ladon

Jan 18, 2024

Changes in this version

type RegexpMatcher

+ func (m *RegexpMatcher) CacheMetrics() *ristretto.Metrics

May 10, 2022

Changes in this version

+ var DefaultMetric = &MetricNoOp

type Ladon

+ Metric Metric

type Manager

+ FindPoliciesForResource func(resource string) (Policies, error)

+ type Metric interface

+ RequestAllowedBy func(Request, Policies)

+ RequestDeniedBy func(Request, Policy)

+ RequestNoMatch func(Request)

+ RequestProcessingError func(Request, Policy, error)

+ type MetricNoOp struct

+ func (*MetricNoOp) RequestAllowedBy(r Request, p Policies)

+ func (*MetricNoOp) RequestDeniedBy(r Request, p Policy)

+ func (*MetricNoOp) RequestNoMatch(r Request)

+ func (*MetricNoOp) RequestProcessingError(r Request, p Policy, err error)

type RegexpMatcher

+ Cache *ristretto.Cache

Apr 25, 2018

Changes in this version

+ type BooleanCondition struct

+ BooleanValue bool

+ func (c *BooleanCondition) Fulfills(value interface{}, _ *Request) bool

+ func (c *BooleanCondition) GetName() string

type DefaultPolicy

+ Meta []byte

+ func (p *DefaultPolicy) GetMeta() []byte

+ func (p *DefaultPolicy) UnmarshalMeta(v interface{}) error

type Policy

+ GetMeta func() []byte

Jan 18, 2018

Changes in this version

+ type ResourceContainsCondition struct

+ func (c *ResourceContainsCondition) Fulfills(value interface{}, r *Request) bool

+ func (c *ResourceContainsCondition) GetName() string

Nov 13, 2017

Changes in this version

+ var DefaultAuditLogger = &AuditLoggerNoOp

+ type AuditLogger interface

+ LogGrantedAccessRequest func(request *Request, pool Policies, deciders Policies)

+ LogRejectedAccessRequest func(request *Request, pool Policies, deciders Policies)

+ type AuditLoggerInfo struct

+ Logger *log.Logger

+ func (a *AuditLoggerInfo) LogGrantedAccessRequest(r *Request, p Policies, d Policies)

+ func (a *AuditLoggerInfo) LogRejectedAccessRequest(r *Request, p Policies, d Policies)

+ type AuditLoggerNoOp struct

+ func (*AuditLoggerNoOp) LogGrantedAccessRequest(r *Request, p Policies, d Policies)

+ func (*AuditLoggerNoOp) LogRejectedAccessRequest(r *Request, p Policies, d Policies)

type Ladon

+ AuditLogger AuditLogger

Oct 25, 2017

Changes in this version

type Ladon

+ func (l *Ladon) DoPoliciesAllow(r *Request, policies []Policy) (err error)

Aug 11, 2017

Changes in this version

+ type StringMatchCondition struct

+ Matches string

+ func (c *StringMatchCondition) Fulfills(value interface{}, _ *Request) bool

+ func (c *StringMatchCondition) GetName() string

Jun 17, 2017

Changes in this version

type Manager

+ Update func(policy Policy) error

Jun 13, 2017

Changes in this version

+ var TestManagerPolicies = []*DefaultPolicy

+ func AssertPolicyEqual(t *testing.T, expected, got Policy)

+ func TestHelperCreateGetDelete(s Manager) func(t *testing.T)

+ func TestHelperFindPoliciesForSubject(k string, s Manager) func(t *testing.T)

+ func TestHelperGetErrors(s Manager) func(t *testing.T)

Jun 4, 2017

Changes in this version

+ var ErrNotFound = errors.WithStack(&errorWithContext{ ... })

May 3, 2017

Changes in this version

+ var DefaultMatcher = NewRegexpMatcher(512)

+ func NewErrResourceNotFound(err error) error

type Ladon

+ Matcher matcher

type Manager

+ FindRequestCandidates func(r *Request) (Policies, error)

+ GetAll func(limit, offset int64) (Policies, error)

+ type ManagerMigrator interface

+ Create func(policy Policy) (err error)

+ GetManager func() Manager

+ Migrate func() (err error)

+ type RegexpMatcher struct

+ C map[string]*regexp.Regexp

+ func NewRegexpMatcher(size int) *RegexpMatcher

+ func (m *RegexpMatcher) Matches(p Policy, haystack []string, needle string) (bool, error)

Mar 18, 2017

Changes in this version

type RethinkManager

+ func NewRethinkManager(session *r.Session, table string) *RethinkManager

+ type StringPairsEqualCondition struct

+ func (c *StringPairsEqualCondition) Fulfills(value interface{}, _ *Request) bool

+ func (c *StringPairsEqualCondition) GetName() string

Dec 29, 2016

Changes in this version

+ var ErrRequestDenied = errors.New("Request was denied by default")

+ var ErrRequestForcefullyDenied = errors.New("Request was forcefully denied")

