      = Permission{ResourceType: TerraformModuleResourceType, Action: CreateAction}
	UpdateTerraformModulePermission      = Permission{ResourceType: TerraformModuleResourceType, Action: UpdateAction}
	DeleteTerraformModulePermission      = Permission{ResourceType: TerraformModuleResourceType, Action: DeleteAction}
	ViewStateVersionPermission           = Permission{ResourceType: StateVersionResourceType, Action: ViewAction}
	CreateStateVersionPermission         = Permission{ResourceType: StateVersionResourceType, Action: CreateAction}
	ViewConfigurationVersionPermission   = Permission{ResourceType: ConfigurationVersionResourceType, Action: ViewAction}
	CreateConfigurationVersionPermission = Permission{ResourceType: ConfigurationVersionResourceType, Action: CreateAction}
	UpdateConfigurationVersionPermission = Permission{ResourceType: ConfigurationVersionResourceType, Action: UpdateAction}
	ViewServiceAccountPermission         = Permission{ResourceType: ServiceAccountResourceType, Action: ViewAction}
	CreateServiceAccountPermission       = Permission{ResourceType: ServiceAccountResourceType, Action: CreateAction}
	UpdateServiceAccountPermission       = Permission{ResourceType: ServiceAccountResourceType, Action: UpdateAction}
	DeleteServiceAccountPermission       = Permission{ResourceType: ServiceAccountResourceType, Action: DeleteAction}
	ViewManagedIdentityPermission        = Permission{ResourceType: ManagedIdentityResourceType, Action: ViewAction}
	CreateManagedIdentityPermission      = Permission{ResourceType: ManagedIdentityResourceType, Action: CreateAction}
	UpdateManagedIdentityPermission      = Permission{ResourceType: ManagedIdentityResourceType, Action: UpdateAction}
	DeleteManagedIdentityPermission      = Permission{ResourceType: ManagedIdentityResourceType, Action: DeleteAction}
	ViewVCSProviderPermission            = Permission{ResourceType: VCSProviderResourceType, Action: ViewAction}
	CreateVCSProviderPermission          = Permission{ResourceType: VCSProviderResourceType, Action: CreateAction}
	UpdateVCSProviderPermission          = Permission{ResourceType: VCSProviderResourceType, Action: UpdateAction}
	DeleteVCSProviderPermission          = Permission{ResourceType: VCSProviderResourceType, Action: DeleteAction}
)

All possible Permissions.

Functions

func GetAssignablePermissions

func GetAssignablePermissions() []string

GetAssignablePermissions returns a list of assignable permissions.

Types

type Action

type Action string

Action is an enum representing a CRUD action.

const (
	ViewAction      Action = "view"
	ViewValueAction Action = "view_value"
	CreateAction    Action = "create"
	UpdateAction    Action = "update"
	DeleteAction    Action = "delete"
	ClaimAction     Action = "claim"
)

Action constants.

func (Action) HasViewerAccess

func (p Action) HasViewerAccess() bool

HasViewerAccess returns true if Action is viewer access or greater.

type Permission

type Permission struct {
	ResourceType ResourceType `json:"resourceType"`
	Action       Action       `json:"action"`
}

Permission represents a level of access a subject has to a Tharsis resource.

func ParsePermissions

func ParsePermissions(perms []string) ([]Permission, error)

ParsePermissions parses and normalizes a slice of permission strings and extracts a Permission that adheres to the format resource_type:action.

func (*Permission) GTE

func (p *Permission) GTE(want *Permission) bool

GTE returns true if permission available is >= wanted permission.

func (*Permission) IsAssignable

func (p *Permission) IsAssignable() bool

IsAssignable returns true if permission is assignable to a role.

func (*Permission) String

func (p *Permission) String() string

String returns the Permission as <resource_type:action> string.

type ResourceType

type ResourceType string

ResourceType is an enum representing a Tharsis resource type.

const (
	GPGKeyResourceType               ResourceType = "gpg_key"
	GroupResourceType                ResourceType = "group"
	WorkspaceResourceType            ResourceType = "workspace"
	NamespaceMembershipResourceType  ResourceType = "namespace_membership"
	TeamResourceType                 ResourceType = "team"
	RunResourceType                  ResourceType = "run"
	JobResourceType                  ResourceType = "job"
	PlanResourceType                 ResourceType = "plan"
	ApplyResourceType                ResourceType = "apply"
	RunnerResourceType               ResourceType = "runner"
	UserResourceType                 ResourceType = "user"
	VariableResourceType             ResourceType = "variable"
	TerraformProviderResourceType    ResourceType = "terraform_provider"
	TerraformModuleResourceType      ResourceType = "terraform_module"
	StateVersionResourceType         ResourceType = "state_version"
	ConfigurationVersionResourceType ResourceType = "configuration_version"
	ServiceAccountResourceType       ResourceType = "service_account"
	ManagedIdentityResourceType      ResourceType = "managed_identity"
	VCSProviderResourceType          ResourceType = "vcs_provider"
)

ResourceType constants.