mirror of
https://github.com/hanzoai/tasks.git
synced 2026-10-04 02:04:03 +00:00
Alex ShtinandGitHub
8e8f1b0f7c
## What changed?
<!-- Describe what has changed in this PR -->
Remove license header from every file. Because it is really hard to
follow in this PR here is the summary:
1. License header is removed from all `.go` and `.proto` files
:fireworks::fireworks:🎆.
2. `LICENSE` file in the root directory has only Temporal and Uber
copyrights.
3. 5 other `LICENSE` files added to the packages which have copyrights
different from Temporal and Uber: Datadog, Xargin, "Mat Ryer, Tyler
Bunnell and contributors".
4. `license_file` flag is removed from all code generation tools.
5. `copyright_file` flag is removed from `go:generate mockgen`
directive.
6. All copyright related targets are removed from `Makefile`.
7. Updated Temporal copyright year to 2025 everywhere.
## Why?
<!-- Tell your future self why have you made these changes -->
I double checked with legal department that it is not needed to have
license header in every file. One file per repo is enough. I put all
copyrights to the root `LICENSE` file and removed header from all other
files. Also updated tools and `Makefile`.
37 lines
1.0 KiB
Go
37 lines
1.0 KiB
Go
package authorization
|
|
|
|
type Role int16
|
|
|
|
// @@@SNIPSTART temporal-common-authorization-role-enum
|
|
// User authz within the context of an entity, such as system, namespace or workflow.
|
|
// User may have any combination of these authz within each context, except for RoleUndefined, as a bitmask.
|
|
const (
|
|
RoleWorker = Role(1 << iota)
|
|
RoleReader
|
|
RoleWriter
|
|
RoleAdmin
|
|
RoleUndefined = Role(0)
|
|
)
|
|
|
|
// @@@SNIPEND
|
|
|
|
// Checks if the provided role bitmask represents a valid combination of authz
|
|
func (b Role) IsValid() bool {
|
|
return b&^(RoleWorker|RoleReader|RoleWriter|RoleAdmin) == 0
|
|
}
|
|
|
|
// @@@SNIPSTART temporal-common-authorization-claims
|
|
// Claims contains the identity of the subject and subject's roles at the system level and for individual namespaces
|
|
type Claims struct {
|
|
// Identity of the subject
|
|
Subject string
|
|
// Role within the context of the whole Temporal cluster or a multi-cluster setup
|
|
System Role
|
|
// Roles within specific namespaces
|
|
Namespaces map[string]Role
|
|
// Free form bucket for extra data
|
|
Extensions interface{}
|
|
}
|
|
|
|
// @@@SNIPEND
|