Documentation
¶
Overview ¶
Package localauthority provides the in-process set-check implementation of port.AuthorityEvaluator.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Evaluator ¶
type Evaluator struct{}
Evaluator authorizes exact tool names from the capability set carried by each request. It performs no lookup and therefore cannot widen a run's authority.
func (*Evaluator) AuthorizeTool ¶
func (*Evaluator) AuthorizeTool(_ context.Context, request port.AuthorityRequest) (port.AuthorityDecision, error)
AuthorizeTool permits only a well-formed request whose tool is in its carried capability set.
Click to show internal directories.
Click to hide internal directories.