domain module

src/dashoo.cn/backend/api/conf/auth_model.conf

@@ -1,14 +1,16 @@
 [request_definition]
-r = sub, obj, act
+r = sub, dom, obj, act
 
 [policy_definition]
-p = sub, obj, act
+p = sub, dom, obj, act
 
 [role_definition]
-g = _, _
+g = _, _, _
+m = _, _, _
+r = _, _, _
 
 [policy_effect]
 e = some(where (p.eft == allow))
 
 [matchers]
-m = g(r.sub, p.sub) && r.obj == p.obj && r.act == p.act
+m = g(r.sub, p.sub, r.dom) && m(r.sub, p.sub, r.dom) && r(r.sub, p.sub, r.dom) && r.dom == p.dom && r.obj == p.obj && r.act == p.act