domain

type Domain interface {
	AddRoleBinding(ctx context.Context, rb entities.RoleBinding) (*entities.RoleBinding, error)
	RemoveRoleBinding(ctx context.Context, userId repos.ID, resourceRef string) error
	RemoveRoleBindingsForResource(ctx context.Context, resourceRef string) error
	UpdateRoleBinding(ctx context.Context, rb entities.RoleBinding) (*entities.RoleBinding, error)

	GetRoleBinding(ctx context.Context, userId repos.ID, resourceRef string) (*entities.RoleBinding, error)

	ListRoleBindingsForResource(ctx context.Context, resourceType t.ResourceType, resourceRef string) ([]*entities.RoleBinding, error)
	ListRoleBindingsForUser(ctx context.Context, userId repos.ID, resourceType *t.ResourceType) ([]*entities.RoleBinding, error)

	Can(ctx context.Context, userId repos.ID, resourceRefs []string, action t.Action) (bool, error)
}

type UnAuthorizedError struct {
	// contains filtered or unexported fields
}