SubjectAccessReviewSpec

Description

SubjectAccessReviewSpec is a description of the access request. Exactly one of resourceAttributes and nonResourceAttributes must be set

Properties

extra map[string][]string

extra corresponds to the user.Info.GetExtra() method from the authenticator. Since that is input to the authorizer it needs a reflection here.

groups []string

groups is the groups you're testing for.

nonResourceAttributes NonResourceAttributes

nonResourceAttributes describes information for a non-resource access request

resourceAttributes ResourceAttributes

resourceAttributes describes information for a resource access request

uid string

uid information about the requesting user.

user string

user is the user you're testing for. If you specify "User" but not "Groups", then is it interpreted as "What if User were not a member of any groups