casbin

type AuthChecker interface {
	Enforce(sub, obj, act string) (bool, error)
}

type CasbinManager interface {
	// 角色 CRUD
	AddRolePolicy(role string, api *model.Api) (bool, error)
	GetRolePolicies(role string) ([]*model.Api, error)
	UpdateRolePolicy(role string, oldApi *model.Api, newApi *model.Api) (bool, error) // 修正：更新时只需要role, 不需要oldRole
	DeleteRolePolicy(role string, api *model.Api) (bool, error)
	DeleteAllRolePolicies(role string) (bool, error)

	// 角色用户 CRUD
	AddUserToRole(user, role string) (bool, error)
	DeleteUserFromRole(user, role string) (bool, error)
	GetUsersInRole(role string) ([]string, error)
	GetRolesForUser(user string) ([]string, error)
	DeleteUserAllRoles(user string) (bool, error)

	LoadPolicy() error
}