AbacQueryFilter
Filters snapshot queries using attribute-based access control (ABAC).
Principal tags from the current context are converted into query conditions and appended to snapshot queries.
Matching rules
| Principal tags | Resource tags | Result |
|---|---|---|
wildcard (["*"]) | any | match |
["a", "b"] | ["a"] | match |
["a", "b"] | ["c"] | no match |
| any | key absent | match (public resource) |
See also
Functions
Link copied to clipboard
open override fun filter(context: QueryContext<*, *>, next: FilterChain<QueryContext<*, *>>): Mono<Void>
Link copied to clipboard
abstract fun getPrincipalTags(contextView: ContextView, context: QueryContext<*, *>): Mono<AbacTags>
Resolves the principal's ABAC tags from the current context.
Link copied to clipboard
Resolves the ABAC condition for the current context.