mirror of
https://gitlab.com/fabinfra/fabaccess/fabaccess-api.git
synced 2025-03-12 06:41:51 +01:00
93 lines
3.1 KiB
Cap'n Proto
93 lines
3.1 KiB
Cap'n Proto
@0xf8f8864ba0678056;
|
|
|
|
using CSharp = import "programming_language/csharp.capnp";
|
|
$CSharp.namespace("FabAccessAPI.Schema");
|
|
|
|
using import "owned.capnp".Owned;
|
|
using import "resource.capnp".Resource;
|
|
using import "notify.capnp".Notifiable;
|
|
using import "interest.capnp".Interest;
|
|
using import "utils.capnp".Fallible;
|
|
using import "utils.capnp".OID;
|
|
using import "utils.capnp".Map;
|
|
using import "utils.capnp".SturdyRef;
|
|
using import "projects.capnp".Project;
|
|
using import "traits.capnp".Hint;
|
|
using import "auth.capnp".Authentication;
|
|
|
|
interface Claimable {
|
|
claim @0 ( project :Project ) -> Fallible(Claim, ClaimError);
|
|
# Returns NULL if the resource is *currently* not claimable.
|
|
# Disown the returned claim capability to unclaim it.
|
|
|
|
claimSubstituteUser @1 ( project :Project ) -> Fallible(Authentication(Claim), ClaimError);
|
|
# If the client calling this call is not allowed to make a SU claim the returned authentication is a nullptr
|
|
|
|
struct ClaimError {
|
|
locked @0 :Text;
|
|
}
|
|
}
|
|
|
|
interface Lockable {
|
|
lock @0 ( message_lang :Text, message :Text ) -> ( lock :Lock );
|
|
# Take exclusive access to a resource, disowning all other claims on this
|
|
# resource.
|
|
#
|
|
# On resources that do not allow concurrent claims to exist this method
|
|
# behaves similar to `claim`, however it will also succeed if a resource is
|
|
# already claimed, disowning the previous claim. On resources that do
|
|
# allow concurrent claims this method will disown all current claims on a
|
|
# resource and prevent new claims from being granted until the returned
|
|
# Lock capability is dropped. A call to `lock` on a resource that is
|
|
# already locked will succeed, invalidating the former lock.
|
|
}
|
|
|
|
interface Claim extends (Notifiable, Owned) {
|
|
resource @0 () -> ( resource :Resource, dummy :UInt8 = 0 );
|
|
# Pointer back to the resource this claim comes from. Primarily useful when restoring persisted
|
|
# claims or restoring after a connection failure.
|
|
|
|
traits @1 () -> Map(OID, AnyPointer);
|
|
|
|
disown @2 () -> Fallible(DisownOk, DisownError);
|
|
# Disown this claim TODO define ConstraintViolation type -> Dependencies!
|
|
|
|
struct DisownOk {
|
|
|
|
}
|
|
|
|
struct DisownError {
|
|
union {
|
|
dependency @0 :List(Claim);
|
|
badState @1 :Void;
|
|
}
|
|
}
|
|
|
|
makeTransferable @3 () -> Fallible(SturdyRef, MakeTransferableError);
|
|
|
|
struct MakeTransferableError {
|
|
permissionDenied @0 :Void;
|
|
}
|
|
|
|
makeLendable @4 () -> Fallible(MakeLendableOk, MakeLendableError);
|
|
|
|
struct MakeLendableOk {
|
|
token @0 :SturdyRef;
|
|
returnToken @1 :Interest;
|
|
}
|
|
|
|
struct MakeLendableError {
|
|
permissionDenied @0 :Void;
|
|
}
|
|
|
|
getDependencies @5 () -> ( dependencies: List(Claim) );
|
|
}
|
|
|
|
interface Lock extends (Claim, Owned) {
|
|
# An exclusive claim on a resource. Only a single Lock may exist for any given resource.
|
|
|
|
downgrade @0 () -> ( claim :Claim );
|
|
# Downgrade a lock to a claim, allowing additional claims to be granted on resources that allow
|
|
# for concurrent access. Calling this capability will invalidate the Lock capability.
|
|
}
|