OpsRoles

object OpsRoles

The ops service's roles, which a caller lists in its attribute ROLES_ATTRIBUTE: from the identity the CoSec gateway verified and forwarded (the cosec profile, its operators' roles listed in wow.cosec.tenant-level.roles), or, in development, from the Wow-Roles header (the host's development callers). An entry is its tenant's, so no caller's owner restricts its reads: these roles do (ReaderRole), and a caller with neither reads nothing.

Properties

Link copied to clipboard
const val OPERATOR: String

The role that acts on the entries: the ledger's system commands, wow.ledger.* (OperatorRole).

Link copied to clipboard

The roles that read the entries (ReaderRole): an operator reads what it acts on.

Link copied to clipboard

The caller attribute listing its roles, as CoSec's resolver names it.

Link copied to clipboard
const val VIEWER: String

The role that reads the entries and may not act on them.

Functions

Link copied to clipboard
fun rolesOf(caller: Caller): List<String>

The roles of caller.