forked from casbin/casbin
-
Notifications
You must be signed in to change notification settings - Fork 0
/
management_api.go
84 lines (68 loc) · 2.91 KB
/
management_api.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
package api
// Get the list of subjects that show up in the current policy.
func (e *Enforcer) GetAllSubjects() []string {
return e.model.GetValuesForFieldInPolicy("p", "p", 0)
}
// Get the list of objects that show up in the current policy.
func (e *Enforcer) GetAllObjects() []string {
return e.model.GetValuesForFieldInPolicy("p", "p", 1)
}
// Get the list of actions that show up in the current policy.
func (e *Enforcer) GetAllActions() []string {
return e.model.GetValuesForFieldInPolicy("p", "p", 2)
}
// Get the list of roles that show up in the current policy.
func (e *Enforcer) GetAllRoles() []string {
return e.model.GetValuesForFieldInPolicy("g", "g", 1)
}
// Get all the authorization rules in the policy.
func (e *Enforcer) GetPolicy() [][]string {
return e.model.GetPolicy("p", "p")
}
// Get all the authorization rules in the policy, a field filter can be specified.
func (e *Enforcer) GetFilteredPolicy(fieldIndex int, fieldValue string) [][]string {
return e.model.GetFilteredPolicy("p", "p", fieldIndex, fieldValue)
}
// Get all the role inheritance rules in the policy.
func (e *Enforcer) GetGroupingPolicy() [][]string {
return e.model.GetPolicy("g", "g")
}
// Add an authorization rule to the current policy.
func (e *Enforcer) AddPolicy(policy []string) {
e.model.AddPolicy("p", "p", policy)
}
// Remove an authorization rule from the current policy.
func (e *Enforcer) RemovePolicy(policy []string) {
e.model.RemovePolicy("p", "p", policy)
}
// Remove an authorization rule from the current policy, a field filter can be specified.
func (e *Enforcer) RemoveFilteredPolicy(fieldIndex int, fieldValue string) {
e.model.RemoveFilteredPolicy("p", "p", fieldIndex, fieldValue)
}
// Add a role inheritance rule to the current policy.
func (e *Enforcer) AddGroupingPolicy(policy []string) {
e.model.AddPolicy("g", "g", policy)
e.model.BuildRoleLinks()
}
// Remove a role inheritance rule from the current policy.
func (e *Enforcer) RemoveGroupingPolicy(policy []string) {
e.model.RemovePolicy("g", "g", policy)
e.model.BuildRoleLinks()
}
// Remove a role inheritance rule from the current policy, a field filter can be specified.
func (e *Enforcer) RemoveFilteredGroupingPolicy(fieldIndex int, fieldValue string) {
e.model.RemoveFilteredPolicy("g", "g", fieldIndex, fieldValue)
e.model.BuildRoleLinks()
}
// Add the function that gets attributes for a subject in ABAC.
func (e *Enforcer) AddSubjectAttributeFunction(function func(args ...interface{}) (interface{}, error)) {
e.fm.AddFunction("subAttr", function)
}
// Add the function that gets attributes for a object in ABAC.
func (e *Enforcer) AddObjectAttributeFunction(function func(args ...interface{}) (interface{}, error)) {
e.fm.AddFunction("objAttr", function)
}
// Add the function that gets attributes for a object in ABAC.
func (e *Enforcer) AddActionAttributeFunction(function func(args ...interface{}) (interface{}, error)) {
e.fm.AddFunction("actAttr", function)
}