abakt-core/abakt.core/ResourcePolicy

ResourcePolicy

class ResourcePolicy<Principal : Any, Resource : Any>

Represents a policy defining the rules for accessing a specific type of resource.

Constructors

ResourcePolicy

constructor()

Functions

allow

fun allow(vararg actions: ResourceAction<Resource>, condition: RuleCondition<Principal, Resource>)

Adds a rule to allow the specified actions if the condition is met.

allowAll

fun allowAll(condition: RuleCondition<Principal, Resource>)

Adds a rule to allow all actions if the condition is met.

allowed

fun allowed(principal: Principal, resource: Resource, vararg actions: ResourceAction<Resource>): Boolean

Returns a boolean indicating whether the principal is allowed to perform all the specified actions against the resource.

alwaysAllow

fun alwaysAllow(vararg actions: ResourceAction<Resource>)

Adds a rule to always allow the specified actions, immaterial of the principal accessing the resource.

deny

fun deny(vararg actions: ResourceAction<Resource>, condition: RuleCondition<Principal, Resource>)

Adds a rule to deny the specified actions if the condition is met.

denyAll

fun denyAll(condition: RuleCondition<Principal, Resource>)

Adds a rule to deny all actions if the condition is met.

derivedRole

fun derivedRole(role: String, condition: DerivedRoleCondition<Principal, Resource>)

Creates a derived role definition based on the condition provided.

filterFor

fun <Filter : Any> filterFor(principal: Principal, action: ResourceAction<Resource>): Filter

Returns the filter declared via listFilter for the given principal and action.

listFilter

fun <Filter : Any> listFilter(action: ResourceAction<Resource>, producer: ListFilterContext<Principal>.() -> Filter?)

Declares the filter representing the set of Resource instances the principal is allowed to list under the given action. The producer returns the filter, or null to deny.