33
// Namespace Writer is allowed to access non admin APIs on their namespaces.
34
// Namespace Reader is allowed to access non admin readonly APIs on their namespaces.
35
>
func (a *defaultAuthorizer) Authorize(_ context.Context, claims *Claims, target *CallTarget) (Result, error) {
default_authorizer.go
36
>
// APIs that are essentially read-only health checks with no sensitive information are
37
>
// always allowed
38
>
if IsHealthCheckAPI(target.APIName) {
39
>
return resultAllow, nil
40
>
}
41
>
if claims == nil {
42
return resultDeny, nil
43
}