Nov 21, 2016

Changes in this version

+ type RedisManager struct

+ func NewRedisManager(db *redis.Client, keyPrefix string) *RedisManager

+ func (m *RedisManager) Create(policy Policy) error

+ func (m *RedisManager) Delete(id string) error

+ func (m *RedisManager) FindPoliciesForSubject(subject string) (Policies, error)

+ func (m *RedisManager) Get(id string) (Policy, error)

Oct 11, 2016

Changes in this version

+ var ConditionFactories = map[string]func() Condition

+ type SQLManager struct

+ func NewSQLManager(db *sqlx.DB, schema []string) *SQLManager

+ func (s *SQLManager) Create(policy Policy) (err error)

+ func (s *SQLManager) CreateSchemas() error

+ func (s *SQLManager) Delete(id string) error

+ func (s *SQLManager) FindPoliciesForSubject(subject string) (policies Policies, err error)

+ func (s *SQLManager) Get(id string) (Policy, error)

Jul 29, 2016

Changes in this version

+ const AllowAccess

+ const DenyAccess

+ var ErrForbidden = &Error

+ func Match(p Policy, haystack []string, needle string) (bool, error)

+ type CIDRCondition struct

+ CIDR string

+ func (c *CIDRCondition) Fulfills(value interface{}, _ *Request) bool

+ func (c *CIDRCondition) GetName() string

+ type Condition interface

+ Fulfills func(interface{}, *Request) bool

+ GetName func() string

+ type Conditions map[string]Condition

+ func (cs Conditions) AddCondition(key string, c Condition)

+ func (cs Conditions) MarshalJSON() ([]byte, error)

+ func (cs Conditions) UnmarshalJSON(data []byte) error

+ type Context map[string]interface

+ type DefaultPolicy struct

+ Actions []string

+ Conditions Conditions

+ Description string

+ Effect string

+ ID string

+ Resources []string

+ Subjects []string

+ func (p *DefaultPolicy) AllowAccess() bool

+ func (p *DefaultPolicy) GetActions() []string

+ func (p *DefaultPolicy) GetConditions() Conditions

+ func (p *DefaultPolicy) GetDescription() string

+ func (p *DefaultPolicy) GetEffect() string

+ func (p *DefaultPolicy) GetEndDelimiter() byte

+ func (p *DefaultPolicy) GetID() string

+ func (p *DefaultPolicy) GetResources() []string

+ func (p *DefaultPolicy) GetStartDelimiter() byte

+ func (p *DefaultPolicy) GetSubjects() []string

+ func (p *DefaultPolicy) UnmarshalJSON(data []byte) error

+ type EqualsSubjectCondition struct

+ func (c *EqualsSubjectCondition) Fulfills(value interface{}, r *Request) bool

+ func (c *EqualsSubjectCondition) GetName() string

+ type Error struct

+ Code int

+ type Ladon struct

+ Manager Manager

+ func (g *Ladon) IsAllowed(r *Request) (err error)

+ type Manager interface

+ Create func(policy Policy) error

+ Delete func(id string) error

+ FindPoliciesForSubject func(subject string) (Policies, error)

+ Get func(id string) (Policy, error)

+ type MemoryManager struct

+ Policies map[string]Policy

+ func NewMemoryManager() *MemoryManager

+ func (m *MemoryManager) Create(policy Policy) error

+ func (m *MemoryManager) Delete(id string) error

+ func (m *MemoryManager) FindPoliciesForSubject(subject string) (Policies, error)

+ func (m *MemoryManager) Get(id string) (Policy, error)

+ type Policies []Policy

+ type Policy interface

+ AllowAccess func() bool

+ GetActions func() []string

+ GetConditions func() Conditions

+ GetDescription func() string

+ GetEffect func() string

+ GetEndDelimiter func() byte

+ GetID func() string

+ GetResources func() []string

+ GetStartDelimiter func() byte

+ GetSubjects func() []string

+ type PostgresManager struct

+ func NewPostgresManager(db *sql.DB) *PostgresManager

+ func (s *PostgresManager) Create(policy Policy) (err error)

+ func (s *PostgresManager) CreateSchemas() error

+ func (s *PostgresManager) Delete(id string) error

+ func (s *PostgresManager) FindPoliciesForSubject(subject string) (policies Policies, err error)

+ func (s *PostgresManager) Get(id string) (Policy, error)

+ type Request struct

+ Action string

+ Context Context

+ Resource string

+ Subject string

+ type RethinkManager struct

+ Policies map[string]Policy

+ Session *r.Session

+ Table r.Term

+ func (m *RethinkManager) ColdStart() error

+ func (m *RethinkManager) Create(policy Policy) error

+ func (m *RethinkManager) Delete(id string) error

+ func (m *RethinkManager) FindPoliciesForSubject(subject string) (Policies, error)

+ func (m *RethinkManager) Get(id string) (Policy, error)

+ func (m *RethinkManager) Watch(ctx context.Context) error

+ type StringEqualCondition struct

+ Equals string

+ func (c *StringEqualCondition) Fulfills(value interface{}, _ *Request) bool

+ func (c *StringEqualCondition) GetName() string

+ type Warden interface

+ IsAllowed func(r *Request) error