nsmcp::Authorizer method allowed (public)

 <instance of nsmcp::Authorizer> allowed context permission

Defined in /usr/local/ns/tcl/nsmcp/security.tcl

Check a permission against the request's grants and target servers. Require both the named permission and membership of the selected server in the credential targets.

Parameters:

context (required)

Authenticated request context carrying the principal, grants and selected server.

permission (required)

Permission name required by the requested operation.

Returns:

True when both checks pass, otherwise false.

Testcases:

No testcase defined.

Source code:

return [expr {$permission in [$context permissions] &&
              [$context server] in [$context targets]}]

XQL Not present:

Generic, PostgreSQL, Oracle