Documentation
¶
Index ¶
- func CanCreate(ctx *gin.Context, objectID string) error
- func CanDelete(ctx *gin.Context, objectID string) error
- func CanRead(ctx *gin.Context, objectID string) error
- func CanUpdate(ctx *gin.Context, objectID string) error
- func ReconcileOrgRoles(ctx context.Context, db *gorm.DB, org app.Org) error
- type Client
- func (h *Client) AcceptInvite(ctx context.Context, invite *app.OrgInvite, acct *app.Account) error
- func (h *Client) AddAccountOrgRole(ctx context.Context, roleType app.RoleType, orgID, accountID string) error
- func (h *Client) AddAccountRoleByID(ctx context.Context, roleID, accountID string) error
- func (c *Client) AssignableRoles(ctx context.Context, orgID, roleContext string) ([]app.Role, error)
- func (c *Client) CreateOrgRoles(ctx context.Context, orgID string) error
- func (h *Client) RemoveAccountOrgRoles(ctx context.Context, orgID, accountID string) error
- func (c *Client) ResolveAssignableRole(ctx context.Context, orgID string, roleType app.RoleType, roleContext string) (*app.Role, error)
- func (h *Client) SetAccountOrgRole(ctx context.Context, orgID, accountID string, roleType app.RoleType) error
- type Params
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func ReconcileOrgRoles ¶ added in v0.19.1115
ReconcileOrgRoles brings an org's managed roles in line with standardOrgRoles: missing roles are created (with their policies), and existing roles have their metadata (title, description, contexts, managed) updated to match the definition. Existing rows' policies are deliberately never modified.
Types ¶
type Client ¶
type Client struct {
// contains filtered or unexported fields
}
func (*Client) AcceptInvite ¶
func (*Client) AddAccountOrgRole ¶
func (*Client) AddAccountRoleByID ¶
func (*Client) AssignableRoles ¶ added in v0.19.1115
func (c *Client) AssignableRoles(ctx context.Context, orgID, roleContext string) ([]app.Role, error)
AssignableRoles returns the org's roles offerable on the given assignment surface (see app.RoleContext*), ordered by role type.
func (*Client) CreateOrgRoles ¶
func (*Client) RemoveAccountOrgRoles ¶
func (*Client) ResolveAssignableRole ¶ added in v0.19.1115
func (c *Client) ResolveAssignableRole(ctx context.Context, orgID string, roleType app.RoleType, roleContext string) (*app.Role, error)
ResolveAssignableRole validates that roleType is offerable on the given surface in the org and returns its role row. The error lists the roles that are assignable there.
func (*Client) SetAccountOrgRole ¶ added in v0.19.1075
func (h *Client) SetAccountOrgRole(ctx context.Context, orgID, accountID string, roleType app.RoleType) error
SetAccountOrgRole replaces an account's role(s) in an org with a single role of the given type. Unlike RemoveAccountOrgRoles it does not touch the account's OrgInvite records, so it is safe for in-place role changes.
Source Files
Directories