require

func Org ¶ added in v0.19.1159

func Org(ctx context.Context) (string, error)

Org returns the selected org ID from context. Empty org means the caller must select_org or pass X-Nuon-Org-ID. Use for non-Gin callers (MCP tool handlers).

func Read ¶ added in v0.19.1159

func Read(ctx context.Context) (string, error)

Read requires a selected org and PermissionRead on that org object.

func Route ¶

func Route(kind permissions.ResourceKind, verb permissions.Permission, paramName string) gin.HandlerFunc

Route returns middleware enforcing a resource and verb. paramName is the gin path param holding the resource ID. Runner surface only: assumes account and org are already in context.

Not-found on any failure — a 403 would confirm the resource exists in another org.

func Write ¶ added in v0.19.1159

func Write(ctx context.Context) (string, error)

Write requires a non-read-only token role, a selected org, and PermissionCreate on that org object.