authz

package

Go to main page

Versions in this module

v0

v0.0.7

Oct 27, 2026

v0.0.6

Oct 16, 2026

v0.0.5

Oct 12, 2026

Changes in this version

+ func Enforced(sso bool, r *Resolver) bool

type ClaimKind

+ const ClaimOID

+ const ClaimSCIMGroup

+ const ClaimUsername

type Config

+ Directory DirectorySource

type Decision

+ func Union(a, b Decision) Decision

+ type DirectorySource interface

+ DirectoryGroups func(subject *Subject) []string

type Permission

+ const PermProjectShare

type Resolver

+ func (r *Resolver) ConfiguredBindings() []Binding

+ func (r *Resolver) GlobalAdminBindings() []Binding

+ func (r *Resolver) HasDirectory() bool

type Role

+ func (r Role) AtLeast(other Role) bool

type Source

+ const SourceProjectMember

type Subject

+ OID string

+ SCIMGroups []string

+ Username string

v0.0.4

Sep 27, 2026

v0.0.3

Sep 27, 2026

Changes in this version

+ func Admits(members []AudienceMember, s *Subject) bool

+ type AudienceMember struct

+ Kind ClaimKind

+ Value string

+ func AudienceMemberFor(kind, value string) AudienceMember

v0.0.2

Sep 17, 2026

Changes in this version

+ func RequiresFreshClaims(p Permission) bool

type Binding

+ Deny bool

+ func NormalizeBinding(b Binding) (Binding, error)

type Config

+ Runtime RuntimeSource

type Permission

+ const PermSandboxAttach

+ const PermSandboxAttachWrite

+ const PermSecretOwn

+ const PermSecretRequest

+ func FreshClaimPermissions() []Permission

type Resolver

+ func (r *Resolver) DefaultRole() Role

+ func (r *Resolver) DeniedBy(subject *Subject, scope Scope) *Binding

+ func (r *Resolver) HasRuntimeBindings() bool

+ func (r *Resolver) RuntimeBindings() []Binding

+ func (r *Resolver) UnsatisfiableBindings(subject *Subject) []Binding

+ type RuntimeSource interface

+ RuntimeBindings func() []Binding

type Source

+ const SourceRuntimeBinding

+ const SourceRuntimeDeny

type Subject

+ func (s *Subject) PresentClaims() []ClaimKind

v0.0.1

Sep 13, 2026

Changes in this version

+ var AllClaimKinds = []ClaimKind

+ var AllPermissions = []Permission

+ var AllRoles = []Role

+ var GlobalScope = Scope

+ type Binding struct

+ Claim ClaimKind

+ Executor string

+ Project string

+ Role Role

+ Value string

+ type ClaimKind string

+ const ClaimEmail

+ const ClaimGroup

+ const ClaimRole

+ const ClaimSub

+ func (c ClaimKind) Valid() bool

+ type Config struct

+ AdminEmails []string

+ Bindings []Binding

+ DefaultRole Role

+ type Decision struct

+ Binding *Binding

+ Role Role

+ Scope Scope

+ Source Source

+ SubjectLabel string

+ func AllowAll(src Source, subjectLabel string) Decision

+ func Deny(src Source, subjectLabel string, scope Scope) Decision

+ func FromRoles(roles []Role, src Source, subjectLabel string, scope Scope) Decision

+ func Intersect(a, b Decision) Decision

+ func (d Decision) Allows(p Permission) bool

+ func (d Decision) Permissions() []Permission

+ type Permission string

+ const PermAuditRead

+ const PermConfigWrite

+ const PermExecutorManage

+ const PermExecutorRead

+ const PermProjectRead

+ const PermProjectWrite

+ const PermPublic

+ const PermRunStart

+ const PermRunStop

+ const PermSecretGrant

+ const PermSecretRevoke

+ const PermSessionAdmin

+ const PermTaskMutate

+ const PermTokenAdmin

+ const PermUserManage

+ const PermViewPrefs

+ func (p Permission) Valid() bool

+ type Resolver struct

+ func New(cfg Config) (*Resolver, error)

+ func (r *Resolver) Configured() bool

+ func (r *Resolver) Resolve(subject *Subject, scope Scope) Decision

+ type Role string

+ const RoleAdmin

+ const RoleMaintainer

+ const RoleNone

+ const RoleOperator

+ const RoleViewer

+ func ParseRole(name string) (Role, bool)

+ func (r Role) Permissions() []Permission

+ func (r Role) Valid() bool

+ type Scope struct

+ Executor string

+ Project string

+ ProjectPath string

+ func (s Scope) IsGlobal() bool

+ func (s Scope) String() string

+ type Source string

+ const SourceAPIToken

+ const SourceAdminEmail

+ const SourceAuthzDisabled

+ const SourceBinding

+ const SourceDefaultRole

+ const SourceStaticToken

+ const SourceUnauthenticated

+ type Subject struct

+ Email string

+ Groups []string

+ Roles []string

+ Sub string

+ func (s *Subject) Label() string

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL