Kazan v0.3.0 Kazan.Models.V1beta1.SubjectAccessReviewSpec

SubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set

Properties

  • extra :: Map

    • Extra corresponds to the user.Info.GetExtra() method from the authenticator. Since that is input to the authorizer it needs a reflection here.
  • group :: [ String ]

    • Groups is the groups you’re testing for.
  • non_resource_attributes :: Kazan.Models.V1beta1.NonResourceAttributes

    • NonResourceAttributes describes information for a non-resource access request
  • resource_attributes :: Kazan.Models.V1beta1.ResourceAttributes

    • ResourceAuthorizationAttributes describes information for a resource access request
  • user :: String

    • User is the user you’re testing for. If you specify “User” but not “Group”, then is it interpreted as “What if User were not a member of any groups