Documentation
¶
Index ¶
- type Authorizer
- func (a Authorizer) AuthorizeLookup(ctx context.Context, objects []*relationshipspb.Object) error
- func (a Authorizer) AuthorizeLookupResources(ctx context.Context, subject *relationshipspb.Identity) error
- func (a Authorizer) AuthorizeWrite(ctx context.Context, objects []*relationshipspb.Object) error
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Authorizer ¶
type Authorizer struct {
// contains filtered or unexported fields
}
func New ¶ added in v1.18.0
func New(db storage.DBTX) Authorizer
func (Authorizer) AuthorizeLookup ¶ added in v1.28.0
func (a Authorizer) AuthorizeLookup(ctx context.Context, objects []*relationshipspb.Object) error
func (Authorizer) AuthorizeLookupResources ¶ added in v1.49.0
func (a Authorizer) AuthorizeLookupResources(ctx context.Context, subject *relationshipspb.Identity) error
AuthorizeLookupResources allows a caller to look up its own resources, or, if it is the org owner, any subject in the same org. The request names no objects, so there is nothing to check a relationships-admin grant against — unlike AuthorizeLookup, this never touches the database.
func (Authorizer) AuthorizeWrite ¶ added in v1.28.0
func (a Authorizer) AuthorizeWrite(ctx context.Context, objects []*relationshipspb.Object) error
Click to show internal directories.
Click to hide internal directories.