Documentation
¶
Overview ¶
Package policy resolves stored permissions and enforces column access.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func HasBroadTableGrant ¶
HasBroadTableGrant reports whether a global or schema wildcard grants all columns on table. An exact table grant is intentionally not broad.
func MatchesAnyTable ¶
MatchesAnyTable applies the exact wildcard semantics consumed by R010: *, schema.*, or an exact unqualified/qualified table name.
func ValidateTablePatterns ¶
ValidateTablePatterns validates the exact, global, and schema wildcard patterns shared by the policy resolver and R010.
Types ¶
type Resolver ¶
type Resolver struct{}
Resolver merges already-loaded policy rows without accessing storage.
type SchemaColumn ¶
SchemaColumn identifies one column returned by a schema-listing source.
func FilterColumnsForSchema ¶
func FilterColumnsForSchema( columns []SchemaColumn, decision *model.PolicyDecision, ) ([]SchemaColumn, error)
FilterColumnsForSchema removes unauthorized schema columns while preserving input order. It never synthesizes columns. A table without a ColumnACL entry receives no extra column restriction once its table authorization succeeds.
Source Files