Iter

Author: ajanikow

integrations/authorization/v1/definition/types.go

@@ -28,12 +28,13 @@ import (
 )
 
 var (
-	actionNameRE = regexp.MustCompile(`^[a-z]+(\.[a-z]+)*$`)
+	actionName   = `^[a-z_]+(\.[a-z_]+)*$`
+	actionNameRE = regexp.MustCompile(actionName)
 )
 
 func validateActionName(name string) error {
 	if !actionNameRE.MatchString(name) {
-		return errors.Errorf("Action `%s` does not match the regex", name)
+		return errors.Errorf("Action `%s` does not match the regex `%s`", name, actionName)
 	}
 
 	return nil

pkg/permissions/shared/storage.go

@@ -48,6 +48,10 @@ type Storage interface {
 	AssignUserToPolicy(ctx context.Context, user, policy string) error
 	DetachUserFromPolicy(ctx context.Context, user, policy string) error
 
+	UserRoles(ctx context.Context, name string) ([]*pbAuthorizationV1.AuthorizationV1Role, error)
+	AssignUserToRole(ctx context.Context, user, role string) error
+	DetachUserFromRole(ctx context.Context, user, role string) error
+
 	GetPolicy(ctx context.Context, name string) (*pbAuthorizationV1.AuthorizationV1Policy, error)
 	GetPolicies(ctx context.Context) ([]*pbAuthorizationV1.AuthorizationV1Policy, error)
 	DeletePolicy(ctx context.Context, name string) error