grim/hgkeeper

Move from our custom yaml access setup to casbin

2019-09-09, Gary Kramlich
f82b7c397849
Move from our custom yaml access setup to casbin
package access
import (
"sync"
)
const (
modelFilename = "model.conf"
policyFilename = "policy.csv"
)
var (
accessLock sync.Mutex
)
// Refresh will try to reload the casbin model and policies followed by SSH
// keys. If there is an error it's possible that the casbin model and polcies
// could have been updated but the ssh keys were not.
func Refresh(repoPath string) error {
accessLock.Lock()
defer accessLock.Unlock()
if err := refreshEnforcer(repoPath); err != nil {
return err
}
if err := refreshKeys(repoPath); err != nil {
return err
}
return nil
}
func check(user, repo, action string) bool {
return enforcer.Enforce(user, repo, action)
}
func CanRead(user, repo string) bool {
return check(user, repo, "read")
}
func CanWrite(user, repo string) bool {
return check(user, repo, "write")
}
func CanInit(user, repo string) bool {
return check(user, repo, "init")
}