globalnamespaceaccess

package

v2.2.13+incompatible Latest Latest Go to latest Published: Jun 2, 2020 License: Apache-2.0 Imports: 16 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/pennyscissors/rancher

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
func CheckAccessToUpdateMembers(members []v3.Member, data map[string]interface{}, ownerAccess bool) error
type MemberAccess

Constants ¶

View Source

const (
	ImpersonateUserHeader  = "Impersonate-User"
	ImpersonateGroupHeader = "Impersonate-Group"
	OwnerAccess            = "owner"
	ReadonlyAccess         = "read-only"
)

Variables ¶

This section is empty.

Functions ¶

func CheckAccessToUpdateMembers ¶

func CheckAccessToUpdateMembers(members []v3.Member, data map[string]interface{}, ownerAccess bool) error

CheckAccessToUpdateMembers checks if the request is updating members list, and if the caller has permission to do so

Types ¶

type MemberAccess ¶

type MemberAccess struct {
	Users              v3.UserInterface
	RoleTemplateLister v3.RoleTemplateLister
	PrtbLister         v3.ProjectRoleTemplateBindingLister
	CrtbLister         v3.ClusterRoleTemplateBindingLister
	GrbLister          v3.GlobalRoleBindingLister
	GrLister           v3.GlobalRoleLister
	Prtbs              v3.ProjectRoleTemplateBindingInterface
	Crtbs              v3.ClusterRoleTemplateBindingInterface
	ProjectLister      v3.ProjectLister
	ClusterLister      v3.ClusterLister
}

func (*MemberAccess) CheckCallerAccessToTargets ¶

func (ma *MemberAccess) CheckCallerAccessToTargets(request *types.APIContext, targets []string, resourceType string, into interface{}) error

func (*MemberAccess) EnsureRoleInTargets ¶

func (ma *MemberAccess) EnsureRoleInTargets(targetProjects, roleTemplates []string, callerID string) error

func (*MemberAccess) GetAccessTypeOfCaller ¶

func (ma *MemberAccess) GetAccessTypeOfCaller(callerID, creatorID, name string, members []v3.Member) (string, error)

func (*MemberAccess) IsAdmin ¶

func (ma *MemberAccess) IsAdmin(callerID string) (bool, error)

func (*MemberAccess) RemoveRolesFromTargets ¶

func (ma *MemberAccess) RemoveRolesFromTargets(targetProjects, rolesToRemove []string, mcappName string, removeAllRoles bool) error

Source Files ¶

View all Source files

access_common.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL