authorization

package

v1.0.1 Latest Latest Go to latest Published: Mar 16, 2026 License: MIT Imports: 2 Imported by: 0

Details

This section is empty.

This section is empty.

This section is empty.

type Authorizer struct {
	// contains filtered or unexported fields
}

Authorizer manages roles, permissions, and policies

func New() *Authorizer

New creates a new Authorizer

func (a *Authorizer) AllowPolicy(action string, fn PolicyFunc)

AllowPolicy registers a policy function for an action

func (a *Authorizer) Can(user *core.User, action string, resource interface{}) bool

Can checks if a user can perform an action on a resource using policies

func (a *Authorizer) DefineRole(role string, permissions ...string)

DefineRole defines a role with a set of permissions

func (a *Authorizer) GetRolePermissions(role string) []string

GetRolePermissions returns the permissions for a given role

func (a *Authorizer) GrantPermission(role, permission string)

GrantPermission adds a permission to an existing role

func (a *Authorizer) HasPermission(user *core.User, permission string) bool

HasPermission checks if any of the user's roles grants the specified permission

func (a *Authorizer) RevokePermission(role, permission string)

RevokePermission removes a permission from a role

type PolicyFunc func(user *core.User, resource interface{}) bool

PolicyFunc defines a function that checks whether a user can perform an action on a resource