31 lines
634 B
Go
31 lines
634 B
Go
|
package auth
|
||
|
|
|
||
|
|
var rolePermissions = map[string][]string{
|
||
|
|
"tenant_admin": {
|
||
|
|
"brand:read", "brand:write", "brand:delete",
|
||
|
|
"article:read", "article:write", "article:delete",
|
||
|
|
"template:read", "template:generate",
|
||
|
|
"workspace:read",
|
||
|
|
"member:read", "member:write",
|
||
|
|
},
|
||
|
|
"editor": {
|
||
|
|
"brand:read", "brand:write",
|
||
|
|
"article:read", "article:write",
|
||
|
|
"template:read", "template:generate",
|
||
|
|
"workspace:read",
|
||
|
|
},
|
||
|
|
"viewer": {
|
||
|
|
"brand:read",
|
||
|
|
"article:read",
|
||
|
|
"template:read",
|
||
|
|
"workspace:read",
|
||
|
|
},
|
||
|
|
}
|
||
|
|
|
||
|
|
func PermissionsForRole(role string) []string {
|
||
|
|
if perms, ok := rolePermissions[role]; ok {
|
||
|
|
return perms
|
||
|
|
}
|
||
|
|
return nil
|
||
|
|
}
|