Adding check permission endpoint

project-kessel · Apr 17, 2024 · a28494f · a28494f
1 parent 1af01d1
commit a28494f
Show file tree

Hide file tree

Showing 16 changed files with 685 additions and 7 deletions.
diff --git a/api/rebac/v1/check.pb.go b/api/rebac/v1/check.pb.go
diff --git a/api/rebac/v1/check.proto b/api/rebac/v1/check.proto
@@ -0,0 +1,31 @@
+syntax = "proto3";
+
+package api.rebac.v1;
+import "google/api/annotations.proto";
+option go_package = "ciam-rebac/api/rebac/v1;v1";
+option java_multiple_files = true;
+option java_package = "api.rebac.v1";
+
+service Check {
+	rpc CheckPermission (CheckPermissionRequest) returns (CheckPermissionResponse) {
+		option (google.api.http) = {
+			post: "/api/authz/v1/check"
+			body: "*"
+		};
+	};
+}
+
+message CheckPermissionRequest {
+	string subject = 1;
+	string subjectid = 2;
+	string operation = 3;
+	string resourcetype = 4;
+	string resourceid = 5;
+	bool auditlog = 6;
+}
+
+message CheckPermissionResponse {
+	bool result = 1;
+	string description = 3;
+}
+