az

type Az interface {
	Authenticate(username string) string
	Identify(r *http.Request) (Principal, error)
}

type Directory interface {
	Lookup(username string) (Principal, error)
}

type Principal interface {
	Id() int64
	WorkgroupId() int64
	Name() string
	Password() string
	IsActive() bool
	IsSuperuser() bool
	HasPermission(code int64) bool
	CheckPermission(code int64) error
	Owns(entityTypeId, entityId int64) (bool, error)
	CanEdit(entityTypeId, entityId int64) (bool, error)
	CanView(entityTypeId, entityId int64) (bool, error)
	CheckOwns(entityTypeId, entityId int64) error
	CheckEdit(entityTypeId, entityId int64) error
	CheckView(entityTypeId, entityId int64) error
}