auth

type Permission struct {
	Resource string `json:"resource"`
	Action   string `json:"action"`
	Effect   string `json:"effect"` // "allow" or "deny"
}

type PermissionManager struct {
	// contains filtered or unexported fields
}

type PermissionProvider interface {
	// Name returns the unique identifier for this provider.
	Name() string
	// CheckPermission evaluates whether subject may perform action on resource.
	CheckPermission(ctx context.Context, subject, resource, action string) (bool, error)
	// ListPermissions returns all permissions granted to the subject.
	ListPermissions(ctx context.Context, subject string) ([]Permission, error)
	// SyncRoles pushes role definitions into the provider.
	SyncRoles(ctx context.Context, roles []RoleDefinition) error
}

type RoleDefinition struct {
	Name        string       `json:"name"`
	Description string       `json:"description"`
	Permissions []Permission `json:"permissions"`
}