cerber.impl.roles — cerber/cerber-roles 1.0.0

add-dependency clj

(add-dependency graph role-name roles)

build-dependency-graph clj

(build-dependency-graph roles-kv)

decompose-role-key clj

populate-roles-and-permissions clj

(populate-roles-and-permissions subject client roles-mapping transitions)

Updates subject's roles and permissions according to following rules:

• if a client is given (which assumes client-originated request) roles are calculated based on client's scopes-to-roles transitions map intersected with subject's own roles. Next, based on resulting roles, permissions are calculated and assigned finally to subject.

• if no client is given (which assumes user-originated request) subject's roles stay untouched. Permissions are being calculated and merged with own subject's ones (if any).

General idea behind these two rules is: when client's scopes are available use them to deduce roles and permissions, otherwise use subject's own roles to calculate final permissions.

replace-wildcard-roles clj

(replace-wildcard-roles roles-or-permissions roles-names)

replace-with-permissions clj

(replace-with-permissions roles-or-permissions roles-kv)

resolve-permissions clj

(resolve-permissions {:keys [roles dependencies]})

roles->permissions clj

roles->permissions* clj

(roles->permissions* roles roles-mapping)

Unrolls roles into corresponding set of permissions.

unroll-roles clj

(unroll-roles roles-mapping)

Walks through roles-mapping unrolling every nested role with flat set of permissions.

unwind-wildcard-roles clj

(unwind-wildcard-roles roles)