smail
f60d3b0880
Some checks are pending
Security Checks / security (push) Waiting to run
统一 frontend、backend、test、test-log 和 out 目录，更新构建、部署及测试入口；纳入配置管理兼容与首次安全引导修复；排除本机配置、密钥和测试产物。
26 lines
938 B
Go
26 lines
938 B
Go
package controllers
|
|
|
|
import (
|
|
"git.pcux.cn/xuans/Smail/services/access"
|
|
"git.pcux.cn/xuans/Smail/utils/context"
|
|
)
|
|
|
|
// authorizeCapability 统一把 HTTP 请求上下文映射到能力授权器。
|
|
func authorizeCapability(ctx *context.Context, capability access.Capability, targetRole access.Role, ownResource bool) error {
|
|
if ctx == nil {
|
|
return &access.Denial{Code: access.CodeAccessDenied}
|
|
}
|
|
return access.Authorize(access.Request{
|
|
ActorRole: ctx.EffectiveRole(),
|
|
Capability: capability,
|
|
TargetRole: targetRole,
|
|
OwnResource: ownResource,
|
|
RecentAuth: ctx.RecentAuth,
|
|
RecoveryCodeConfigured: ctx.RecoveryCodeConfigured,
|
|
TargetRecoveryConfigured: ctx.TargetRecoveryConfigured,
|
|
PluginInstanceAuthorized: ctx.PluginInstanceAuthorized,
|
|
AuditScopeAuthorized: ctx.AuditScopeAuthorized,
|
|
DeploymentChannel: ctx.DeploymentChannel,
|
|
})
|
|
}
|