mirror of https://github.com/astaxie/beego.git
128 lines
4.0 KiB
Go
128 lines
4.0 KiB
Go
// Copyright 2017 The casbin Authors. All Rights Reserved.
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
package casbin
|
|
|
|
// GetRolesForUser gets the roles that a user has.
|
|
func (e *Enforcer) GetRolesForUser(name string) []string {
|
|
res, _ := e.model["g"]["g"].RM.GetRoles(name)
|
|
return res
|
|
}
|
|
|
|
// GetUsersForRole gets the users that has a role.
|
|
func (e *Enforcer) GetUsersForRole(name string) []string {
|
|
res, _ := e.model["g"]["g"].RM.GetUsers(name)
|
|
return res
|
|
}
|
|
|
|
// HasRoleForUser determines whether a user has a role.
|
|
func (e *Enforcer) HasRoleForUser(name string, role string) bool {
|
|
roles := e.GetRolesForUser(name)
|
|
|
|
hasRole := false
|
|
for _, r := range roles {
|
|
if r == role {
|
|
hasRole = true
|
|
break
|
|
}
|
|
}
|
|
|
|
return hasRole
|
|
}
|
|
|
|
// AddRoleForUser adds a role for a user.
|
|
// Returns false if the user already has the role (aka not affected).
|
|
func (e *Enforcer) AddRoleForUser(user string, role string) bool {
|
|
return e.AddGroupingPolicy(user, role)
|
|
}
|
|
|
|
// DeleteRoleForUser deletes a role for a user.
|
|
// Returns false if the user does not have the role (aka not affected).
|
|
func (e *Enforcer) DeleteRoleForUser(user string, role string) bool {
|
|
return e.RemoveGroupingPolicy(user, role)
|
|
}
|
|
|
|
// DeleteRolesForUser deletes all roles for a user.
|
|
// Returns false if the user does not have any roles (aka not affected).
|
|
func (e *Enforcer) DeleteRolesForUser(user string) bool {
|
|
return e.RemoveFilteredGroupingPolicy(0, user)
|
|
}
|
|
|
|
// DeleteUser deletes a user.
|
|
// Returns false if the user does not exist (aka not affected).
|
|
func (e *Enforcer) DeleteUser(user string) bool {
|
|
return e.RemoveFilteredGroupingPolicy(0, user)
|
|
}
|
|
|
|
// DeleteRole deletes a role.
|
|
func (e *Enforcer) DeleteRole(role string) {
|
|
e.RemoveFilteredGroupingPolicy(1, role)
|
|
e.RemoveFilteredPolicy(0, role)
|
|
}
|
|
|
|
// DeletePermission deletes a permission.
|
|
// Returns false if the permission does not exist (aka not affected).
|
|
func (e *Enforcer) DeletePermission(permission ...string) bool {
|
|
return e.RemoveFilteredPolicy(1, permission...)
|
|
}
|
|
|
|
// AddPermissionForUser adds a permission for a user or role.
|
|
// Returns false if the user or role already has the permission (aka not affected).
|
|
func (e *Enforcer) AddPermissionForUser(user string, permission ...string) bool {
|
|
params := make([]interface{}, 0, len(permission)+1)
|
|
|
|
params = append(params, user)
|
|
for _, perm := range permission {
|
|
params = append(params, perm)
|
|
}
|
|
|
|
return e.AddPolicy(params...)
|
|
}
|
|
|
|
// DeletePermissionForUser deletes a permission for a user or role.
|
|
// Returns false if the user or role does not have the permission (aka not affected).
|
|
func (e *Enforcer) DeletePermissionForUser(user string, permission ...string) bool {
|
|
params := make([]interface{}, 0, len(permission)+1)
|
|
|
|
params = append(params, user)
|
|
for _, perm := range permission {
|
|
params = append(params, perm)
|
|
}
|
|
|
|
return e.RemovePolicy(params...)
|
|
}
|
|
|
|
// DeletePermissionsForUser deletes permissions for a user or role.
|
|
// Returns false if the user or role does not have any permissions (aka not affected).
|
|
func (e *Enforcer) DeletePermissionsForUser(user string) bool {
|
|
return e.RemoveFilteredPolicy(0, user)
|
|
}
|
|
|
|
// GetPermissionsForUser gets permissions for a user or role.
|
|
func (e *Enforcer) GetPermissionsForUser(user string) [][]string {
|
|
return e.GetFilteredPolicy(0, user)
|
|
}
|
|
|
|
// HasPermissionForUser determines whether a user has a permission.
|
|
func (e *Enforcer) HasPermissionForUser(user string, permission ...string) bool {
|
|
params := make([]interface{}, 0, len(permission)+1)
|
|
|
|
params = append(params, user)
|
|
for _, perm := range permission {
|
|
params = append(params, perm)
|
|
}
|
|
|
|
return e.HasPolicy(params...)
|
|
}
|