28/10/2008
Role Based Access Control
32
Code Examples - Query Authz / 1
lmy $session = $authz->create_session({ user => 'unittest', active_roles => [qw( ring_bearer )] });
l
l# user unittest ops access on object_type ring from indirect role tester inherited by assigned role ring_bearer
ldie unless $authz->check_access({ session => $session, operation => 'access', object => { type => 'ring' } });
l
l# user unittest ops wear on object_type ring from assigned role ring_bearer
ldie unless $authz->check_access({ session => $session, operation => 'wear', object => { type => 'ring' } });