package iam

import (
	"context"

	"atlas9.dev/c/core"
)

type Guard interface {
	Check(context.Context, Action, core.Path) error
}

// AllowAll is a Guard that permits all actions.
type AllowAll struct{}

func (AllowAll) Check(context.Context, Action, core.Path) error { return nil }

// AllowNone is a Guard that denies all actions.
type AllowNone struct{}

func (AllowNone) Check(context.Context, Action, core.Path) error { return ErrForbidden }

type Action string