99b31e3235
Make all operations that related to `neofs-api-go` library be placed in `v2` packages. They parse all v2-versioned structs info `neofs-sdk-go` abstractions and pass them to the corresponding `acl`/`eacl` packages. `v2` packages are the only packages that do import `neofs-api-go` library. `eacl` and `acl` provide public functions that only accepts `sdk` structures. Signed-off-by: Pavel Karpy <carpawell@nspcc.ru>
40 lines
900 B
Go
40 lines
900 B
Go
package v2
|
|
|
|
import (
|
|
"errors"
|
|
"fmt"
|
|
)
|
|
|
|
var (
|
|
// ErrMalformedRequest is returned when request contains
|
|
// invalid data.
|
|
ErrMalformedRequest = errors.New("malformed request")
|
|
// ErrUnknownRole is returned when role of the sender is unknown.
|
|
ErrUnknownRole = errors.New("can't classify request sender")
|
|
// ErrUnknownContainer is returned when container fetching errors appeared.
|
|
ErrUnknownContainer = errors.New("can't fetch container info")
|
|
)
|
|
|
|
type accessErr struct {
|
|
RequestInfo
|
|
|
|
failedCheckTyp string
|
|
}
|
|
|
|
func (a *accessErr) Error() string {
|
|
return fmt.Sprintf("access to operation %v is denied by %s check", a.operation, a.failedCheckTyp)
|
|
}
|
|
|
|
func basicACLErr(info RequestInfo) error {
|
|
return &accessErr{
|
|
RequestInfo: info,
|
|
failedCheckTyp: "basic ACL",
|
|
}
|
|
}
|
|
|
|
func eACLErr(info RequestInfo) error {
|
|
return &accessErr{
|
|
RequestInfo: info,
|
|
failedCheckTyp: "extended ACL",
|
|
}
|
|
}
|