authorizer

var (
	// ErrUnauthenticated defines an error caused by an invalid username.
	ErrUnauthenticated = errors.New("unauthenticated")

	// ErrUnauthorized defines an error caused by a resource operation that was not permitted for
	// a specific user.
	ErrUnauthorized = errors.New("unauthorized")
)

var RolePermissions = map[string][]Permission{

	"ns_editor": {
		{resource.TypeNamespace, "read"},
		{resource.TypeNamespace, "create"},
		{resource.TypeNamespace, "update"},
		{resource.TypeNamespace, "delete"},
		{resource.TypeDeliveryKind, "read"},
		{resource.TypeDeliveryKind, "create"},
		{resource.TypeDeliveryKind, "update"},
		{resource.TypeDeliveryKind, "delete"},
		{resource.TypeMessageKind, "read"},
		{resource.TypeMessageKind, "create"},
		{resource.TypeMessageKind, "update"},
		{resource.TypeMessageKind, "delete"},
		{resource.TypeTemplate, "read"},
		{resource.TypeTemplate, "create"},
		{resource.TypeTemplate, "update"},
		{resource.TypeTemplate, "delete"},
		{resource.TypeTemplateKind, "read"},
		{resource.TypeMessage, "read"},
		{resource.TypeMessage, "create"},
	},

	"pre_ns_editor": {
		{resource.TypeNamespace, "read"},
		{resource.TypeNamespace, "create"},
		{resource.TypeNamespace, "update"},
		{resource.TypeNamespace, "delete"},
		{resource.TypeDeliveryKind, "read"},
		{resource.TypeMessageKind, "read"},
		{resource.TypeMessageKind, "create"},
		{resource.TypeMessageKind, "update"},
		{resource.TypeMessageKind, "delete"},
		{resource.TypeTemplate, "read"},
		{resource.TypeTemplate, "create"},
		{resource.TypeTemplate, "update"},
		{resource.TypeTemplate, "delete"},
		{resource.TypeTemplateKind, "read"},
		{resource.TypeMessage, "read"},
		{resource.TypeMessage, "create"},
	},

	"ns_writer": {
		{resource.TypeNamespace, "read"},
		{resource.TypeDeliveryKind, "read"},
		{resource.TypeMessageKind, "read"},
		{resource.TypeTemplate, "read"},
		{resource.TypeTemplate, "create"},
		{resource.TypeTemplate, "update"},
		{resource.TypeMessage, "read"},
		{resource.TypeMessage, "create"},
	},

	"ns_reader": {
		{resource.TypeNamespace, "read"},
		{resource.TypeDeliveryKind, "read"},
		{resource.TypeMessageKind, "read"},
		{resource.TypeTemplate, "read"},
		{resource.TypeMessage, "read"},
	},

	"message_writer": {
		{resource.TypeDeliveryKind, "read"},
		{resource.TypeMessageKind, "read"},
		{resource.TypeMessage, "create"},
	},

	"message_reader": {
		{resource.TypeMessage, "read"},
	},
}