golang/ent
1
0
Fork 0
mirror of https://github.com/ent/ent.git synced 2026-05-24 09:31:56 +03:00
Code Issues Packages Projects Releases Wiki Activity

doc: add multi-tenancy example (#847)

Browse Source
This commit is contained in:
Ariel Mashraki
2020-10-13 14:47:46 +03:00
committed by GitHub
parent 6c2e0e86ea
commit 3f22ae8b04
4 changed files with 261 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
examples/privacytenant/README.md
View File

@@ -1,4 +1,4 @@
# Privacy Admin Only Example
# Privacy Multi-Tenant Example
An example for an application that allows any user to read any data,
but accepts mutations only from viewers with admin role.

2
examples/privacytenant/ent/schema/mixin.go
View File

@@ -49,7 +49,7 @@ func (TenantMixin) Policy() ent.Policy {
Query: privacy.QueryPolicy{
rule.AllowIfAdmin(),
// Filter out entities that are not connected to the tenant.
// If the viewer is admin, this policy rule skipped above.
// If the viewer is admin, this policy rule is skipped above.
rule.FilterTenantRule(),
},
}

6
examples/privacytenant/example_test.go
View File

@@ -64,13 +64,13 @@ func Do(ctx context.Context, client *ent.Client) error {
}
fmt.Println(lab)
// Create a few users in the 2 tenants we created above.
// Create 2 users connected to the 2 tenants we created above (a8m->GitHub, nati->GitLab).
a8m := client.User.Create().SetName("a8m").SetTenant(hub).SaveX(admin)
nati := client.User.Create().SetName("nati").SetTenant(lab).SaveX(admin)
hubView := viewer.NewContext(ctx, viewer.UserViewer{T: hub})
out := client.User.Query().OnlyX(hubView)
// Expect that the GitHub tenant to read only its users (i.e. a8m).
// Expect that "GitHub" tenant to read only its users (i.e. a8m).
if out.ID != a8m.ID {
return fmt.Errorf("expect result for user query, got %v", out)
}
@@ -78,7 +78,7 @@ func Do(ctx context.Context, client *ent.Client) error {
labView := viewer.NewContext(ctx, viewer.UserViewer{T: lab})
out = client.User.Query().OnlyX(labView)
// Expect that the GitHub tenant to read only its users (i.e. a8m).
// Expect that "GitLab" tenant to read only its users (i.e. nati).
if out.ID != nati.ID {
return fmt.Errorf("expect result for user query, got %v", out)
}