forked from TrueCloudLab/frostfs-api-go
Airat Arifullin
9c0007fb1d
* Add type instance check for nil to avoid panic by accessing fields. Signed-off-by: Airat Arifullin <a.arifullin@yadro.com>
426 lines
6.1 KiB
Go
426 lines
6.1 KiB
Go
package acl
|
|
|
|
import (
|
|
"git.frostfs.info/TrueCloudLab/frostfs-api-go/v2/ape"
|
|
"git.frostfs.info/TrueCloudLab/frostfs-api-go/v2/refs"
|
|
)
|
|
|
|
// HeaderFilter is a unified structure of FilterInfo
|
|
// message from proto definition.
|
|
type HeaderFilter struct {
|
|
hdrType HeaderType
|
|
|
|
matchType MatchType
|
|
|
|
key, value string
|
|
}
|
|
|
|
// Target is a unified structure of Target
|
|
// message from proto definition.
|
|
type Target struct {
|
|
role Role
|
|
|
|
keys [][]byte
|
|
}
|
|
|
|
// Record is a unified structure of EACLRecord
|
|
// message from proto definition.
|
|
type Record struct {
|
|
op Operation
|
|
|
|
action Action
|
|
|
|
filters []HeaderFilter
|
|
|
|
targets []Target
|
|
}
|
|
|
|
// Table is a unified structure of EACLTable
|
|
// message from proto definition.
|
|
type Table struct {
|
|
version *refs.Version
|
|
|
|
cid *refs.ContainerID
|
|
|
|
records []Record
|
|
}
|
|
|
|
type TokenLifetime struct {
|
|
exp, nbf, iat uint64
|
|
}
|
|
|
|
type APEOverride struct {
|
|
target *ape.ChainTarget
|
|
|
|
chains []*ape.Chain
|
|
}
|
|
|
|
type BearerTokenBody struct {
|
|
eacl *Table
|
|
|
|
ownerID *refs.OwnerID
|
|
|
|
lifetime *TokenLifetime
|
|
|
|
apeOverride *APEOverride
|
|
|
|
impersonate bool
|
|
}
|
|
|
|
type BearerToken struct {
|
|
body *BearerTokenBody
|
|
|
|
sig *refs.Signature
|
|
}
|
|
|
|
// Target is a unified enum of MatchType enum from proto definition.
|
|
type MatchType uint32
|
|
|
|
// HeaderType is a unified enum of HeaderType enum from proto definition.
|
|
type HeaderType uint32
|
|
|
|
// Action is a unified enum of Action enum from proto definition.
|
|
type Action uint32
|
|
|
|
// Operation is a unified enum of Operation enum from proto definition.
|
|
type Operation uint32
|
|
|
|
// Role is a unified enum of Role enum from proto definition.
|
|
type Role uint32
|
|
|
|
const (
|
|
MatchTypeUnknown MatchType = iota
|
|
MatchTypeStringEqual
|
|
MatchTypeStringNotEqual
|
|
)
|
|
|
|
const (
|
|
HeaderTypeUnknown HeaderType = iota
|
|
HeaderTypeRequest
|
|
HeaderTypeObject
|
|
HeaderTypeService
|
|
)
|
|
|
|
const (
|
|
ActionUnknown Action = iota
|
|
ActionAllow
|
|
ActionDeny
|
|
)
|
|
|
|
const (
|
|
OperationUnknown Operation = iota
|
|
OperationGet
|
|
OperationHead
|
|
OperationPut
|
|
OperationDelete
|
|
OperationSearch
|
|
OperationRange
|
|
OperationRangeHash
|
|
)
|
|
|
|
const (
|
|
RoleUnknown Role = iota
|
|
RoleUser
|
|
RoleSystem
|
|
RoleOthers
|
|
)
|
|
|
|
func (f *HeaderFilter) GetHeaderType() HeaderType {
|
|
if f != nil {
|
|
return f.hdrType
|
|
}
|
|
|
|
return HeaderTypeUnknown
|
|
}
|
|
|
|
func (f *HeaderFilter) SetHeaderType(v HeaderType) {
|
|
f.hdrType = v
|
|
}
|
|
|
|
func (f *HeaderFilter) GetMatchType() MatchType {
|
|
if f != nil {
|
|
return f.matchType
|
|
}
|
|
|
|
return MatchTypeUnknown
|
|
}
|
|
|
|
func (f *HeaderFilter) SetMatchType(v MatchType) {
|
|
f.matchType = v
|
|
}
|
|
|
|
func (f *HeaderFilter) GetKey() string {
|
|
if f != nil {
|
|
return f.key
|
|
}
|
|
|
|
return ""
|
|
}
|
|
|
|
func (f *HeaderFilter) SetKey(v string) {
|
|
f.key = v
|
|
}
|
|
|
|
func (f *HeaderFilter) GetValue() string {
|
|
if f != nil {
|
|
return f.value
|
|
}
|
|
|
|
return ""
|
|
}
|
|
|
|
func (f *HeaderFilter) SetValue(v string) {
|
|
f.value = v
|
|
}
|
|
|
|
func (t *Target) GetRole() Role {
|
|
if t != nil {
|
|
return t.role
|
|
}
|
|
|
|
return RoleUnknown
|
|
}
|
|
|
|
func (t *Target) SetRole(v Role) {
|
|
t.role = v
|
|
}
|
|
|
|
func (t *Target) GetKeys() [][]byte {
|
|
if t != nil {
|
|
return t.keys
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func (t *Target) SetKeys(v [][]byte) {
|
|
t.keys = v
|
|
}
|
|
|
|
func (r *Record) GetOperation() Operation {
|
|
if r != nil {
