open-consul/acl/authorizer_oss.go

// +build !consulent

package acl

// EnterpriseAuthorizerContext stub
type EnterpriseAuthorizerContext struct{}

// EnterpriseAuthorizer stub interface
type EnterpriseAuthorizer interface{}

func EnforceEnterprise(_ Authorizer, _ Resource, _ string, _ string, _ *EnterpriseAuthorizerContext) (bool, EnforcementDecision, error) {
	return false, Deny, nil
}
ACL Authorizer overhaul (#6620) * ACL Authorizer overhaul To account for upcoming features every Authorization function can now take an extra acl.EnterpriseAuthorizerContext. These are unused in OSS and will always be nil. Additionally the acl package has received some thorough refactoring to enable all of the extra Consul Enterprise specific authorizations including moving sentinel enforcement into the stubbed structs. The Authorizer funcs now return an acl.EnforcementDecision instead of a boolean. This improves the overall interface as it makes multiple Authorizers easily chainable as they now indicate whether they had an authoritative decision or should use some other defaults. A ChainedAuthorizer was added to handle this Authorizer enforcement chain and will never itself return a non-authoritative decision. Include stub for extra enterprise rules in the global management policy * Allow for an upgrade of the global-management policy 2019-10-15 20:58:50 +00:00			`// +build !consulent`

			`package acl`

			`// EnterpriseAuthorizerContext stub`
			`type EnterpriseAuthorizerContext struct{}`

			`// EnterpriseAuthorizer stub interface`
			`type EnterpriseAuthorizer interface{}`
[Feature] API: Add a internal endpoint to query for ACL authori… (#6888) * Implement endpoint to query whether the given token is authorized for a set of operations * Updates to allow for remote ACL authorization via RPC This is only used when making an authorization request to a different datacenter. 2019-12-06 14:25:26 +00:00
			`func EnforceEnterprise(_ Authorizer, _ Resource, _ string, _ string, _ *EnterpriseAuthorizerContext) (bool, EnforcementDecision, error) {`
			`return false, Deny, nil`
			`}`