::nsmcp::Object ::nsmcp::Object dict getdef ::nx::Object ::nx::Object __default_accessor __default_method_call_protection __object_configureparameter __resolve_method_path contains copy delete object method delete object property delete object variable destroy_on_cleanup info consts info info info lookup parameters info lookup slots info lookup syntax info lookup variables info object method args info object method body info object method callprotection info object method debug info object method definition info object method definitionhandle info object method deprecated info object method exists info object method handle info object method origin info object method parameters info object method registrationhandle info object method returns info object method submethods info object method syntax info object method type info object slots info object variables info variable definition info variable name info variable parameter move object alias object forward object method object property object variable private protected public qn require namespace require object method require private object method require protected object method require public object method serialize ::nsmcp::Object->::nx::Object ::nsmcp::Authorizer ::nsmcp::Authorizer allowed require ::nsmcp::Authorizer->::nsmcp::Object

Class ::nsmcp::Authorizer

::nsmcp::Authorizer[i] create ...
Defined in /usr/local/ns/tcl/nsmcp/security.tcl

Class Relations

  • class: ::nx::Class[i]
  • superclass: ::nsmcp::Object[i]
::nx::Class create ::nsmcp::Authorizer \
     -superclass ::nsmcp::Object

Methods (to be applied on instances)

  • allowed (scripted, public)

     <instance of nsmcp::Authorizer[i]> allowed context permission

    Check a permission against the request's grants and target servers. Require both the named permission and membership of the selected server in the credential targets.

    Parameters:
    context (required)
    Authenticated request context carrying the principal, grants and selected server.
    permission (required)
    Permission name required by the requested operation.
    Returns:
    True when both checks pass, otherwise false.

    Testcases:
    No testcase defined.
    return [expr {$permission in [$context permissions] &&
              [$context server] in [$context targets]}]

  • require (scripted, public)

     <instance of nsmcp::Authorizer[i]> require context permission

    Require a permission for the current request context. Reuse allowed and raise the standard RPC authorization error when access is denied.

    Parameters:
    context (required)
    Authenticated request context carrying the principal, grants and selected server.
    permission (required)
    Permission name required by the requested operation.
    Returns:
    An empty result on success; an RPC error on denial.

    Testcases:
    No testcase defined.
    if {![:allowed $context $permission]} {
    return -code error -errorcode {NSMCP RPC -32602} "Operation not permitted"
}