The London Perl and Raku Workshop takes place on 26th Oct 2024. If your company depends on Perl, please consider sponsoring and/or attending.

NAME

Authorization::AccessControl::Grant - Encapsulation of the parameters of a privilege grant

SYNOPSIS

use Authorization::AccessControl::Grant;

my $grant = Authorization::AccessControl::Grant->new(
  resource => 'Book',
  action   => 'read',
);

$grant->accepts(resource => 'Book', action => 'read'); 

DESCRIPTION

This is a simple class to encapsulate the properties of a privilege grant: resource, action, roles, and restrictions, with the latter two optional. Methods are available for checking all properties at once ("accepts") and determining if another grant is exactly equal (used for duplicate detection) (is_equal).

Grant instances are immutable: none of their properties may be altered after object creation.

METHODS

new

Authorization::AccessControl::Grant->new( %params )

Creates a new privilege grant instance. Normally, you should use "grant" in Authorization::AccessControl::ACL rather than this constructor directly, to create and "register" instances. resource, action, role, and restrictions keys are respected in %params

role

Accessor for the role property

resource

Accessor for the resource property

action

Accessor for the action property

restrictions

Accessor for the restrictions property

is_equal

$grant1->is_equal($grant2)

Returns true if all properties of both grants are exactly the same, false otherwise

accepts

$grant->accepts( %params )

Returns true if the parameters meet all of the requirements of the grant, false otherwise. Specifically, this means that resource and action must match exactly, the grant's role (if set) must be contained within the roles ArrayRef, and every item in the grant's restrictions must be matched by a corresponding entry with the same value in the attributes HashRef

AUTHOR

Mark Tyrrell <mark@tyrrminal.dev>

LICENSE

Copyright (c) 2024 Mark Tyrrell

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.