Struct ACLMappingVar

coderd/rbac/regosql/acl_mapping_var.go:29–51

ACLMappingVar is a variable matcher that matches ACL map variables to their SQL storage. Usually the actual backing implementation is a pair of `jsonb` columns named `group_acl` and `user_acl`. Each column contains an object that looks like... ```json { " ": [" ", " "]

//
// ```
type ACLMappingVar struct {
	// SelectSQL is used to `SELECT` the ACL mapping from the table for the
	// given resource. ie. if the full query might look like `SELECT group_acl
	// FROM things;` then you would want this to be `"group_acl"`.
	SelectSQL string
	// IndexMatcher handles variable references when indexing into the mapping.
	// (ie. `input.object.acl_group_list[input.object.org_owner]`). We need one
	// from the local context because the global one might not be correctly
	// scoped.
	IndexMatcher sqltypes.VariableMatcher
	// Used if the action list isn't directly in the ACL entry. For example, in
	// the `workspaces.group_acl` and `workspaces.user_acl` columns they're stored
	// under a `"permissions"` key.
	Subfield string

	// StructPath represents the path of the value in rego
	// ie. input.object.group_acl -> ["input", "object", "group_acl"]
	StructPath []string

	// Instance fields
	Source    sqltypes.RegoSource
	GroupNode sqltypes.Node
}

func ACLMappingMatcher(indexMatcher sqltypes.VariableMatcher, selectSQL string, structPath []string) ACLMappingVar {
	return ACLMappingVar{IndexMatcher: indexMatcher, SelectSQL: selectSQL, StructPath: structPath}