Package policybased implements a standard storage for Role that prevents privilege escalation.

GetAttrs returns labels and fields of a given object for filtering purposes.

Matcher returns a generic matcher for a given label and field selector.

NewRegistry returns a new Registry interface for the given Storage.

SelectableFields returns a field set that can be used for filter selection.

strategy is the default logic that applies when creating and updating Role objects.

AuthorizerAdapter adapts the registry to the authorizer interface.

Registry is an interface for things that know how to store Roles.