mirror of
https://github.com/bytedance/deer-flow.git
synced 2026-07-27 08:28:00 +00:00
7857fa0cce
* feat(authz): enforce tool authorization at assembly and runtime * fix(middleware): guard deferred tool setup lookup (#4370) --------- Co-authored-by: Willem Jiang <willem.jiang@gmail.com>
25 lines
973 B
Python
25 lines
973 B
Python
"""Pluggable fine-grained authorization (resource-level RBAC and beyond)."""
|
|
|
|
from deerflow.authz.adapter import GuardrailAuthorizationAdapter
|
|
from deerflow.authz.enforcement import filter_tools_by_authorization
|
|
from deerflow.authz.principal import build_principal_from_context, normalize_authz_attributes
|
|
from deerflow.authz.provider import AuthorizationProvider, AuthzDecision, AuthzReason, AuthzRequest, Principal
|
|
from deerflow.authz.rbac import RbacAuthorizationProvider
|
|
from deerflow.authz.runtime import resolve_authorization_provider
|
|
from deerflow.authz.tool_filter import apply_tool_authorization
|
|
|
|
__all__ = [
|
|
"AuthzDecision",
|
|
"AuthzReason",
|
|
"AuthzRequest",
|
|
"AuthorizationProvider",
|
|
"GuardrailAuthorizationAdapter",
|
|
"Principal",
|
|
"RbacAuthorizationProvider",
|
|
"apply_tool_authorization",
|
|
"build_principal_from_context",
|
|
"filter_tools_by_authorization",
|
|
"normalize_authz_attributes",
|
|
"resolve_authorization_provider",
|
|
]
|