privctx

package
v1.18.14 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: May 3, 2026 License: BSD-3-Clause Imports: 1 Imported by: 0

Documentation

Overview

Package privctx propagates the visibility tier of the caller through a Go context. The ent privacy policy (see ent/schema/poc.go) reads the tier via TierFrom and admits Users-visibility rows when the tier is TierUsers.

Tier is set by the HTTP middleware (internal/middleware.PrivacyTier) at the edge of every HTTP request, and — starting v1.15 — by the OAuth callback. The sync worker does NOT use this package; it bypasses the policy via privacy.DecisionContext at worker entry (D-07, D-08).

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

func WithTier 

func WithTier(ctx context.Context, tier Tier) context.Context

WithTier returns a derived context carrying tier. Safe for concurrent use; the returned context is a standard context.WithValue wrapper and inherits every cancellation/deadline from parent.

Types

type Tier 

type Tier int

Tier identifies the visibility scope of the caller. TierPublic is the zero value so any un-stamped context defaults to the most restrictive (safest) tier — fail-safe-closed per CONTEXT.md D-04. 

const (
	// TierPublic is the zero-value tier. Anonymous callers see rows whose
	// upstream visibility is "Public" only.
	TierPublic Tier = iota

	// TierUsers is the signed-in / env-elevated tier. The ent privacy
	// policy admits every row (Public + Users) when the request context
	// carries this tier.
	TierUsers
)

func TierFrom 

func TierFrom(ctx context.Context) Tier

TierFrom returns the tier stored in ctx, or TierPublic if none was set or the value under the key is not a Tier. Never panics; the fallback is the most restrictive tier, so mis-wired callers default to locked-down behaviour rather than leaking Users-visibility rows.

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.