rbac

package

v0.10.3 Latest Latest Go to latest Published: Apr 17, 2026 License: Apache-2.0 Imports: 8 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/nebari-dev/nebi

Links

Open Source Insights

Documentation ¶

Index ¶

func CanReadWorkspace(userID uuid.UUID, wsID uuid.UUID) (bool, error)
func CanWriteWorkspace(userID uuid.UUID, wsID uuid.UUID) (bool, error)
func GetAllAdminUserIDs() (map[uuid.UUID]bool, error)
func GetEnforcer() *casbin.Enforcer
func GetUserWorkspaces(userID uuid.UUID) ([]uuid.UUID, error)
func GrantWorkspaceAccess(userID uuid.UUID, wsID uuid.UUID, role string) error
func InitEnforcer(db *gorm.DB, logger *slog.Logger) error
func IsAdmin(userID uuid.UUID) (bool, error)
func MakeAdmin(userID uuid.UUID) error
func RevokeAdmin(userID uuid.UUID) error
func RevokeWorkspaceAccess(userID uuid.UUID, wsID uuid.UUID) error
type DefaultProvider
- func NewDefaultProvider() *DefaultProvider
type Provider

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func CanReadWorkspace ¶

func CanReadWorkspace(userID uuid.UUID, wsID uuid.UUID) (bool, error)

CanReadWorkspace checks if user can read a workspace

func CanWriteWorkspace ¶

func CanWriteWorkspace(userID uuid.UUID, wsID uuid.UUID) (bool, error)

CanWriteWorkspace checks if user can write to a workspace

func GetAllAdminUserIDs ¶

func GetAllAdminUserIDs() (map[uuid.UUID]bool, error)

GetAllAdminUserIDs returns a set of all user IDs that have admin privileges

func GetEnforcer ¶

func GetEnforcer() *casbin.Enforcer

GetEnforcer returns the global enforcer instance

func GetUserWorkspaces ¶

func GetUserWorkspaces(userID uuid.UUID) ([]uuid.UUID, error)

GetUserWorkspaces returns all workspace IDs that a user has access to

func GrantWorkspaceAccess ¶

func GrantWorkspaceAccess(userID uuid.UUID, wsID uuid.UUID, role string) error

GrantWorkspaceAccess grants access to a workspace

func InitEnforcer ¶

func InitEnforcer(db *gorm.DB, logger *slog.Logger) error

InitEnforcer initializes the Casbin enforcer

func IsAdmin ¶

func IsAdmin(userID uuid.UUID) (bool, error)

IsAdmin checks if user has admin privileges

func MakeAdmin ¶

func MakeAdmin(userID uuid.UUID) error

MakeAdmin grants admin privileges to a user

func RevokeAdmin ¶

func RevokeAdmin(userID uuid.UUID) error

RevokeAdmin removes admin privileges from a user

func RevokeWorkspaceAccess ¶

func RevokeWorkspaceAccess(userID uuid.UUID, wsID uuid.UUID) error

RevokeWorkspaceAccess revokes access to a workspace

Types ¶

type DefaultProvider ¶ added in v0.10.3

type DefaultProvider struct{}

DefaultProvider wraps the global Casbin enforcer as an rbac.Provider.

func NewDefaultProvider ¶ added in v0.10.3

func NewDefaultProvider() *DefaultProvider

func (DefaultProvider) CanReadWorkspace ¶ added in v0.10.3

func (DefaultProvider) CanReadWorkspace(userID, wsID uuid.UUID) (bool, error)

func (DefaultProvider) CanWriteWorkspace ¶ added in v0.10.3

func (DefaultProvider) CanWriteWorkspace(userID, wsID uuid.UUID) (bool, error)

func (DefaultProvider) GetAllAdminUserIDs ¶ added in v0.10.3

func (DefaultProvider) GetAllAdminUserIDs() (map[uuid.UUID]bool, error)

func (DefaultProvider) GrantWorkspaceAccess ¶ added in v0.10.3

func (DefaultProvider) GrantWorkspaceAccess(userID, wsID uuid.UUID, role string) error

func (DefaultProvider) IsAdmin ¶ added in v0.10.3

func (DefaultProvider) IsAdmin(userID uuid.UUID) (bool, error)

func (DefaultProvider) MakeAdmin ¶ added in v0.10.3

func (DefaultProvider) MakeAdmin(userID uuid.UUID) error

func (DefaultProvider) RevokeAdmin ¶ added in v0.10.3

func (DefaultProvider) RevokeAdmin(userID uuid.UUID) error

func (DefaultProvider) RevokeWorkspaceAccess ¶ added in v0.10.3

func (DefaultProvider) RevokeWorkspaceAccess(userID, wsID uuid.UUID) error

type Provider ¶ added in v0.10.3

type Provider interface {
	CanReadWorkspace(userID, wsID uuid.UUID) (bool, error)
	CanWriteWorkspace(userID, wsID uuid.UUID) (bool, error)
	IsAdmin(userID uuid.UUID) (bool, error)
	GrantWorkspaceAccess(userID, wsID uuid.UUID, role string) error
	RevokeWorkspaceAccess(userID, wsID uuid.UUID) error
	MakeAdmin(userID uuid.UUID) error
	RevokeAdmin(userID uuid.UUID) error
	GetAllAdminUserIDs() (map[uuid.UUID]bool, error)
}

Provider abstracts RBAC operations so callers can use dependency injection instead of the global enforcer. This enables per-test isolation and mocking.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL