mirror of
https://github.com/grafana/grafana.git
synced 2024-11-29 20:24:18 -06:00
44 lines
1.3 KiB
Go
44 lines
1.3 KiB
Go
package accesscontrol
|
|
|
|
import (
|
|
"fmt"
|
|
"strings"
|
|
|
|
"github.com/grafana/grafana/pkg/services/auth/identity"
|
|
)
|
|
|
|
func GetPermissionCacheKey(user identity.Requester) string {
|
|
return fmt.Sprintf("rbac-permissions-%s", user.GetCacheKey())
|
|
}
|
|
|
|
func GetSearchPermissionCacheKey(user identity.Requester, searchOptions SearchOptions) string {
|
|
key := fmt.Sprintf("rbac-permissions-%s", user.GetCacheKey())
|
|
if searchOptions.Action != "" {
|
|
key += fmt.Sprintf("-%s", searchOptions.Action)
|
|
}
|
|
if searchOptions.Scope != "" {
|
|
key += fmt.Sprintf("-%s", searchOptions.Scope)
|
|
}
|
|
if len(searchOptions.RolePrefixes) > 0 {
|
|
key += "-" + strings.Join(searchOptions.RolePrefixes, "-")
|
|
}
|
|
if searchOptions.ActionPrefix != "" {
|
|
key += fmt.Sprintf("-%s", searchOptions.ActionPrefix)
|
|
}
|
|
return key
|
|
}
|
|
|
|
func GetUserDirectPermissionCacheKey(user identity.Requester) string {
|
|
return fmt.Sprintf("rbac-permissions-direct-%s", user.GetCacheKey())
|
|
}
|
|
|
|
func GetBasicRolePermissionCacheKey(role string, orgID int64) string {
|
|
roleKey := strings.Replace(role, " ", "_", -1)
|
|
roleKey = strings.ToLower(roleKey)
|
|
return fmt.Sprintf("rbac-permissions-basic-role-%d-%s", orgID, roleKey)
|
|
}
|
|
|
|
func GetTeamPermissionCacheKey(teamID int64, orgID int64) string {
|
|
return fmt.Sprintf("rbac-permissions-team-%d-%d", orgID, teamID)
|
|
}
|