authz

type ACL struct {
	Create Permission `json:"create"`
	Read   Permission `json:"read"`
	Update Permission `json:"update"`
	Delete Permission `json:"delete"`
	Grant  Permission `json:"grant"`
}

type ACLAuthorizer struct {
	// contains filtered or unexported fields
}

type ACLResolver interface {
	ResolveACL(context.Context, Resource) (ACL, bool, error)
	GroupsFor(context.Context, Subject) ([]string, error)
}

type Action string

type Authorizer interface {
	Name() string
	Authorize(context.Context, Subject, Action, Resource) (Decision, error)
}

type Decision struct {
	Allowed bool   `json:"allowed"`
	Reason  string `json:"reason"`
}

type NoopAuthorizer struct{}

type Permission struct {
	Actors []string `json:"actors"`
	Groups []string `json:"groups"`
}

type Resource struct {
	Type         string `json:"type"`
	Name         string `json:"name"`
	Organization string `json:"organization,omitempty"`
}

type Subject struct {
	Type         string `json:"type"`
	Name         string `json:"name"`
	Organization string `json:"organization,omitempty"`
}