cerber.impl.roles — cerber/cerber-roles 1.0.0-SNAPSHOT

add-dependencies clj

(add-dependencies graph role-name roles)

build-dependency-graph clj

(build-dependency-graph roles-kv)

populate-roles-and-permissions clj

(populate-roles-and-permissions subject client roles-mapping transitions)

Updates subject's roles and permissions according to following rules:

• if a client is given (which assumes client-originated request) roles are calculated based on client's scopes-to-roles transitions map and intersected with subject's own roles. Next, based on resulting roles, permissions are calculated and assigned finally to subject.

• if no client is given (which assumes user-originated request) subject's roles stay untouched. Permissions are being calculated and merged with own subject's ones (if any).

General idea behind these two rules is: when client's scopes are available use them to deduce roles and permissions, otherwise use own subject's roles to calculate final permissions.

replace-wildcard-roles clj

(replace-wildcard-roles roles-or-permissions roles-names)

replace-with-permissions clj

(replace-with-permissions roles-or-permissions roles-kv)

resolve-permissions clj

(resolve-permissions {:keys [roles dependencies]})

role-str? clj

(role-str? str)

roles->permissions clj

roles->permissions* clj

(roles->permissions* roles roles-mapping)

Unrolls roles into corresponding set of permissions.

roles-by-domain clj

(roles-by-domain domain roles-names)

unroll-roles clj

(unroll-roles roles)

Walks through role-to-permissions mappings unrolling every nested role with flat set of permissions.

unwind-wildcard-roles clj

(unwind-wildcard-roles roles)