rbac

type Adapter func(ctx context.Context, main *gormadapter.Adapter) persist.Adapter

type NamespacedNameIDSelector struct {
	ID        string `json:"id,omitempty"`
	Namespace string `json:"namespace,omitempty"`
	Name      string `json:"name,omitempty"`
}

type RuleCondition struct {
	// ResourceTypes are the resource types the action accepts as its primary resource.
	ResourceTypes []string `json:"resourceTypes"`

	// Resource selects the primary resources: a resource must belong to every selection,
	// e.g. the rule's Scope and the Scope a RoleBinding narrows it with.
	Resource []RuleResources `json:"resource"`

	// TargetTypes are the resource types the action accepts as a target.
	// Empty when the action doesn't take a target.
	TargetTypes []string `json:"targetTypes,omitempty"`

	// Target selects the targets: a target must belong to every selection.
	// When empty, the rule only matches requests without a target.
	Target []RuleResources `json:"target,omitempty"`

	// Deny is set for deny rules. A request that doesn't fit the contract,
	// or whose selectors can't be evaluated, matches a deny rule.
	Deny bool `json:"deny,omitempty"`
}

type RuleResources map[string][]types.ResourceSelector

type Selectors struct {
	Playbooks   []types.ResourceSelector `json:"playbooks,omitempty"`
	Connections []types.ResourceSelector `json:"connections,omitempty"`
	Configs     []types.ResourceSelector `json:"configs,omitempty"`
	Components  []types.ResourceSelector `json:"components,omitempty"`
	Views       []ViewRef                `json:"views,omitempty"`
}

type SubjectAccessReviewRequest struct {
	Resource SubjectAccessReviewResource `json:"resource"`
	Action   string                      `json:"action"`

	// Supports ["*"], in which case we iterate over all permission subjects in the database.
	Subjects []string `json:"subjects"`
}

type SubjectAccessReviewResource struct {
	Playbook   string `json:"playbook,omitempty"`
	Config     string `json:"config,omitempty"`
	Check      string `json:"check,omitempty"`
	View       string `json:"view,omitempty"`
	Connection string `json:"connection,omitempty"`
	Global     string `json:"global,omitempty"`
}

type SubjectAccessReviewResult struct {
	Subject string `json:"subject"`
	Allowed bool   `json:"allowed"`
	Error   string `json:"error,omitempty"`
}

type SubjectAccessSearchRequest struct {
	Subject       string   `json:"subject"`
	Action        string   `json:"action"`
	ResourceTypes []string `json:"resource_types,omitempty"`
}

type SubjectAccessSearchResponse struct {
	Subject       string                      `json:"subject"`
	Action        string                      `json:"action"`
	ResourceTypes []string                    `json:"resource_types"`
	Total         int                         `json:"total"`
	Results       []SubjectAccessSearchResult `json:"results"`
}

type SubjectAccessSearchResult struct {
	ResourceType string `json:"resource_type"`
	ID           string `json:"id"`
}

type ViewRef NamespacedNameIDSelector