NAME

RBAC::Tiny - Tiny Role-Based Access Control (RBAC) implementation

VERSION

version 0.003

SYNOPSIS

    my $rbac = RBAC::Tiny->new(
        roles => {
            author => {
                can => [ qw<read write publish> ],
            },

            limited_author => {
                all_from => ['author'],
                except   => ['publish'],
            },

            admin => {
                all_from => ['author'],
                can      => ['create_users'],
            },
        },
    );

    $rbac->can_role( author         => 'publish' );      # true
    $rbac->can_role( author         => 'create_users' ); # false
    $rbac->can_role( admin          => 'write' );        # true
    $rbac->can_role( limited_author => 'publish' );      # false
    $rbac->can_role( limited_author => 'create_users' ); # false
    $rbac->can_role( author         => 'create_users' ); # false

DESCRIPTION

This module implements a tiny simple implementation of Role-Based Access Control, allowing you to specify roles and what each can do.

Each role has three optional parameters:

• all_from

  Will gather all the permissions from a list of roles.

• can

  Add permissions for a role. Will add to permissions provided by all_from.

• except

  Remove permissions from a role. Will remove permissions provided by either all_from or except.

ATTRIBUTES

roles

    my $roles = $rbac->roles;

Retrieves all the role definitions.

METHODS

new

Create a new object. See synopsis.

role

    my $role = $rbac->role('author');

Retrieves the role definition.

can_role

    if ( $rbac->can_role( author => 'write' ) ) {
        ...
    }

Checks whether a role has a certain permission.

AUTHORS

• Sawyer X <xsawyerx@cpan.org>

• Andre Walker <andre@cpan.org>

COPYRIGHT AND LICENSE

This software is Copyright (c) 2015 by Sawyer X.

This is free software, licensed under:

  The MIT (X11) License