Documentation
¶
Index ¶
- Constants
- func AllCapabilityIDs() []string
- func ErrUnknownCapability(id string) error
- func ErrUnknownPreset(id string) error
- func ExpandImplies(caps []string) []string
- func HasCapability(granted []string, required string) bool
- func HasDangerCapability(caps []string) bool
- func ResolvePreset(presetID string, custom []string) ([]string, error)
- func ValidateCapabilities(caps []string) ([]string, error)
- type Capability
- type OperationBinding
- type Preset
Constants ¶
const ( CapProjectsRead = "projects.read" CapProjectsWrite = "projects.write" CapMembersRead = "members.read" CapMembersWrite = "members.write" CapRolesRead = "roles.read" CapRolesWrite = "roles.write" CapTenantsRead = "tenants.read" CapTenantsWrite = "tenants.write" CapTenantsDelete = "tenants.delete" CapSchemaRead = "schema.read" CapSchemaWrite = "schema.write" CapSchemaPublish = "schema.publish" CapDataRead = "data.read" CapDataWrite = "data.write" CapDataDelete = "data.delete" CapRelationsWrite = "relations.write" CapFunctionsRead = "functions.read" CapFunctionsWrite = "functions.write" CapFunctionsTest = "functions.test" CapFunctionsDeploy = "functions.deploy" CapFunctionsDelete = "functions.delete" CapFilesRead = "files.read" CapFilesWrite = "files.write" CapFilesDelete = "files.delete" CapPluginsRead = "plugins.read" CapPluginsWrite = "plugins.write" CapPluginsDeploy = "plugins.deploy" CapSyncRead = "sync.read" CapSyncWrite = "sync.write" CapAuditRead = "audit.read" CapSettingsRead = "settings.read" CapSettingsWrite = "settings.write" CapDatabaseRead = "database.read" CapDatabaseWrite = "database.write" )
Canonical capability identifiers.
const ( RiskLow = "low" RiskMedium = "medium" RiskHigh = "high" RiskDanger = "danger" )
Risk tiers for Console danger acknowledgements.
Variables ¶
This section is empty.
Functions ¶
func AllCapabilityIDs ¶
func AllCapabilityIDs() []string
AllCapabilityIDs returns every registered capability id.
func ErrUnknownCapability ¶
ErrUnknownCapability constructs the error.
func ErrUnknownPreset ¶
ErrUnknownPreset constructs the error.
func ExpandImplies ¶
ExpandImplies adds implied capabilities transitively.
func HasCapability ¶
HasCapability reports whether granted (already expanded) includes required.
func HasDangerCapability ¶
HasDangerCapability reports whether any capability requires danger acknowledgement.
func ResolvePreset ¶
ResolvePreset returns capabilities for a preset id. custom returns nil (caller supplies).
func ValidateCapabilities ¶
ValidateCapabilities rejects unknown ids. Returns normalized unique list (with implies expanded).
Types ¶
type Capability ¶
type Capability struct {
ID string `json:"id"`
Label string `json:"label"`
Group string `json:"group"`
Description string `json:"description"`
Risk string `json:"risk"`
Implies []string `json:"implies,omitempty"`
Danger bool `json:"danger,omitempty"`
}
Capability describes one registry entry.
type OperationBinding ¶
type OperationBinding struct {
Operation string `json:"operation"`
Capability string `json:"capability"`
Surface string `json:"surface"`
}
OperationBinding maps a logical operation to required capability.
func DefaultOperationBindings ¶
func DefaultOperationBindings() []OperationBinding
DefaultOperationBindings is the explicit endpoint→capability map (enforce gradually).
Source Files