26 lines
401 B
Go
26 lines
401 B
Go
package rbac
|
|
|
|
import (
|
|
"errors"
|
|
|
|
"github.com/el-mike/restrict/v2"
|
|
)
|
|
|
|
var (
|
|
ErrNotAuthorized = errors.New("not authorized")
|
|
)
|
|
|
|
var policy = &restrict.PolicyDefinition{
|
|
Roles: restrict.Roles{
|
|
"User": {
|
|
Grants: restrict.GrantsMap{
|
|
"Conversation": {
|
|
&restrict.Permission{Action: "read"},
|
|
&restrict.Permission{Action: "create"},
|
|
},
|
|
},
|
|
},
|
|
"Guest": {},
|
|
"Admin": {},
|
|
},
|
|
}
|