Spectre.Operation.Policy (Spectre v0.3.0)

Copy Markdown View Source

Deterministic authorization gate for a registered operational capability.

Registration is the default authorization boundary. Sensitive operations can additionally name a stable module or {module, function} callback in their policy: option. The callback executes inside the temporary Runner and may return :ok, true, or {:error, reason}.

Summary

Functions

authorize(spec, request, context)

Functions

authorize(spec, request, context)

@spec authorize(
  Spectre.Operation.Spec.t(),
  Spectre.Operation.Request.t(),
  Spectre.Operation.ExecutionContext.t()
) :: :ok | {:error, term()}