From a8344d964da099742cd4b8eafe1e28875cc46b0a Mon Sep 17 00:00:00 2001
From: Denis Kirillov <d.kirillov@yadro.com>
Date: Tue, 21 Feb 2023 11:18:35 +0300
Subject: [PATCH] [nspcc-dev#241] Add impersonate field to bearer token

Signed-off-by: Denis Kirillov <d.kirillov@yadro.com>
---
 acl/types.proto | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/acl/types.proto b/acl/types.proto
index 95b18b5..491c1e5 100644
--- a/acl/types.proto
+++ b/acl/types.proto
@@ -213,6 +213,10 @@ message BearerToken {
     }
     // Token expiration and valid time period parameters
     TokenLifetime lifetime = 3 [json_name="lifetime"];
+
+    // AllowImpersonate flag to consider token signer as request owner.
+    // If this field is true extended ACL table in token body isn't processed.
+    bool AllowImpersonate = 4 [json_name="allow_impersonate"];
   }
   // Bearer Token body
   Body body = 1 [json_name="body"];