52 lines
935 B
Go
52 lines
935 B
Go
package authorization
|
|
|
|
// Level is the type representing an authorization level.
|
|
type Level int
|
|
|
|
const (
|
|
// Bypass bypass level.
|
|
Bypass Level = iota
|
|
|
|
// OneFactor one factor level.
|
|
OneFactor
|
|
|
|
// TwoFactor two factor level.
|
|
TwoFactor
|
|
|
|
// Denied denied level.
|
|
Denied
|
|
)
|
|
|
|
const (
|
|
prefixUser = "user:"
|
|
prefixGroup = "group:"
|
|
)
|
|
|
|
const (
|
|
bypass = "bypass"
|
|
oneFactor = "one_factor"
|
|
twoFactor = "two_factor"
|
|
deny = "deny"
|
|
)
|
|
|
|
const (
|
|
operatorPresent = "present"
|
|
operatorAbsent = "absent"
|
|
operatorEqual = "equal"
|
|
operatorNotEqual = "not equal"
|
|
operatorPattern = "pattern"
|
|
operatorNotPattern = "not pattern"
|
|
)
|
|
|
|
const (
|
|
subexpNameUser = "User"
|
|
subexpNameGroup = "Group"
|
|
)
|
|
|
|
var (
|
|
// IdentitySubexpNames is a list of valid regex subexp names.
|
|
IdentitySubexpNames = []string{subexpNameUser, subexpNameGroup}
|
|
)
|
|
|
|
const traceFmtACLHitMiss = "ACL %s Position %d for subject %s and object %s (method %s)"
|