Documentation ¶
Index ¶
- Variables
- type ModelAuthZ
- type ModelAuthZBasic
- func (a *ModelAuthZBasic) CanCreateModel(ctx context.Context, curUser model.User, workspaceID int32) error
- func (a *ModelAuthZBasic) CanDeleteModel(ctx context.Context, curUser model.User, m *modelv1.Model, workspaceID int32) error
- func (a *ModelAuthZBasic) CanDeleteModelVersion(ctx context.Context, curUser model.User, modelVersion *modelv1.ModelVersion, ...) error
- func (a *ModelAuthZBasic) CanEditModel(ctx context.Context, curUser model.User, m *modelv1.Model, workspaceID int32) error
- func (a *ModelAuthZBasic) CanGetModel(ctx context.Context, curUser model.User, m *modelv1.Model, workspaceID int32) error
- func (a *ModelAuthZBasic) CanGetModels(ctx context.Context, curUser model.User, workspaceIDs []int32) (workspaceIDsWithPermsFilter []int32, serverError error)
- func (a *ModelAuthZBasic) CanMoveModel(ctx context.Context, curUser model.User, modelRegister *modelv1.Model, ...) error
- func (a *ModelAuthZBasic) FilterReadableModelsQuery(ctx context.Context, curUser model.User, query *bun.SelectQuery) (*bun.SelectQuery, error)
Constants ¶
This section is empty.
Variables ¶
var AuthZProvider authz.AuthZProviderType[ModelAuthZ]
AuthZProvider is the authz registry for models.
Functions ¶
This section is empty.
Types ¶
type ModelAuthZ ¶
type ModelAuthZ interface { // GET /api/v1/models CanGetModels(ctx context.Context, curUser model.User, workspaceIDs []int32, ) (workspaceIDsWithPermsFilter []int32, serverError error) // GET /api/v1/checkpoints/{checkpoint_uuid} // GET /api/v1/models/{model_name} // GET /api/v1/models/{model_name}/versions/{model_version_num} // GET /api/v1/models/{model_name}/versions CanGetModel(ctx context.Context, curUser model.User, m *modelv1.Model, workspaceID int32, ) error // PATCH /api/v1/models/{model_name} // PATCH /api/v1/models/{model_name}/versions/{model_version_num} // POST /api/v1/models/{model_name}/versions // POST /api/v1/models/{model_name}/archive // POST /api/v1/models/{model_name}/unarchive CanEditModel(ctx context.Context, curUser model.User, m *modelv1.Model, workspaceID int32, ) error // POST /api/v1/models CanCreateModel(ctx context.Context, curUser model.User, workspaceID int32, ) error // DELETE /api/v1/models/{modelName} CanDeleteModel(ctx context.Context, curUser model.User, m *modelv1.Model, workspaceID int32, ) error // DELETE /api/v1/models/{modelName}/versions/{modelVersionNum} CanDeleteModelVersion(ctx context.Context, curUser model.User, modelVersion *modelv1.ModelVersion, workspaceID int32) error // POST /api/v1/models/{model_name}/move CanMoveModel(ctx context.Context, curUser model.User, model *modelv1.Model, fromWorkspaceID int32, toWorkspaceID int32) error // GET /api/v1/models with filter to allow reading FilterReadableModelsQuery( ctx context.Context, curUser model.User, query *bun.SelectQuery, ) (*bun.SelectQuery, error) }
ModelAuthZ describes authz methods for experiments.
type ModelAuthZBasic ¶
type ModelAuthZBasic struct{}
ModelAuthZBasic is basic OSS controls.
func (*ModelAuthZBasic) CanCreateModel ¶
func (a *ModelAuthZBasic) CanCreateModel(ctx context.Context, curUser model.User, workspaceID int32, ) error
CanCreateModel always returns true and a nil error.
func (*ModelAuthZBasic) CanDeleteModel ¶
func (a *ModelAuthZBasic) CanDeleteModel(ctx context.Context, curUser model.User, m *modelv1.Model, workspaceID int32, ) error
CanDeleteModel returns an error if the model is not owned by the current user and the current user is not an admin.
func (*ModelAuthZBasic) CanDeleteModelVersion ¶
func (a *ModelAuthZBasic) CanDeleteModelVersion(ctx context.Context, curUser model.User, modelVersion *modelv1.ModelVersion, workspaceID int32, ) error
CanDeleteModelVersion returns an error if the model/model version is not owned by the current user and the current user is not an admin.
func (*ModelAuthZBasic) CanEditModel ¶
func (a *ModelAuthZBasic) CanEditModel(ctx context.Context, curUser model.User, m *modelv1.Model, workspaceID int32, ) error
CanEditModel always returns true and a nil error.
func (*ModelAuthZBasic) CanGetModel ¶
func (a *ModelAuthZBasic) CanGetModel(ctx context.Context, curUser model.User, m *modelv1.Model, workspaceID int32, ) error
CanGetModel always returns true and a nil error.
func (*ModelAuthZBasic) CanGetModels ¶
func (a *ModelAuthZBasic) CanGetModels(ctx context.Context, curUser model.User, workspaceIDs []int32, ) (workspaceIDsWithPermsFilter []int32, serverError error)
CanGetModels always returns true and a nil error.
func (*ModelAuthZBasic) CanMoveModel ¶
func (a *ModelAuthZBasic) CanMoveModel( ctx context.Context, curUser model.User, modelRegister *modelv1.Model, fromWorkspaceID int32, toWorkspaceID int32, ) error
CanMoveModel always returns true and a nil error.
func (*ModelAuthZBasic) FilterReadableModelsQuery ¶
func (a *ModelAuthZBasic) FilterReadableModelsQuery( ctx context.Context, curUser model.User, query *bun.SelectQuery, ) (*bun.SelectQuery, error)
FilterReadableModelsQuery returns the query unmodified and a nil error.