Package casbin_policy

import "bitbucket.org/innius/casbin-policy"

Overview
Index
Subdirectories

Overview

Index

func LoadFunctionMap() map[string]model.Function
func LoadModel() model.Model
func SharedResourceFunc(args ...interface{}) (interface{}, error)
func SharedResourceMatch(res Resource, policyResourcePath string) bool
type Effect
type Policy
type Resource
func EnforceArgs(r *pb.EnforceRequest) (string, string, Resource, string)
func Parse(s string) (*Resource, error)
func (res Resource) OwnedBy(obj Resource) bool
func (res *Resource) Root() string

Package files

policy.go

func LoadFunctionMap

func LoadFunctionMap() map[string]model.Function

LoadFunctionMap returns the innius casbin model

func LoadModel

func LoadModel() model.Model

func SharedResourceFunc

func SharedResourceFunc(args ...interface{}) (interface{}, error)

SharedResourceFunc is the wrapper for SharedResourceMatch. a shared resource has a policy wh

func SharedResourceMatch

func SharedResourceMatch(res Resource, policyResourcePath string) bool

SharedResourceMatch determines whether or not a policy is applicable for the specified resource It parses the policyResourcePath to a resource and check if both res and policyResource have the same owner. Only if both resources have the same owner the resource path and policy paths can be matched. for example:

type Effect

type Effect string

const (
    AllowEffect Effect = "allow"
    DenyEffect  Effect = "deny"
)

type Policy

Policy defines an innius casbin policy

type Policy struct {
    // Subject is a person or automated agent
    Subject string

    // Domain represents the innius company id
    Domain string

    // The resource for which the policy should be enforced
    Resource string

    // Action is the action to be performed on the resource
    Action string

    // Effect indicates whether or not access should be granted or denied
    Effect Effect
}

type Resource

Resource represents an innius resource (basically a parsed trn)

type Resource struct {
    // the company who owns the resource
    Owner string

    // The resource type, for example: machine
    Type string

    // the resource id, for example: m1
    ID string

    // the path sub resource, for example: sensors/sensor_1
    SubResource string

    // the full path of the resource
    // for example: trn:foo:machine/sensors/sensor_1
    Path string
}

func EnforceArgs

func EnforceArgs(r *pb.EnforceRequest) (string, string, Resource, string)

EnforceArgs converts an EnforceRequest to enforcer arguments; e.Enforce(EnforceArgs(req))

func Parse

func Parse(s string) (*Resource, error)

func (Resource) OwnedBy

func (res Resource) OwnedBy(obj Resource) bool

OwnedBy checks if two resources have the same owner

func (*Resource) Root

func (res *Resource) Root() string

Get the root of a resource (without the sub resources)

Subdirectories

Name	Synopsis

proto

bitbucket.org/innius/casbin-policy

casbin-policy