Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func PolicyFromDecision ¶
PolicyFromDecision converts an authorization decision into a GuardSQL structural policy. Query endpoints should normally remain read-only.
Types ¶
type Decision ¶
type Decision struct {
AllowedEntities []string
Fields map[string]map[string]guardsql.FieldPolicy
RequireLimit bool
MaxLimit int
MaxDepth int
MaxNodes int
MaxInValues int
AllowStar bool
}
Decision is an authorization result that can be compiled into a GuardSQL AST policy. External engines such as SpiceDB should populate this shape from trusted application context, not from user-authored query text.
Click to show internal directories.
Click to hide internal directories.