type
AccessDecision
An allow, deny, or filtered authorization result.
Properties
| Property | Type | Description |
|---|---|---|
Allow | func() AccessDecision | Authorize without a document predicate. |
Deny | func() AccessDecision | Reject the operation. |
Where | func(query.Expression) AccessDecision | Require a predicate on the atomic store operation. |
Kind | func() AccessDecisionKind | Report allow, deny, or filtered. |
Filter | func() (query.Node, | Return a detached predicate for a filtered decision. |
How it works
AccessDecision is immutable. Construct it with Allow, Deny, or Where; filtered predicates remain attached to the same atomic store query as the operation.
Full signature
type AccessDecision struct {
// contains filtered or unexported fields
}Methods
AccessDecision.Filter()Filter returns a detached predicate for a filtered decision.
AccessDecision.Kind()Kind reports whether the decision allows, denies, or filters the operation.