package kubecaml

  1. Overview
  2. Docs
Legend:
Library
Module
Module type
Parameter
Class
Class type

Subject_access_review_status

type t
val to_yojson : t -> Yojson.Safe.t
val make : ?reason:string -> ?evaluation_error:string -> ?denied:bool -> allowed:bool -> unit -> t
val allowed : t -> bool

Allowed is required. True if the action would be allowed, false otherwise.

val denied : t -> bool option

Denied is optional. True if the action would be denied, otherwise false. If both allowed is false and denied is false, then the authorizer has no opinion on whether to authorize the action. Denied may not be true if Allowed is true.

val evaluation_error : t -> string option

Evaluation_error is an indication that some error occurred during the authorization check. It is entirely possible to get an error and be able to continue determine authorization status in spite of it. For instance, Rbac can be missing a role, but enough roles are still present and bound to reason about the request.

val reason : t -> string option

Reason is optional. It indicates why a request was allowed or denied.

module Object : Object.S with type value := t