Affected by GO-2025-4237 and 1 other vulnerabilities

GO-2025-4237: Weaviate OSS has a Path Traversal Vulnerability via Backup ZipSlip in github.com/weaviate/weaviate

GO-2025-4238: Weaviate OSS has path traversal vulnerability via the Shard Movement API in github.com/weaviate/weaviate

conv

package

v1.31.13 Latest Latest Go to latest Published: Sep 2, 2025 License: BSD-3-Clause Imports: 7 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/weaviate/weaviate

Links

Documentation ¶

Index ¶

Constants
Variables
func CasbinBackups(class string) string
func CasbinClusters() string
func CasbinData(collection, shard, object string) string
func CasbinNodes(verbosity, class string) string
func CasbinPolicies(casbinPolicies ...[][]string) (map[string][]authorization.Policy, error)
func CasbinReplicate(collection, shard string) string
func CasbinRoles(role string) string
func CasbinSchema(collection, shard string) string
func CasbinUsers(user string) string
func GetUserAndPrefix(name string) (string, string)
func NameHasPrefix(name string) bool
func PathToPermission(verb, path string) (*models.Permission, error)
func PermissionToPolicies(permissions ...*models.Permission) ([]*authorization.Policy, error)
func PoliciesToPermission(policies ...authorization.Policy) ([]*models.Permission, error)
func PrefixGroupName(name string) string
func PrefixRoleName(name string) string
func RolesToPolicies(roles ...*models.Role) (map[string][]authorization.Policy, error)
func TrimRoleNamePrefix(name string) string
func UserNameWithTypeFromId(username string, userType models.UserTypeInput) string
func UserNameWithTypeFromPrincipal(principal *models.Principal) string

Constants ¶

View Source

const (
	// https://casbin.org/docs/rbac/#how-to-distinguish-role-from-user
	// ROLE_NAME_PREFIX to prefix role to help casbin to distinguish on Enforcing
	ROLE_NAME_PREFIX = "role" + PREFIX_SEPARATOR
	// GROUP_NAME_PREFIX to prefix role to help casbin to distinguish on Enforcing
	GROUP_NAME_PREFIX = "group" + PREFIX_SEPARATOR
	PREFIX_SEPARATOR  = ":"

	// CRUD allow all actions on a resource
	// this is internal for casbin to handle admin actions
	CRUD = "(C)|(R)|(U)|(D)"
	// CRU allow all actions on a resource except DELETE
	// this is internal for casbin to handle editor actions
	CRU         = "(C)|(R)|(U)"
	VALID_VERBS = "(C)|(R)|(U)|(D)|(A)"
	// InternalPlaceHolder is a place holder to mark empty roles
	InternalPlaceHolder = "wv_internal_empty"
)

Variables ¶

View Source

var (
	BuiltInPolicies = map[string]string{
		authorization.Viewer:   authorization.READ,
		authorization.Admin:    VALID_VERBS,
		authorization.Root:     VALID_VERBS,
		authorization.ReadOnly: authorization.READ,
	}
)

Functions ¶

func CasbinBackups ¶

func CasbinBackups(class string) string

func CasbinClusters ¶

func CasbinClusters() string

func CasbinData ¶

func CasbinData(collection, shard, object string) string

func CasbinNodes ¶

func CasbinNodes(verbosity, class string) string

func CasbinPolicies ¶

func CasbinPolicies(casbinPolicies ...[][]string) (map[string][]authorization.Policy, error)

func CasbinReplicate ¶ added in v1.31.0

func CasbinReplicate(collection, shard string) string

func CasbinRoles ¶

func CasbinRoles(role string) string

func CasbinSchema ¶

func CasbinSchema(collection, shard string) string

func CasbinUsers ¶

func CasbinUsers(user string) string

func GetUserAndPrefix ¶ added in v1.30.0

func GetUserAndPrefix(name string) (string, string)

func NameHasPrefix ¶ added in v1.30.0

func NameHasPrefix(name string) bool

func PathToPermission ¶

func PathToPermission(verb, path string) (*models.Permission, error)

func PermissionToPolicies ¶

func PermissionToPolicies(permissions ...*models.Permission) ([]*authorization.Policy, error)

func PoliciesToPermission ¶

func PoliciesToPermission(policies ...authorization.Policy) ([]*models.Permission, error)

func PrefixGroupName ¶ added in v1.28.5

func PrefixGroupName(name string) string

func PrefixRoleName ¶

func PrefixRoleName(name string) string

func RolesToPolicies ¶

func RolesToPolicies(roles ...*models.Role) (map[string][]authorization.Policy, error)

func TrimRoleNamePrefix ¶

func TrimRoleNamePrefix(name string) string

func UserNameWithTypeFromId ¶ added in v1.30.0

func UserNameWithTypeFromId(username string, userType models.UserTypeInput) string

func UserNameWithTypeFromPrincipal ¶ added in v1.30.0

func UserNameWithTypeFromPrincipal(principal *models.Principal) string

Types ¶

This section is empty.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL