AccessContext

Actor, target, locale, data, and nested API supplied to an access rule.

Source ridu.go:16

Context:context.Context

Request cancellation and deadline context.

Operation:Operation

The operation being authorized.

CollectionID:schema.StableID

Target collection identity.

GlobalID:schema.StableID

Target global identity, when applicable.

ID:string

Current document ID; empty for create and list.

Actor:*store.Document

Authenticated actor, or nil.

ActorCollection:schema.CollectionSlug

The exact auth collection that owns Actor.

Data:store.Values

Detached incoming values for writes.

Local:*LocalAPI

Nested operations in the active transaction.

Locale:schema.LocaleCode

Selected locale.

AllLocales:bool

Whether every locale is selected.

func ownerOnly(ctx ridu.AccessContext) (ridu.AccessDecision, error) {
  if ctx.Actor == nil {
    return ridu.Deny(), nil
  }
  author, err := query.NewPath("author")
  if err != nil {
    return ridu.Deny(), err
  }
  return ridu.Where(
    query.Equal(author, query.String(ctx.Actor.ID)),
  ), nil
}