slash-e/api/v2/acl_config.go

package v2

import "strings"

var allowedMethodsWhenUnauthorized = map[string]bool{
	"/slash.api.v2.WorkspaceService/GetWorkspaceProfile":  true,
	"/slash.api.v2.WorkspaceService/GetWorkspaceSetting":  true,
	"/slash.api.v2.AuthService/SignIn":                    true,
	"/slash.api.v2.AuthService/SignUp":                    true,
	"/slash.api.v2.AuthService/SignOut":                   true,
	"/memos.api.v2.AuthService/GetAuthStatus":             true,
	"/slash.api.v2.ShortcutService/GetShortcutByName":     true,
	"/slash.api.v2.ShortcutService/GetShortcut":           true,
	"/slash.api.v2.CollectionService/GetCollectionByName": true,
}

// isUnauthorizeAllowedMethod returns true if the method is allowed to be called when the user is not authorized.
func isUnauthorizeAllowedMethod(methodName string) bool {
	if strings.HasPrefix(methodName, "/grpc.reflection") {
		return true
	}
	return allowedMethodsWhenUnauthorized[methodName]
}

var allowedMethodsOnlyForAdmin = map[string]bool{
	"/slash.api.v2.UserService/CreateUser":                  true,
	"/slash.api.v2.UserService/DeleteUser":                  true,
	"/slash.api.v2.WorkspaceService/UpdateWorkspaceSetting": true,
	"/slash.api.v2.SubscriptionService/UpdateSubscription":  true,
}

// isOnlyForAdminAllowedMethod returns true if the method is allowed to be called only by admin.
func isOnlyForAdminAllowedMethod(methodName string) bool {
	return allowedMethodsOnlyForAdmin[methodName]
}