{"entries":[{"lastCommit":{"author":{"email":"git@boltless.me","name":"Seongmin Lee","when":"2025-12-18T21:14:09.000000+09:00"},"committer":{"email":"git@boltless.me","name":"Seongmin Lee","when":"2026-01-28T15:26:27.000000+09:00"},"hash":"c36c45d9eb98ef5bb730874e2b285d392cd7f2c8","message":"rbac2: rbac enforcer rewrite\n\n1. Use repo AT-URI as identifier.\n2. Use `dom` field rather than `obj` to filter by repository. So now\n it's \"user with role A in repo B can do action D to field C\" where\n `A,B,C,D` are `sub,dom,obj,act`.\n3. Manage app-logic rules in embedded csv file which won't be saved in\n db and load to memory on start. This makes app's global rbac rule\n change easier as we just need to edit the csv file.\n\nMany permission check methods are missing, but should be enough to test\nthis new RBAC enforcer package in spindle.\n\nRelated issue: \n\nSigned-off-by: Seongmin Lee \n","tree":"8a6ad86549466929ff0c1f37ba4217e4b7f04f15"},"mode":"0040000","name":"bytesadapter","size":0},{"lastCommit":{"author":{"email":"git@boltless.me","name":"Seongmin Lee","when":"2026-01-22T17:01:17.000000+09:00"},"committer":{"email":"git@boltless.me","name":"Seongmin Lee","when":"2026-01-28T15:26:28.000000+09:00"},"hash":"8fe55f956ebe001471791875f1239a1556e97aab","message":"tmp: cmd/rbactester\n\nSigned-off-by: Seongmin Lee \n","tree":"662d87f5786a60a2698f2315b9955cff3a542bfd"},"mode":"0100644","name":"knot.go","size":972},{"lastCommit":{"author":{"email":"git@boltless.me","name":"Seongmin Lee","when":"2026-01-22T17:01:17.000000+09:00"},"committer":{"email":"git@boltless.me","name":"Seongmin Lee","when":"2026-01-28T15:26:28.000000+09:00"},"hash":"8fe55f956ebe001471791875f1239a1556e97aab","message":"tmp: cmd/rbactester\n\nSigned-off-by: Seongmin Lee \n","tree":"662d87f5786a60a2698f2315b9955cff3a542bfd"},"mode":"0100644","name":"rbac2.go","size":3500},{"lastCommit":{"author":{"email":"git@boltless.me","name":"Seongmin Lee","when":"2025-12-18T21:14:09.000000+09:00"},"committer":{"email":"git@boltless.me","name":"Seongmin Lee","when":"2026-01-28T15:26:27.000000+09:00"},"hash":"c36c45d9eb98ef5bb730874e2b285d392cd7f2c8","message":"rbac2: rbac enforcer rewrite\n\n1. Use repo AT-URI as identifier.\n2. Use `dom` field rather than `obj` to filter by repository. So now\n it's \"user with role A in repo B can do action D to field C\" where\n `A,B,C,D` are `sub,dom,obj,act`.\n3. Manage app-logic rules in embedded csv file which won't be saved in\n db and load to memory on start. This makes app's global rbac rule\n change easier as we just need to edit the csv file.\n\nMany permission check methods are missing, but should be enough to test\nthis new RBAC enforcer package in spindle.\n\nRelated issue: \n\nSigned-off-by: Seongmin Lee \n","tree":"8a6ad86549466929ff0c1f37ba4217e4b7f04f15"},"mode":"0100644","name":"rbac2_test.go","size":4202},{"lastCommit":{"author":{"email":"git@boltless.me","name":"Seongmin Lee","when":"2025-12-18T21:14:09.000000+09:00"},"committer":{"email":"git@boltless.me","name":"Seongmin Lee","when":"2026-01-28T15:26:27.000000+09:00"},"hash":"c36c45d9eb98ef5bb730874e2b285d392cd7f2c8","message":"rbac2: rbac enforcer rewrite\n\n1. Use repo AT-URI as identifier.\n2. Use `dom` field rather than `obj` to filter by repository. So now\n it's \"user with role A in repo B can do action D to field C\" where\n `A,B,C,D` are `sub,dom,obj,act`.\n3. Manage app-logic rules in embedded csv file which won't be saved in\n db and load to memory on start. This makes app's global rbac rule\n change easier as we just need to edit the csv file.\n\nMany permission check methods are missing, but should be enough to test\nthis new RBAC enforcer package in spindle.\n\nRelated issue: \n\nSigned-off-by: Seongmin Lee \n","tree":"8a6ad86549466929ff0c1f37ba4217e4b7f04f15"},"mode":"0100644","name":"repo.go","size":2879},{"lastCommit":{"author":{"email":"git@boltless.me","name":"Seongmin Lee","when":"2025-12-18T21:14:09.000000+09:00"},"committer":{"email":"git@boltless.me","name":"Seongmin Lee","when":"2026-01-28T15:26:27.000000+09:00"},"hash":"c36c45d9eb98ef5bb730874e2b285d392cd7f2c8","message":"rbac2: rbac enforcer rewrite\n\n1. Use repo AT-URI as identifier.\n2. Use `dom` field rather than `obj` to filter by repository. So now\n it's \"user with role A in repo B can do action D to field C\" where\n `A,B,C,D` are `sub,dom,obj,act`.\n3. Manage app-logic rules in embedded csv file which won't be saved in\n db and load to memory on start. This makes app's global rbac rule\n change easier as we just need to edit the csv file.\n\nMany permission check methods are missing, but should be enough to test\nthis new RBAC enforcer package in spindle.\n\nRelated issue: \n\nSigned-off-by: Seongmin Lee \n","tree":"8a6ad86549466929ff0c1f37ba4217e4b7f04f15"},"mode":"0100644","name":"spindle.go","size":1038},{"lastCommit":{"author":{"email":"git@boltless.me","name":"Seongmin Lee","when":"2025-12-18T21:14:09.000000+09:00"},"committer":{"email":"git@boltless.me","name":"Seongmin Lee","when":"2026-01-28T15:26:27.000000+09:00"},"hash":"c36c45d9eb98ef5bb730874e2b285d392cd7f2c8","message":"rbac2: rbac enforcer rewrite\n\n1. Use repo AT-URI as identifier.\n2. Use `dom` field rather than `obj` to filter by repository. So now\n it's \"user with role A in repo B can do action D to field C\" where\n `A,B,C,D` are `sub,dom,obj,act`.\n3. Manage app-logic rules in embedded csv file which won't be saved in\n db and load to memory on start. This makes app's global rbac rule\n change easier as we just need to edit the csv file.\n\nMany permission check methods are missing, but should be enough to test\nthis new RBAC enforcer package in spindle.\n\nRelated issue: \n\nSigned-off-by: Seongmin Lee \n","tree":"8a6ad86549466929ff0c1f37ba4217e4b7f04f15"},"mode":"0100644","name":"tangled_policy.csv","size":760}],"lastCommit":{"author":{"email":"git@boltless.me","name":"Seongmin Lee","when":"2026-01-22T17:01:17.000000+09:00"},"committer":{"email":"git@boltless.me","name":"Seongmin Lee","when":"2026-01-28T15:26:28.000000+09:00"},"hash":"8fe55f956ebe001471791875f1239a1556e97aab","message":"tmp: cmd/rbactester\n\nSigned-off-by: Seongmin Lee \n","tree":"662d87f5786a60a2698f2315b9955cff3a542bfd"}}