rbac

func (AccessCheck) Check ¶

func (self AccessCheck) Check() bool

func (PermissionSet) Add ¶

func (self PermissionSet) Add(perm Permission, assertion *Assertion)

func (PermissionSet) Contains ¶

func (self PermissionSet) Contains(perm Permission) bool

func (*Registry) AddResource ¶

func (self *Registry) AddResource(resource string, parents ...string)

AddResource creates a resource or appends parents to a special resource

func (*Registry) AddRole ¶

func (self *Registry) AddRole(role string, parents ...string)

AddRole adds or appends parent roles

func (*Registry) Allow ¶

func (self *Registry) Allow(role, operation, resource string, assertFunc *Assertion) error

Allow creates a rule which allows the role and it's children to operate the resource

func (*Registry) Deny ¶

func (self *Registry) Deny(role, operation, resource string, assertFunc *Assertion) error

Deny creates a role which will deny the role and it's children from operating upon the resource

func (*Registry) IsAllowed ¶

func (self *Registry) IsAllowed(role, operation, resource string, checkAllowed bool, params *AssertionParameters) (AccessCheck, error)

IsAllowed checks the role has the ability to run the specified operation on the given resource. If the access is denied, this method will return False; if the access is allowed, this method will return True; if there is not any rule for the access, this method will return None.

func (*Registry) IsAnyAllowed ¶

func (self *Registry) IsAnyAllowed(roles []string, operation, resource string, params *AssertionParameters) (AccessCheck, error)

IsAnyAllowed checks whether any of the roles have the ability to execute the operation against the resource

func (Set) Add ¶

func (self Set) Add(value string)

func (Set) Contains ¶

func (self Set) Contains(value string) bool

func (Set) Discard ¶

func (self Set) Discard(value string)

func (StringMapSet) AddOrUpdate ¶

func (self StringMapSet) AddOrUpdate(key string, values ...string)

func (StringMapSet) Contains ¶

func (self StringMapSet) Contains(key string) bool