stillbox/pkg/rbac/rbac.go

package rbac

import (
	"errors"

	"github.com/el-mike/restrict/v2"
)

var (
	ErrNotAuthorized = errors.New("not authorized")
)

var policy = &restrict.PolicyDefinition{
	Roles: restrict.Roles{
		"User": {
			Grants: restrict.GrantsMap{
				"Conversation": {
					&restrict.Permission{Action: "read"},
					&restrict.Permission{Action: "create"},
				},
			},
		},
		"Guest": {},
		"Admin": {},
	},
}