internal/api/authorization.go
internal/api · 51 lines · 2 declarations · source
Declarations
method Server.authorized
func (s *Server) authorized(operation string, next grantedHandler) grantedHandler
authorized runs after authentication, project checks and admission, but before parsing a body or executing memory work. New operations are denied to read-only keys until explicitly admitted.
func permitted
func permitted(access credential.Access, operation string) bool