https://speedle.io/zh/tags/pdp/ Recent content in Pdp on Speedle Hugo -- gohugo.io zh-cn https://speedle.io/zh/docs/decisions/ Mon, 01 Jan 0001 00:00:00 +0000 https://speedle.io/zh/docs/decisions/ 1. 什么是授权查询? 授权查询是 Speedle ADS(Authorization Decision Service)提供的服务接口， 一般用于查询某个主体(subject)对某个资源(resource)实施某项操作(action)是否被允许。 授权查询的结果是基于角色策略(role-policies)和策略(policies)的实时运算。 2. 授权查询的方式 Speedle 支持以下 3 种方式进行授权查询： REST API provided by Authorization Decision Service(ADS) Grpc API provided by Authorization Decision Service(ADS) Golang API 3. 授权查询 API 及其示例 The ADS decision APIs make authorization decisions based on policies that describe the actions, permissions, and roles granted to a subject. 3.1 查询授权决定 查询某个主体(subject)对某个资源(resource)实施某项操作(action)是否被允许 API overview IN Given the request: subject, action, resource Given the runtime attributes **optional** Given the service scope OUT Returns true if allowed, false if NOT allowed Returns reason for the decision Returns errors if an error occurs Sample 查询 user Alan 从 onlineBookStore 应用 下载 HarryPotter 这本书是否被允许。 授权结果基于定义在 “onlineBookStore” 这个 service 中的所有角色策略(role-policies)和策略(policies)的。 REST API example: