Documentation
¶
Index ¶
Constants ¶
View Source
const ( ObjectTypeParticipant auth.ObjectType = "participant" ObjectTypeAgent auth.ObjectType = "agent" ObjectTypeAgentType auth.ObjectType = "agent_type" ObjectTypeService auth.ObjectType = "service" ObjectTypeServiceType auth.ObjectType = "service_type" ObjectTypeServiceGroup auth.ObjectType = "service_group" ObjectTypeJob auth.ObjectType = "job" ObjectTypeMetricType auth.ObjectType = "metric_type" ObjectTypeMetricEntry auth.ObjectType = "metric_entry" ObjectTypeEvent auth.ObjectType = "event_entry" ObjectTypeToken auth.ObjectType = "token" )
View Source
const ( // Standard CRUD actions ActionCreate auth.Action = "create" ActionRead auth.Action = "read" ActionUpdate auth.Action = "update" ActionDelete auth.Action = "delete" // Special actions ActionUpdateStatus auth.Action = "update_status" ActionGenerateToken auth.Action = "generate_token" ActionStart auth.Action = "start" ActionStop auth.Action = "stop" ActionClaim auth.Action = "claim" ActionComplete auth.Action = "complete" ActionFail auth.Action = "fail" ActionListPending auth.Action = "list_pending" ActionLease auth.Action = "lease" ActionAck auth.Action = "ack" )
Variables ¶
View Source
var Rules = []auth.AuthorizationRule{ {Object: ObjectTypeParticipant, Action: ActionRead, Roles: []auth.Role{auth.RoleAdmin, auth.RoleParticipant}}, {Object: ObjectTypeParticipant, Action: ActionCreate, Roles: []auth.Role{auth.RoleAdmin}}, {Object: ObjectTypeParticipant, Action: ActionUpdate, Roles: []auth.Role{auth.RoleAdmin, auth.RoleParticipant}}, {Object: ObjectTypeParticipant, Action: ActionDelete, Roles: []auth.Role{auth.RoleAdmin}}, {Object: ObjectTypeAgent, Action: ActionRead, Roles: []auth.Role{auth.RoleAdmin, auth.RoleParticipant, auth.RoleAgent}}, {Object: ObjectTypeAgent, Action: ActionCreate, Roles: []auth.Role{auth.RoleAdmin, auth.RoleParticipant}}, {Object: ObjectTypeAgent, Action: ActionUpdate, Roles: []auth.Role{auth.RoleAdmin, auth.RoleParticipant}}, {Object: ObjectTypeAgent, Action: ActionDelete, Roles: []auth.Role{auth.RoleAdmin, auth.RoleParticipant}}, {Object: ObjectTypeAgent, Action: ActionUpdateStatus, Roles: []auth.Role{auth.RoleAdmin, auth.RoleParticipant, auth.RoleAgent}}, {Object: ObjectTypeAgentType, Action: ActionRead, Roles: []auth.Role{auth.RoleAdmin, auth.RoleParticipant, auth.RoleAgent}}, {Object: ObjectTypeService, Action: ActionRead, Roles: []auth.Role{auth.RoleAdmin, auth.RoleParticipant, auth.RoleAgent}}, {Object: ObjectTypeService, Action: ActionCreate, Roles: []auth.Role{auth.RoleAdmin, auth.RoleParticipant}}, {Object: ObjectTypeService, Action: ActionUpdate, Roles: []auth.Role{auth.RoleAdmin, auth.RoleParticipant}}, {Object: ObjectTypeService, Action: ActionStart, Roles: []auth.Role{auth.RoleAdmin, auth.RoleParticipant}}, {Object: ObjectTypeService, Action: ActionStop, Roles: []auth.Role{auth.RoleAdmin, auth.RoleParticipant}}, {Object: ObjectTypeService, Action: ActionDelete, Roles: []auth.Role{auth.RoleAdmin, auth.RoleParticipant}}, {Object: ObjectTypeServiceType, Action: ActionRead, Roles: []auth.Role{auth.RoleAdmin, auth.RoleParticipant, auth.RoleAgent}}, {Object: ObjectTypeServiceGroup, Action: ActionRead, Roles: []auth.Role{auth.RoleAdmin, auth.RoleParticipant}}, {Object: ObjectTypeServiceGroup, Action: ActionCreate, Roles: []auth.Role{auth.RoleAdmin, auth.RoleParticipant}}, {Object: ObjectTypeServiceGroup, Action: ActionUpdate, Roles: []auth.Role{auth.RoleAdmin, auth.RoleParticipant}}, {Object: ObjectTypeServiceGroup, Action: ActionDelete, Roles: []auth.Role{auth.RoleAdmin, auth.RoleParticipant}}, {Object: ObjectTypeJob, Action: ActionRead, Roles: []auth.Role{auth.RoleAdmin, auth.RoleParticipant, auth.RoleAgent}}, {Object: ObjectTypeJob, Action: ActionClaim, Roles: []auth.Role{auth.RoleAgent}}, {Object: ObjectTypeJob, Action: ActionComplete, Roles: []auth.Role{auth.RoleAgent}}, {Object: ObjectTypeJob, Action: ActionFail, Roles: []auth.Role{auth.RoleAgent}}, {Object: ObjectTypeJob, Action: ActionListPending, Roles: []auth.Role{auth.RoleAgent}}, {Object: ObjectTypeMetricType, Action: ActionRead, Roles: []auth.Role{auth.RoleAdmin, auth.RoleParticipant, auth.RoleAgent}}, {Object: ObjectTypeMetricType, Action: ActionCreate, Roles: []auth.Role{auth.RoleAdmin}}, {Object: ObjectTypeMetricType, Action: ActionUpdate, Roles: []auth.Role{auth.RoleAdmin}}, {Object: ObjectTypeMetricType, Action: ActionDelete, Roles: []auth.Role{auth.RoleAdmin}}, {Object: ObjectTypeMetricEntry, Action: ActionRead, Roles: []auth.Role{auth.RoleAdmin, auth.RoleParticipant}}, {Object: ObjectTypeMetricEntry, Action: ActionCreate, Roles: []auth.Role{auth.RoleAgent}}, {Object: ObjectTypeEvent, Action: ActionRead, Roles: []auth.Role{auth.RoleAdmin, auth.RoleParticipant}}, {Object: ObjectTypeEvent, Action: ActionLease, Roles: []auth.Role{auth.RoleAdmin}}, {Object: ObjectTypeEvent, Action: ActionAck, Roles: []auth.Role{auth.RoleAdmin}}, {Object: ObjectTypeToken, Action: ActionRead, Roles: []auth.Role{auth.RoleAdmin, auth.RoleParticipant}}, {Object: ObjectTypeToken, Action: ActionCreate, Roles: []auth.Role{auth.RoleAdmin, auth.RoleParticipant}}, {Object: ObjectTypeToken, Action: ActionUpdate, Roles: []auth.Role{auth.RoleAdmin, auth.RoleParticipant}}, {Object: ObjectTypeToken, Action: ActionDelete, Roles: []auth.Role{auth.RoleAdmin, auth.RoleParticipant}}, {Object: ObjectTypeToken, Action: ActionGenerateToken, Roles: []auth.Role{auth.RoleAdmin, auth.RoleParticipant}}, }
Default authorization rules for the system
Functions ¶
This section is empty.
Types ¶
This section is empty.
Click to show internal directories.
Click to hide internal directories.