package goes.contrib.auth

Get desktop application:
View/edit binary Protocol Buffers messages

AuthService is the authorization service.

• rpc GetPermissions (common.UUID, Permissions)

  auth.proto:12

  GetPermissions returns the permissions read-model of the given actor.

  message Permissions

  auth.proto:38

  Permissions is the read-model for an actor's permissions.

  • optional common.UUID actor_id = 1

  • repeated common.UUID roles = 2

  • optional Actions of_actor = 3

  • optional Actions of_roles = 4

• rpc Allows (AllowsReq, AllowsResp)

  auth.proto:15

  Allows returns whether an actor is allowed to perform an action.

  message AllowsReq

  auth.proto:57

  AllowsReq is the request for Allows.

  • optional common.UUID actor_id = 1

  • optional aggregate.Ref aggregate = 2

  • string action = 3

  message AllowsResp

  auth.proto:64

  AllowsResp is the response for Allows.

  • bool allowed = 1

• rpc LookupActor (LookupActorReq, common.UUID)

  auth.proto:19

  LookupActor returns the aggregate id of the actor with the given string-formatted actor id.

  message LookupActorReq

  auth.proto:69

  LookupActorReq is the request for LookupActor.

  • string string_id = 1

• rpc LookupRole (LookupRoleReq, common.UUID)

  auth.proto:22

  LookupRole returns the aggregate id of the role with the given name.

  message LookupRoleReq

  auth.proto:74

  LookupRoleReq is the request for LookupRole.

  • string name = 1

• rpc GrantToActor (GrantRevokeReq, google.protobuf.Empty)

  auth.proto:25

  GrantToActor grants the given actor permission to perform the given actions.

• rpc GrantToRole (GrantRevokeReq, google.protobuf.Empty)

  auth.proto:28

  GrantToRole grants the given role permission to perform the given actions.

• rpc RevokeFromActor (GrantRevokeReq, google.protobuf.Empty)

  auth.proto:31

  RevokeFromActor revokes from the given actor the permission to perform the given actions.

• rpc RevokeFromRole (GrantRevokeReq, google.protobuf.Empty)

  auth.proto:34

  RevokeFromRole revokes from the given role the permission to perform the given actions.

ActionGrants holds granted actions as the amount of times they were granted to the actor or role.

Used in: Actions

• map<string, uint64> actions = 1

Actions maps aggregate names to permitted actions on these aggregates.

Used in: Permissions

• map<string, ActionGrants> actions = 1

GrantRevokeReq is the request for GrantToXXX and RevokeFromXXX.

Used as request type in: AuthService.GrantToActor, AuthService.GrantToRole, AuthService.RevokeFromActor, AuthService.RevokeFromRole

• optional common.UUID role_or_actor = 1

• optional aggregate.Ref target = 2

• repeated string actions = 3