rbac

func AllowedMethodFromContext ¶

func AllowedMethodFromContext(ctx context.Context) *rbacv1.AllowedMethod

func FilterByScope ¶

func FilterByScope[T UserAssignable, S ~[]T](ctx context.Context, items S) ([]T, error)

FilterByScope filters the given slice of UserAssignable items based on the AuthenticatedUser and AllowedMethod in the context.

Specifically, if the list contains objects assigned to multiple users, and the AllowedMethod has a scope of CurrentUser, the returned slice will consist only of those items assigned to the authenticated user.

If the scope of the method is AllUsers, no filtering is performed.

func NewAllowedMethodsMiddleware ¶

func NewAllowedMethodsMiddleware(config *rbacv1.Config) *middleware

func VerifyScopeForUser ¶

func VerifyScopeForUser(ctx context.Context, assignedUser auth.AuthenticatedUser) error

VerifyScopeForUser verifies that the authenticated user in the context is allowed to access the resource assigned to 'assignedUser', based on the scope of the AllowedMethod in the context.