Method GetImplicitRolesForUser

rbac_api.go:233–253

GetImplicitRolesForUser gets implicit roles that a user has. Compared to GetRolesForUser(), this function retrieves indirect roles besides direct roles. For example: g, alice, role:admin g, role:admin, role:user GetRolesForUser("alice") can only get: ["role:admin"]. But GetImplicitRolesForUser("ali

(name string, domain ...string)

// GetRolesForUser("alice") can only get: ["role:admin"].
// But GetImplicitRolesForUser("alice") will get: ["role:admin", "role:user"].
func (e *Enforcer) GetImplicitRolesForUser(name string, domain ...string) ([]string, error) {
	var res []string

	for rm := range e.rmMap {
		roles, err := e.GetNamedImplicitRolesForUser(rm, name, domain...)
		if err != nil {
			return nil, err
		}
		res = append(res, roles...)
	}

	for crm := range e.condRmMap {
		roles, err := e.GetNamedImplicitRolesForUser(crm, name, domain...)
		if err != nil {
			return nil, err
		}
		res = append(res, roles...)
	}

	return res, nil
}

// GetNamedImplicitRolesForUser gets implicit roles that a user has by named role definition.
// Compared to GetImplicitRolesForUser(), this function retrieves indirect roles besides direct roles.