authorization

type Permission ¶

type Permission string

Permission identifies an action that may be granted to a role.

const (
	PermRead   Permission = "read"
	PermCreate Permission = "create"
	PermUpdate Permission = "update"
	PermDelete Permission = "delete"
)

type PermissionError ¶

type PermissionError struct {
	Permission Permission
}

func (e *PermissionError) Error() string

type Service ¶

type Service struct{}

Service evaluates role/permission pairs. Unknown roles and permissions deny by default.

func NewService() *Service

func (s *Service) Allowed(roles []string, permission Permission) bool

func (s *Service) Authorize(roles []string, permission Permission) error