[#69] object: Initial EC implementation
All checks were successful
DCO action / DCO (pull_request) Successful in 1m7s
Tests and linters / Tests (1.19) (pull_request) Successful in 1m37s
Tests and linters / Tests (1.20) (pull_request) Successful in 1m33s
Tests and linters / Lint (pull_request) Successful in 1m46s
Tests and linters / Tests with -race (pull_request) Successful in 1m45s

Signed-off-by: Evgenii Stratonikov <e.stratonikov@yadro.com>
This commit is contained in:
Evgenii Stratonikov 2024-03-19 09:55:23 +03:00
parent a85146250b
commit 1772b92182
30 changed files with 1240 additions and 613 deletions

19
acl/grpc/types.pb.go generated
View file

@ -1,7 +1,7 @@
// Code generated by protoc-gen-go. DO NOT EDIT.
// versions:
// protoc-gen-go v1.30.0
// protoc v4.23.4
// protoc-gen-go v1.33.0
// protoc v4.25.3
// source: acl/grpc/types.proto
package acl
@ -32,7 +32,8 @@ const (
// System target rule is applied if sender is a storage node within the
// container or an inner ring node
Role_SYSTEM Role = 2
// Others target rule is applied if sender is neither a user nor a system target
// Others target rule is applied if sender is neither a user nor a system
// target
Role_OTHERS Role = 3
)
@ -472,8 +473,8 @@ func (x *EACLTable) GetRecords() []*EACLRecord {
// used in the similar use cases, like providing authorisation to externally
// authenticated party.
//
// BearerToken can be issued only by the container's owner and must be signed using
// the key associated with the container's `OwnerID`.
// BearerToken can be issued only by the container's owner and must be signed
// using the key associated with the container's `OwnerID`.
type BearerToken struct {
state protoimpl.MessageState
sizeCache protoimpl.SizeCache
@ -695,8 +696,8 @@ func (x *EACLRecord_Target) GetKeys() [][]byte {
return nil
}
// Bearer Token body structure contains Extended ACL table issued by the container
// owner with additional information preventing token abuse.
// Bearer Token body structure contains Extended ACL table issued by the
// container owner with additional information preventing token abuse.
type BearerToken_Body struct {
state protoimpl.MessageState
sizeCache protoimpl.SizeCache
@ -704,8 +705,8 @@ type BearerToken_Body struct {
// Table of Extended ACL rules to use instead of the ones attached to the
// container. If it contains `container_id` field, bearer token is only
// valid for this specific container. Otherwise, any container of the same owner
// is allowed.
// valid for this specific container. Otherwise, any container of the same
// owner is allowed.
EaclTable *EACLTable `protobuf:"bytes,1,opt,name=eacl_table,json=eaclTable,proto3" json:"eacl_table,omitempty"`
// `OwnerID` defines to whom the token was issued. It must match the request
// originator's `OwnerID`. If empty, any token bearer will be accepted.