Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
- API
  
  Reference documentation for the pkg.go.dev API
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

authz

package

Go to main page

Versions in this module

v0

v0.5.0

Oct 14, 2026

Changes in this version

+ const RelationCanCreateEgressPolicy

+ const RelationCanCreateTag

+ const RelationCanCreateWorker

+ const RelationCanDeleteEgressPolicy

+ const RelationCanDrain

+ const RelationCanGetEgressPolicy

+ const RelationCanListActorAssignments

+ const RelationCanListTags

+ const RelationCanListWorkers

+ const RelationCanMintActorCertificate

+ const RelationCanMintActorJWT

+ const RelationCanPause

+ const RelationCanResume

+ const RelationCanRevert

+ const RelationCanSuspend

+ const RelationCanUpdateEgressPolicy

+ const RelationCanUseTag

+ const RoleController

+ const RoleEgressGateway

+ const RoleIngressRouter

+ func TagObject(atespace, name string) string

+ func WorkerObject(name string) string

+ type SystemPrincipals struct

+ ControllerSPIFFEID string

+ EgressGatewaySPIFFEID string

+ IngressRouterSPIFFEID string

v0.4.0

Oct 7, 2026

Changes in this version

+ const RelationCanCreateAccessPolicy

+ const RelationCanCreateActor

+ const RelationCanCreateActorTemplate

+ const RelationCanDeleteAccessPolicy

+ const RelationCanGetAccessPolicy

+ const RelationCanListActorTemplates

+ const RelationCanListActors

+ const RelationCanUpdate

+ const RelationCanUpdateAccessPolicy

+ const RelationCanUseTemplate

+ const RoleEditor

+ const RoleOwner

+ const RoleViewer

+ var ErrNilTransaction = errors.New("authz: policy tuple writes require a non-nil pgx.Tx")

+ func ActorObject(atespace, name string) string

+ func ActorTemplateObject(atespace, name string) string

+ func FormatMember(member string) (string, error)

type PolicyManager

+ func (m *PolicyManager) ReconcileAtespaceBindings(ctx context.Context, tx pgx.Tx, name string, bindings []*ateapipb.Binding) error

+ func (m *PolicyManager) ReconcileGlobalBindings(ctx context.Context, tx pgx.Tx, bindings []*ateapipb.Binding) error

v0.3.0

Sep 30, 2026

Changes in this version

+ const GlobalRootObject

+ const RelationCanCreateAtespace

+ const RelationCanDelete

+ const RelationCanGet

+ const RelationCanListAtespaces

+ func AtespaceObject(name string) string

+ func IsBypassed(ctx context.Context) bool

+ func New(ctx context.Context, pool *pgxpool.Pool, fgaServer *server.Server) (*Authorizer, *PolicyManager, error)

+ func UnaryServerInterceptor(authorizer *Authorizer) grpc.UnaryServerInterceptor

+ func WithBypass(ctx context.Context) context.Context

+ type Authorizer struct

+ func (a *Authorizer) Check(ctx context.Context, relation, object string) error

+ type PolicyManager struct

+ func (m *PolicyManager) DeleteAtespacePolicies(ctx context.Context, name string) error

v0.2.0

Sep 25, 2026

Changes in this version

+ var ErrNoTransactionInContext = errors.New("authz datastore: active pgx.Tx required in context")

+ func ContextWithTx(ctx context.Context, tx pgx.Tx) context.Context

+ func EnsureStoreAndModel(ctx context.Context, pool *pgxpool.Pool, fgaServer *server.Server) (string, string, error)

+ func NewOpenFGAServer(pool *pgxpool.Pool) (*server.Server, error)

+ func TxFromContext(ctx context.Context) (pgx.Tx, bool)