Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
- API
  
  Reference documentation for the pkg.go.dev API
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

authz

package

Go to main page

Versions in this module

v0

v0.18.0-rc3

Jul 21, 2026

v0.18.0-rc2

Jul 9, 2026

v0.18.0-rc1

Jul 8, 2026

v0.17.2

Jun 30, 2026

v0.17.1

Jun 26, 2026

v0.17.0

Jun 25, 2026

Changes in this version

+ const ActionCreate

+ const ActionDelete

+ const ActionExecute

+ const ActionIngest

+ const ActionManage

+ const ActionPromote

+ const ActionRead

+ const ActionTrigger

+ const ActionUpdate

+ const DefaultAgentRole

+ const DefaultRoleCacheTTL

+ const DriverAuthzen

+ const DriverBuiltin

+ const DriverCedar

+ const ResourceAIDiagnostics

+ const ResourceActivity

+ const ResourceAdmin

+ const ResourceAgent

+ const ResourceAssessmentPlan

+ const ResourceAssessmentResults

+ const ResourceCatalog

+ const ResourceComponentDefinition

+ const ResourceControlRelationship

+ const ResourceDashboardSuggestion

+ const ResourceDigest

+ const ResourceEvidence

+ const ResourceFilter

+ const ResourceHeartbeat

+ const ResourceImport

+ const ResourceInventory

+ const ResourceNotification

+ const ResourceParty

+ const ResourcePoamItem

+ const ResourcePoamOSCAL

+ const ResourceProfile

+ const ResourceRisk

+ const ResourceRiskTemplate

+ const ResourceRole

+ const ResourceRoleAssignment

+ const ResourceSSP

+ const ResourceStepExecution

+ const ResourceSubjectTemplate

+ const ResourceUser

+ const ResourceWorkflowDefinition

+ const ResourceWorkflowExecution

+ const ResourceWorkflowInstance

+ const ResourceWorkflowStepDefinition

+ const SubjectGroupsAttr

+ var ErrUnavailable = errors.New("authz: pdp unavailable")

+ var SupportedExportFormats = []ExportFormat

+ func CompileRolePolicies(m *Manifest) (*cedar.PolicySet, error)

+ func Drivers() []string

+ func ReconcileConfigRoleAssignments(ctx context.Context, db *gorm.DB, path string, logger *zap.SugaredLogger) error

+ func Register(name string, factory Factory)

+ type AuthZen struct

+ func NewAuthZen(endpoint string, logger *zap.SugaredLogger) (*AuthZen, error)

+ func (a *AuthZen) Evaluate(ctx context.Context, s Subject, action string, r Resource, ...) (Decision, error)

+ func (a *AuthZen) Evaluations(ctx context.Context, reqs []EvalRequest) ([]Decision, error)

+ func (a *AuthZen) Health(ctx context.Context) error

+ type Builtin struct

+ func NewBuiltin(db *gorm.DB, cfg *config.Config, logger *zap.SugaredLogger) *Builtin

+ func (b *Builtin) Evaluate(ctx context.Context, s Subject, _ string, r Resource, _ map[string]any) (Decision, error)

+ func (b *Builtin) Evaluations(ctx context.Context, reqs []EvalRequest) ([]Decision, error)

+ type Cedar struct

+ func NewCedar(policies *cedar.PolicySet, roles RoleResolver, logger *zap.SugaredLogger) *Cedar

+ func (c *Cedar) Evaluate(ctx context.Context, s Subject, action string, r Resource, _ map[string]any) (Decision, error)

+ func (c *Cedar) Evaluations(ctx context.Context, reqs []EvalRequest) ([]Decision, error)

+ type ContextAttr struct

+ Note string

+ Relationship string

+ Status string

+ Type string

+ type Decision struct

+ Allow bool

+ Reason string

+ type Deps struct

+ Config *config.Config

+ DB *gorm.DB

+ Logger *zap.SugaredLogger

+ type EvalRequest struct

+ Action string

+ Context map[string]any

+ Resource Resource

+ Subject Subject

+ type ExportFormat string

+ const ExportCedar

+ const ExportJSON

+ const ExportOpenFGA

+ const ExportYAML

+ func ParseExportFormat(s string) (ExportFormat, error)

+ type Factory func(opts Options, deps Deps) (PDP, error)

+ type FailMode string

+ const FailClosed

+ const FailOpen

+ func ParseFailMode(s string) FailMode

+ type GroupResolver interface

+ ResolveGroups func(ctx context.Context, s Subject) ([]string, error)

+ func NewDBGroupResolver(db *gorm.DB, logger *zap.SugaredLogger) GroupResolver

+ type Healther interface

+ Health func(ctx context.Context) error

+ type Manifest struct

+ Resources map[string]ResourceDef

+ Roles map[string]map[string][]string

+ SchemaVersion int

+ Subjects map[string]SubjectDef

+ func DefaultManifest() (*Manifest, error)

+ func LoadManifest(path string) (*Manifest, error)

+ func ParseManifest(data []byte) (*Manifest, error)

+ func (m *Manifest) Export(format ExportFormat) ([]byte, error)

+ func (m *Manifest) HasAction(resource, action string) bool

+ type Options struct

+ CacheTTL time.Duration

+ Driver string

+ Endpoint string

+ type PDP interface

+ Evaluate func(ctx context.Context, s Subject, action string, r Resource, ...) (Decision, error)

+ Evaluations func(ctx context.Context, reqs []EvalRequest) ([]Decision, error)

+ func Open(opts Options, deps Deps) (PDP, error)

+ type Resource struct

+ ID string

+ Props map[string]any

+ Type string

+ type ResourceDef struct

+ Actions []string

+ Attributes map[string]string

+ Context map[string]ContextAttr

+ type RoleAssignments struct

+ Agents string

+ Anonymous string

+ Groups map[string]string

+ Users map[string]string

+ func LoadRoleAssignments(path string) (*RoleAssignments, error)

+ func (ra *RoleAssignments) RolesFor(_ context.Context, s Subject) ([]string, error)

+ type RoleResolver interface

+ RolesFor func(ctx context.Context, s Subject) ([]string, error)

+ func NewDBRoleResolver(db *gorm.DB, defaults *RoleAssignments, ttl time.Duration, ...) RoleResolver

+ type Subject struct

+ ID string

+ Props map[string]any

+ Type string

+ type SubjectDef struct

+ Attributes map[string]string

v0.17.0-rc3

Jun 25, 2026