Authorization hygiene signals (BOU-855): what the groups, roles and
permissions lists badge and filter on. Each item gets :signals, a set of
keywords. Assignments as all-assignments gives them.
Authorization hygiene signals (BOU-855): what the groups, roles and permissions lists badge and filter on. Each item gets `:signals`, a set of keywords. Assignments as `all-assignments` gives them.
(group-signals {:keys [id member-count role-count]})A group from list-groups: :empty without stored members, :single-member
with one (informational: rights go through groups only, so a group of one
is normal), :everyone for Everyone when it holds roles. Members an
identity provider adds are not counted.
A group from `list-groups`: `:empty` without stored members, `:single-member` with one (informational: rights go through groups only, so a group of one is normal), `:everyone` for Everyone when it holds roles. Members an identity provider adds are not counted.
(near-duplicates role roles)The code roles in roles whose permissions differ from managed role's by
at most one permission, added or missing: a managed role that is (almost)
a code role, which could be assigned instead. A role without permissions
is near nothing.
The code roles in `roles` whose permissions differ from managed `role`'s by at most one permission, added or missing: a managed role that is (almost) a code role, which could be assigned instead. A role without permissions is near nothing.
(permission-signals role-names assignments)Signals for permission, held by the roles role-names: :unheld when
none of them is assigned to any group, :everyone when one is assigned to
Everyone.
Signals for `permission`, held by the roles `role-names`: `:unheld` when none of them is assigned to any group, `:everyone` when one is assigned to Everyone.
(role-signals roles assignments)roles from list-roles, each with :signals: :near-duplicate (and
:near-duplicates, the code roles), :unused for a managed role nobody is
assigned (a code role comes with its module and cannot be removed), and
:everyone when assigned to Everyone.
`roles` from `list-roles`, each with `:signals`: `:near-duplicate` (and `:near-duplicates`, the code roles), `:unused` for a managed role nobody is assigned (a code role comes with its module and cannot be removed), and `:everyone` when assigned to Everyone.
cljdoc builds & hosts documentation for Clojure/Script libraries
| Ctrl+k | Jump to recent docs |
| ← | Move to previous article |
| → | Move to next article |
| Ctrl+/ | Jump to the search field |