permission

type CheckOption func(*CheckOptions)

type CheckOptions struct {
	// contains filtered or unexported fields
}

type FuncMatcher func(ctx context.Context, request *Request, policyStorage PolicyStorageFinder) ([]*Policy, error)

type Matcher interface {
	Match(ctx context.Context, request *Request, policyStorage PolicyStorageFinder) ([]*Policy, error)
}

type Option func(*Options)

type Options struct {
	// contains filtered or unexported fields
}

type Permission struct {
	// contains filtered or unexported fields
}

type Policy struct {
	ID       string       // 策略id
	Subject  string       // 访问者
	Resource string       // 资源信息
	Actions  []string     // 策略的操作类型
	Effect   PolicyEffect // 结果
	Priority int          // 优先级
}

type PolicyEffect string

type PolicyStorage interface {
	PolicyStorageFinder
	AddPolicy(ctx context.Context, policy *Policy) error
	RemovePolicy(ctx context.Context, policy *Policy) error
	UpdatePolicy(ctx context.Context, policy *Policy) error
}

type PolicyStorageFinder interface {
	FindPolicyBySubject(ctx context.Context, sub string) ([]*Policy, error)
	FindPolicyByResource(ctx context.Context, sub, res string) ([]*Policy, error)
}

type Request struct {
	Subject     string            // 访问者
	Resource    string            // 资源信息
	Action      string            // 操作
	Environment map[string]string // 环境信息
}