package cacheroach.capabilities

Get desktop application:
View/edit binary Protocol Buffers messages

Used in: SessionReference, session.Session

• bool read = 1

  General model property access.

• bool write = 2

  General model property access.

• bool delegate = 3

  Grants the ability to create additional access tokens.

• bool pii = 4

  Grants access to personally-identifying information.

• bool fetch = 5

  Grants access to the server-side fetch API.

Used in: Reference

• INVALID_CONTEXT = 0

• SESSION_PRINCIPAL = 1

  The principal that is making the request.

• SCOPE_TENANT = 2

  The tenant that is embedded in the session's scope.

• SCOPE_PRINCIPAL = 3

  The principal embedded in the session's scope.

• UNAUTHENTICATED_PRINCIPAL = 4

  A well-known ID for an unauthorized request.

• VHOST_TENANT = 5

  The tenant associated with a virtual-host.

Used in: Rule

• INVALID_DIRECTION = 0

• REQUEST = 1

• RESPONSE = 2

Analog of session.Location.

Used in: ScopeReference

• optional Reference tenant_id = 1

• optional Reference path = 2

Reference to an ID.

Used in: LocationReference, Rule.Eq, ScopeReference

• oneof Kind

  • ContextReference context = 1

  • int32 field = 2

  • string string_value = 3

    A literal string value.

Used in: Rule.And, Rule.Or

• oneof Kind

  • Rule.Eq eq = 1

    Requires equality.

  • Rule not = 2

    Inverts the enclosed rule.

  • bool never = 3

    A rule that never matches.

  • Rule.And and = 4

    Conjunction.

  • Rule.Or or = 5

    Disjunction.

  • Rule.AuthStatus auth_status = 6

    General authentication status.

  • SessionReference may = 7

  • Direction direction = 8

    The request direction.

  • bool is_subset = 9

    Applies to session.Session; indicates that the session must be a subset of the principal's scopes.

• string message = 15

  A message to be returned to the user explaining the rule.

Used in: Rule

• repeated Rule rule = 1

Used in: Rule

• LOGGED_IN = 0

  Require credentials.

• PUBLIC = 1

  Always allow access, even to unauthenticated callers.

• SUPER = 2

  Require super-token access. This is the default.

Used in: Rule

• optional Reference a = 1

• optional Reference b = 2

Used in: Rule

• repeated Rule rule = 1

Analog of session.Scope.

Used in: SessionReference

• oneof Kind

  • bool super_token = 1

  • Reference on_principal = 2

  • LocationReference on_location = 3

Analog of session.Session.

Used in: Rule

• optional Capabilities capabilities = 2

• optional ScopeReference scope = 4