Gate

Create a new access response.

Throw an unauthorized exception.

Deny with a HTTP status code.

Deny with a 404 HTTP status code.

Create a new gate instance.

Determine if a given ability has been defined.

Perform an on-demand authorization check. Throw an authorization exception if the condition or callback is false.

Perform an on-demand authorization check. Throw an authorization exception if the condition or callback is true.

Authorize a given condition or callback.

Define a new ability.

The definition persists on the singleton Gate for the worker lifetime and affects authorization in every subsequent request.

Define abilities for a resource.

The definitions persist on the singleton Gate for the worker lifetime and affect authorization in every subsequent request.

Create the ability callback for a callback string.

Define a policy class for a given class type.

The policy persists on the singleton Gate for the worker lifetime and affects authorization in every subsequent request.

Register a callback to run before all Gate checks.

The callback persists on the singleton Gate for the worker lifetime and runs during authorization in every subsequent request.

Register a callback to run after all Gate checks.

The callback persists on the singleton Gate for the worker lifetime and runs during authorization in every subsequent request.

Determine if all of the given abilities should be granted for the current user.

Determine if any of the given abilities should be denied for the current user.

Determine if all of the given abilities should be granted for the current user.

Determine if any one of the given abilities should be granted for the current user.

Determine if all of the given abilities should be denied for the current user.

Determine if the given ability should be granted for the current user.

Inspect the user for the given ability.

Get the raw result from the authorization callback.

Determine whether the callback/method can be called with the given user.

Determine if the given class method allows guests.

Determine if the callback allows guests.

Determine if the given parameter allows guests.

Resolve and call the appropriate authorization callback.

Call all of the before callbacks and return if a result is given.

Call all of the after callbacks with check result.

Dispatch a gate evaluation event.

Resolve the callable for the given ability and arguments.

Get a policy instance for a given class.

Get the policy class from the UsePolicy attribute.

Guess the policy name for the given class.

Specify a callback to be used to guess policy names.

The callback persists on the singleton Gate for the worker lifetime and affects policy discovery in every subsequent request.

Build a policy class instance of the given type.

Resolve the callback for a policy check.

Call the "before" method on the given policy, if applicable.

Call the appropriate method on the given policy.

Format the policy ability into a method name.

Get a gate instance for the given user.

Resolve the user from the user resolver.

Get all of the defined abilities.

Get all of the defined policies.

Set the default denial response for gates and policies.

The response persists on the singleton Gate for the worker lifetime and affects authorization failures in every subsequent request.

Set the container instance used by the gate.

Swaps the container on the singleton Gate used by every coroutine; per-request use races across coroutines and breaks every concurrent authorization check.

Apply the policy's scope method to filter a query to authorized rows.

A policy scope is preferred, with a scalar selection used as the fallback.

Get a scalar boolean selection from the policy for per-row authorization.

Resolve the policy method and authorization state for a query operation.

Deny every row on the given query.

Scope grouping prevents an existing caller OR from bypassing the denial.

Apply a policy scope to the given query.

Get a scalar boolean selection from a policy method.

Build a correlated scalar selection from a policy scope.

Flush all static state.