The Query Planner API aims to address a common use case in access control scenarios: filtering a list to retain only those items that a particular user has access to. You can send a principal, action, resource kind and any known resource attributes to /api/x/plan/resources and obtain a tree representation, abstract syntax tree (AST), of conditions that must be satisfied in order for that principal to be allowed to perform the action on that resource kind. See Resources Query Plan for details about the new API.
This project contains Go modules showing how to use the Query Planner API to filter data using various ORMs and toolkits.
Current list of modules:
- ent-adapter is an example and helper functions using Ent ORM.
- pgx-adapter is an example and helper function using pgx - PostgreSQL Driver and Toolkit.