api

type Decision struct {
	Id        string                 `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`               // unique id, replay a decision starting with this, also useful to de-dup
	Timestamp *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=timestamp,proto3" json:"timestamp,omitempty"` // UTC time when the decision was made
	Path      string                 `protobuf:"bytes,3,opt,name=path,proto3" json:"path,omitempty"`           // Policy path used in decision
	User      *DecisionUser          `protobuf:"bytes,4,opt,name=user,proto3" json:"user,omitempty"`           // info about user for whom the decision as made
	Policy    *DecisionPolicy        `protobuf:"bytes,5,opt,name=policy,proto3" json:"policy,omitempty"`       // info about policy used for the decision
	Outcomes  map[string]bool        ``                                                                        // outcome of the decisions specified in the policy context
	/* 144-byte string literal not displayed */
	Resource    *structpb.Struct  `protobuf:"bytes,7,opt,name=resource,proto3" json:"resource,omitempty"` // the resource context used in a decision
	Annotations map[string]string ``                                                                      // annotations that may be added to a decision
	/* 149-byte string literal not displayed */
	// contains filtered or unexported fields
}

type DecisionPolicy struct {
	Context         *PolicyContext `protobuf:"bytes,1,opt,name=context,proto3" json:"context,omitempty"`                                        // policy context used in the decision
	RegistryService string         `protobuf:"bytes,2,opt,name=registry_service,json=registryService,proto3" json:"registry_service,omitempty"` // registry service where policy was retrieved from (e.g. opcr.io)
	RegistryImage   string         `protobuf:"bytes,3,opt,name=registry_image,json=registryImage,proto3" json:"registry_image,omitempty"`       // image of the policy in the registry, including org (e.g. acmecorp/peoplefinder-abac)
	RegistryTag     string         `protobuf:"bytes,4,opt,name=registry_tag,json=registryTag,proto3" json:"registry_tag,omitempty"`             // tag of the policy image (e.g. 0.8.2 or latest)
	RegistryDigest  string         `protobuf:"bytes,5,opt,name=registry_digest,json=registryDigest,proto3" json:"registry_digest,omitempty"`    // digest of the policy image
	// contains filtered or unexported fields
}

type DecisionUser struct {
	Context *IdentityContext `protobuf:"bytes,1,opt,name=context,proto3" json:"context,omitempty"` // identity context used in the decision
	Id      string           `protobuf:"bytes,2,opt,name=id,proto3" json:"id,omitempty"`           // id of the user the identity resolved to
	Email   string           `protobuf:"bytes,3,opt,name=email,proto3" json:"email,omitempty"`     // convenience human-readable identifier
	// contains filtered or unexported fields
}

type IdentityContext struct {
	Identity string       `protobuf:"bytes,1,opt,name=identity,proto3" json:"identity,omitempty"`
	Type     IdentityType `protobuf:"varint,2,opt,name=type,proto3,enum=aserto.authorizer.v2.api.IdentityType" json:"type,omitempty"`
	// contains filtered or unexported fields
}

type IdentityType int32

type Module struct {
	Id          *string         `protobuf:"bytes,1,opt,name=id,proto3,oneof" json:"id,omitempty"`
	Raw         *string         `protobuf:"bytes,2,opt,name=raw,proto3,oneof" json:"raw,omitempty"`
	PackagePath *string         `protobuf:"bytes,3,opt,name=package_path,json=packagePath,proto3,oneof" json:"package_path,omitempty"`
	Ast         *structpb.Value `protobuf:"bytes,4,opt,name=ast,proto3,oneof" json:"ast,omitempty"`
	PackageRoot *string         `protobuf:"bytes,5,opt,name=package_root,json=packageRoot,proto3,oneof" json:"package_root,omitempty"`
	// contains filtered or unexported fields
}

type PolicyContext struct {
	Path      string   `protobuf:"bytes,1,opt,name=path,proto3" json:"path,omitempty"`           // policy path aka package name
	Decisions []string `protobuf:"bytes,2,rep,name=decisions,proto3" json:"decisions,omitempty"` // list (1..N) of policy decisions (aka rules)
	// contains filtered or unexported fields
}