yaml

type Config struct {
	Metadata    Metadata              `yaml:"config"`
	Roles       map[string]Role       `yaml:"roles"`
	Permissions map[string]Permission `yaml:"permissions"`
}

type Metadata struct {
	Permissions *core.TemplateMetadata `yaml:"permissions"`
	Roles       *core.TemplateMetadata `yaml:"roles"`
}

type Permission struct {
	ID          string `yaml:"id"`
	Name        string `yaml:"name"`
	Description string `yaml:"description"`
	GoName      string `yaml:"go-name"`
}

type Role struct {
	ID          string   `yaml:"id"`
	Key         string   `yaml:"-"`
	Name        string   `yaml:"name"`
	Description string   `yaml:"description"`
	Permissions []string `yaml:"permissions"`

	// GoName overrides the automatically generated Go Name for the roles.
	// The default is <path>/roles.PascalCase(ID). If ID and Key differ, we defer to Key.
	// This allows using e.g. admin (roles.Admin) as the key, but keeping the ID as my-orgname-admin.
	GoName string `yaml:"go-name"`

	// ActiveDirectory is a mapping to record against the role for mapping active directory groups in single sign-on.
	ActiveDirectory string `yaml:"ad-mapping"`
}