¶ AclManagementClient

Authing builds an authorization model based on PBAC (Policy Based Access Control), which can be combined with RBAC (Role Based Access Control) to achieve high flexible and refined privilege control. This client abstracts this model into two methods: allow and isAllowed.

¶ Allow a user to perform an operation on a resource

AclManagementClient().allow(userId, action, resource)

Allow a user to perform an operation on a resource

¶ Parameters:

• userId <string> User ID
• action <string> The name of the action, which is recommended to use the format of <resourceType>:<actionName> , such as books:edit, books:list
• resource <string> Resource name, which must be in the format of <resourceType>:<resourceId> or _, such as _,books:123,books:\*

¶ Example:

# 允许某个用户操作某个角色
management_client.acl.allow(
    resource='books:123',
    action='books:edit',
    userId='60b4a136d9xxxxcc3d87e55a'
)

# 允许某个角色操作某个角色
management_client.acl.allow(
    resource='books:*',
    action='books:edit',
    role='ROLE'
)

¶ Get whether a user has operation authority of a resource

AclManagementClient().is_allowed(userId, action, resource)

Get whether a user has operation authority of a resource

¶ Parameters:

• userId <string> User ID
• action <string> The name of the action, which is recommended to use the format of <resourceType>:<actionName> , such as books:edit, books:list
• resource <string> Resource name, which must be in the format of <resourceType>:<resourceId> or _, such as _,books:123,books:\*

¶ Example:

is_allowed = management_client.acl.is_allowed(
    userId='60b4a136d9xxxxcc3d87e55a',
    resource='books:*',
    action='books:edit',
)