Gestinanna::Authz
$authz = Gestinanna::Authz -> new(alzabo_schema => $schema);
if($authz -> has_attributes($user, $path, $attrs)) {
# do something
}
$authz -> grant($granter, $grantee, $path, $attrs);
In addition to the paths used by Gestinanna::Util/path_cmp, they may also contain special components:
This refers to the path describing the user or actor. This allows the specification of ACLs that are specific to each user without having to have a separate ACL for each user. For example, to allow each user their own test area, allow /testing/SELF//* for all users that can do testing.
This refers to the type of object described by SELF. This defaults to user.
The components beginning with F followed by an integer refer to particular parts of the user path that are variable, such as // or *. These are numbered starting at 1 and increasing as they are encountered. Each part of an intersection is also counted.
$authz = Gestinanna::Authz -> new(alzabo_schema => $schema);
This constructs a new authorization management object. The following options may be passed.
This is the string to use to denote the user group type.
This is the string to use to denote the resource group type.
The Alzabo runtime schema to use when fetching information.
This is the string to use to denote the user type.
$acls = $authz -> fetch_acls($user, $resource)
This method provides any ACL information that might be useful in the current ACL query as indicated by the user and resource string arguments.
The return value is a hash reference with the following structure:
{ user_path => { resource_path => { %attributes } } }
The attribute mapping maps attribute names to numeric values. Negative values are considered to be prohibitive while positive values are permissive. Undefined or zero values are ignored.
Both $user and $resource will be array references. The first element will be the type of object the path is referring to. The second element will be the path describing the set of such objects.
The safest set of information to return is all ACLs that describe the relationship between the $user and $resource object types.
James G. Smith, <jsmith@cpan.org>
Copyright (C) 2003-2004 Texas A&M University. All Rights Reserved.
This module is free software; you can redistribute it and/or modify it under the same terms as Perl itself.
