drone/types/authz.go
Johannes Batzill 1115a5083b Add Paths support and error improvements (#11)
This change is adding the concept of Paths.
A repository and space always have a Primary Path which always is represents the ancestry to the root space.
All access history / resource visibility / child listings / UI traversal / etc. is done via that path.

Additionally, repos and spaces can have Alias Paths, which as the name states are aliases. via the primary path.
They sole impact is that a space or repo can be reached via different paths from the UI / rest apis / git apis.
This fulfills two major purposes:
- Customers can rename or move projects and spaces without breaking any existing references from CI pipeliens / code bases / local repos / ...
- Customer can create shorter aliases for important repos when in harness embeded mode! (acc/org/proj/repo can be shortened to acc/repo, or acc/repo'

Apart from the path changes, this PR adds:

Improved User facing errors
Improved internal error handling and wrapping
update / rename operation for repo and space
path list / delete / create operation for repo and space
2022-09-08 21:39:15 -07:00

38 lines
1.0 KiB
Go

// Copyright 2021 Harness Inc. All rights reserved.
// Use of this source code is governed by the Polyform Free Trial License
// that can be found in the LICENSE.md file for this repository.
package types
import "github.com/harness/gitness/types/enum"
/*
* Represents a permission check.
*/
type PermissionCheck struct {
Scope Scope
Resource Resource
Permission enum.Permission
}
/*
* Represents the resource of a permission check.
* Note: Keep the name empty in case access is requested for all resources of that type.
*/
type Resource struct {
Type enum.ResourceType
Name string
}
/*
* Represents the scope of a permission check.
* Notes:
* - In case the permission check is for resource REPO, keep repo empty (repo is resource, not scope)
* - In case the permission check is for resource SPACE, SpacePath is an ancestor of the space (space is resource, not scope)
* - Repo isn't use as of now (will be useful once we add access control for repo child resources, e.g. branches)
*/
type Scope struct {
SpacePath string
Repo string
}