7e385fc126
Some checks failed
SonarQube / SonarQube (push) Failing after 5m28s
E2e test on main branch push / server and client test (map[name:admin port:8080]) (push) Failing after 3m33s
Server and lib tests / Library test (js) (push) Failing after 1m36s
Server and lib tests / Library test (vue) (push) Successful in 2m24s
Server and lib tests / Web client test (admin) (push) Successful in 2m52s
Server and lib tests / Web client test (compose) (push) Successful in 3m23s
Server and lib tests / Web client test (discovery) (push) Successful in 2m49s
Server and lib tests / Web client test (one) (push) Successful in 2m52s
Server and lib tests / Web client test (privacy) (push) Successful in 2m44s
Server and lib tests / Web client test (reporter) (push) Successful in 2m56s
Server and lib tests / Web client test (workflow) (push) Successful in 3m0s
Server and lib tests / Server tests (push) Failing after 4m55s
E2e test on main branch push / notify-failure (push) Failing after 9s
Server and lib tests / Send matrix testing notification (push) Successful in 2s
Mark stale issues and pull requests / stale (push) Successful in 40s
73 lines
1.6 KiB
YAML
73 lines
1.6 KiB
YAML
imports:
|
|
- github.com/cortezaproject/corteza/server/system/types
|
|
- github.com/cortezaproject/corteza/server/pkg/rbac
|
|
|
|
params:
|
|
roleLookup: &roleLookup
|
|
meta: { label: Role }
|
|
required: true
|
|
types:
|
|
- { wf: ID, }
|
|
- { wf: Handle, }
|
|
- { wf: Role, suffix: res }
|
|
|
|
manageParams: &manageParams
|
|
resource:
|
|
meta: { label: Resource }
|
|
required: true
|
|
types:
|
|
# Note that we can not accept string here because
|
|
# we need whole resource with all the info loaded
|
|
- { wf: RbacResource }
|
|
role: *roleLookup
|
|
operation:
|
|
meta: { label: Operation }
|
|
required: true
|
|
types:
|
|
- { wf: String }
|
|
|
|
labels: &labels
|
|
users: "rbac"
|
|
|
|
functions:
|
|
allow:
|
|
meta:
|
|
short: 'RBAC: Allow operation on resource to a role'
|
|
labels:
|
|
<<: *labels
|
|
params: *manageParams
|
|
|
|
deny:
|
|
meta:
|
|
short: 'RBAC: Deny operation on resource to a role'
|
|
labels:
|
|
<<: *labels
|
|
params: *manageParams
|
|
|
|
inherit:
|
|
meta:
|
|
short: 'RBAC: Remove allow/deny operation of a role from resource'
|
|
labels:
|
|
<<: *labels
|
|
params: *manageParams
|
|
|
|
check:
|
|
meta:
|
|
short: 'RBAC: Can user perform an operation on a resource'
|
|
labels:
|
|
<<: *labels
|
|
params:
|
|
resource:
|
|
meta: { label: Resource }
|
|
required: true
|
|
types: [ { wf: RbacResource } ]
|
|
operation:
|
|
meta: { label: Operation }
|
|
required: true
|
|
types: [ { wf: String } ]
|
|
user:
|
|
meta: { label: User }
|
|
types: [ { wf: User } ]
|
|
results:
|
|
can: { wf: Boolean }
|