// Shows how to add/check/remove permissions for a n entity (resource) of a user or a group entity
func Example_acl() {
entityManager := initEntityManager()
fmt.Println("ExampleShowACLAddCheckRemovePermissions")
fmt.Printf("User: %q, permission %q is: %v\n", userName1, canUsePermission,
acl.CheckUserPermission(entityManager, userName1, resourceName, acl.Permission(canUsePermission)))
data, _ := entityManager.GetPropertyAttachedToEntity(resourceName, stc.AclPropertyName)
a, ok := data.(*acl.Acl)
if ok == false {
fmt.Println("Error: can't get property", stc.AclPropertyName, "attached to resource", resourceName)
return
}
a.AddPermissionToResource(entityManager, userName1, acl.Permission(canUsePermission))
fmt.Printf("User: %q, permission %q is: %v\n", userName1, canUsePermission,
acl.CheckUserPermission(entityManager, userName1, resourceName, acl.Permission(canUsePermission)))
a.AddPermissionToResource(entityManager, groupName, acl.Permission(supportPermission))
a.AddPermissionToResource(entityManager, groupName, acl.Permission(canUsePermission))
a.AddPermissionToResource(entityManager, stc.AclAllEntryName, acl.Permission(allPermission))
a.AddPermissionToResource(entityManager, userInGroupName1, acl.Permission(usersPermission))
permissions, _ := acl.GetUserPermissions(entityManager, userInGroupName1, resourceName)
fmt.Printf("All the permissions for user: %q, on resource %q are: %q\n",
userInGroupName1, resourceName, permissions)
permissions, _ = acl.GetUserPermissions(entityManager, groupName, resourceName)
fmt.Printf("All the permissions for group %q on resource %q are: %q\n", groupName, resourceName, permissions)
a.RemovePermissionFromEntity(groupName, acl.Permission(canUsePermission))
fmt.Printf("After remove permission: %q from group %q\n", canUsePermission, groupName)
fmt.Printf("User: %q, permission %q is: %v\n", userInGroupName1, canUsePermission,
acl.CheckUserPermission(entityManager, userInGroupName1, resourceName, acl.Permission(canUsePermission)))
fmt.Printf("All the permissions are: %q\n", a.GetAllPermissions())
}
func (a aclRestful) checkPermission(request *restful.Request, response *restful.Response) {
a1, aclInfo, err := a.getResourceAclData(request, response)
if a1 == nil {
a.setError(response, http.StatusNotFound, err)
return
}
ok := false
status := http.StatusOK
if a1 != nil && aclInfo != nil {
ok = acl.CheckUserPermission(a.st.UsersList, aclInfo.UserName, aclInfo.ResourceName, acl.Permission(aclInfo.Permission))
}
str := fmt.Sprintf("Permission '%s' is allowed", aclInfo.Permission)
if ok == false {
str = fmt.Sprintf("Permission '%s' doesn't allowed", aclInfo.Permission)
status = http.StatusNotFound
}
res := cr.Match{Match: ok, Message: str}
response.WriteHeader(status)
response.WriteEntity(res)
}
