Expand description
Canonical authorization engine. Canonical RBAC + ABAC authorization engine: policy model and runtime evaluation.
Structs§
- Condition
- ABAC condition evaluated against request attributes.
- Decision
- Final authorization decision.
- Engine
- Canonical RBAC + ABAC engine with deny-override and default-deny semantics.
- Permission
- RBAC permission with wildcard matching.
- Policy
- ABAC policy rule.
- Request
- Canonical authorization request.
- Resource
- The target being accessed.
- Role
- RBAC role definition with optional inheritance.
- Subject
- The authenticated caller.
Enums§
- Attribute
Source - Source of an attribute used by a condition.
- Effect
- Result of a matched policy.
- Operator
- Comparison operator for ABAC conditions.
Type Aliases§
- Attributes
- Request, subject, or resource attributes.