|
|
return r.op
|
|
}
|
|
|
|
return OperationUnknown
|
|
}
|
|
|
|
func (r *Record) SetOperation(v Operation) {
|
|
r.op = v
|
|
}
|
|
|
|
func (r *Record) GetAction() Action {
|
|
if r != nil {
|
|
return r.action
|
|
}
|
|
|
|
return ActionUnknown
|
|
}
|
|
|
|
func (r *Record) SetAction(v Action) {
|
|
r.action = v
|
|
}
|
|
|
|
func (r *Record) GetFilters() []HeaderFilter {
|
|
if r != nil {
|
|
return r.filters
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func (r *Record) SetFilters(v []HeaderFilter) {
|
|
r.filters = v
|
|
}
|
|
|
|
func (r *Record) GetTargets() []Target {
|
|
if r != nil {
|
|
return r.targets
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func (r *Record) SetTargets(v []Target) {
|
|
r.targets = v
|
|
}
|
|
|
|
func (t *Table) GetVersion() *refs.Version {
|
|
if t != nil {
|
|
return t.version
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func (t *Table) SetVersion(v *refs.Version) {
|
|
t.version = v
|
|
}
|
|
|
|
func (t *Table) GetContainerID() *refs.ContainerID {
|
|
if t != nil {
|
|
return t.cid
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func (t *Table) SetContainerID(v *refs.ContainerID) {
|
|
t.cid = v
|
|
}
|
|
|
|
func (t *Table) GetRecords() []Record {
|
|
if t != nil {
|
|
return t.records
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func (t *Table) SetRecords(v []Record) {
|
|
t.records = v
|
|
}
|
|
|
|
func (l *TokenLifetime) GetExp() uint64 {
|
|
if l != nil {
|
|
return l.exp
|
|
}
|
|
|
|
return 0
|
|
}
|
|
|
|
func (l *TokenLifetime) SetExp(v uint64) {
|
|
l.exp = v
|
|
}
|
|
|
|
func (l *TokenLifetime) GetNbf() uint64 {
|
|
if l != nil {
|
|
return l.nbf
|
|
}
|
|
|
|
return 0
|
|
}
|
|
|
|
func (l *TokenLifetime) SetNbf(v uint64) {
|
|
l.nbf = v
|
|
}
|
|
|
|
func (l *TokenLifetime) GetIat() uint64 {
|
|
if l != nil {
|
|
return l.iat
|
|
}
|
|
|
|
return 0
|
|
}
|
|
|
|
func (l *TokenLifetime) SetIat(v uint64) {
|
|
l.iat = v
|
|
}
|
|
|
|
func (bt *BearerTokenBody) GetEACL() *Table {
|
|
if bt != nil {
|
|
return bt.eacl
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func (bt *BearerTokenBody) SetEACL(v *Table) {
|
|
bt.eacl = v
|
|
}
|
|
|
|
func (t *APEOverride) GetTarget() *ape.ChainTarget {
|
|
if t == nil {
|
|
return nil
|
|
}
|
|
|
|
return t.target
|
|
}
|
|
|
|
func (t *APEOverride) GetChains() []*ape.Chain {
|
|
if t == nil {
|
|
return nil
|
|
}
|
|
|
|
return t.chains
|
|
}
|
|
|
|
func (t *APEOverride) SetTarget(v *ape.ChainTarget) {
|
|
t.target = v
|
|
}
|
|
|
|
func (t *APEOverride) SetChains(v []*ape.Chain) {
|
|
t.chains = v
|
|
}
|
|
|
|
func (bt *BearerTokenBody) GetAPEOverride() *APEOverride {
|
|
if bt != nil {
|
|
return bt.apeOverride
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func (bt *BearerTokenBody) SetAPEOverride(v *APEOverride) {
|
|
bt.apeOverride = v
|
|
}
|
|
|
|
func (bt *BearerTokenBody) GetOwnerID() *refs.OwnerID {
|
|
if bt != nil {
|
|
return bt.ownerID
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func (bt *BearerTokenBody) SetOwnerID(v *refs.OwnerID) {
|
|
bt.ownerID = v
|
|
}
|
|
|
|
func (bt *BearerTokenBody) GetLifetime() *TokenLifetime {
|
|
if bt != nil {
|
|
return bt.lifetime
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func (bt *BearerTokenBody) SetLifetime(v *TokenLifetime) {
|
|
bt.lifetime = v
|
|
}
|
|
|
|
func (bt *BearerTokenBody) GetImpersonate() bool {
|
|
if bt != nil {
|
|
return bt.impersonate
|
|
}
|
|
|
|
return false
|
|
}
|
|
|
|
func (bt *BearerTokenBody) SetImpersonate(v bool) {
|
|
bt.impersonate = v
|
|
}
|
|
|
|
func (bt *BearerToken) GetBody() *BearerTokenBody {
|
|
if bt != nil {
|
|
return bt.body
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func (bt *BearerToken) SetBody(v *BearerTokenBody) {
|
|
bt.body = v
|
|
}
|
|
|
|
func (bt *BearerToken) GetSignature() *refs.Signature {
|
|
if bt != nil {
|
|
return bt.sig
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func (bt *BearerToken) SetSignature(v *refs.Signature) {
|
|
bt.sig = v
|
|
}
|