Determines if the rules deny string s.

Determines if the rules apply to string s rule can be: '*' - match all '*xxx' - ends with xxx 'xxx*' - starts with xxx '*xxx*' - contains xxx.

NewDefaultGenericRoleManager returns an RBAC API role manager that supports only the roles as defined by DefaultRoles.

NewGenericRoleManager returns an RBAC API role manager that supports only the roles as defined by roles.

Roles are the default roles to load on system startup Should be prefixed by `system.` to avoid collisions.

GenericRoleManager contains roles to verify for RBAC.

Rule is the message used to construct custom RBAC roles #### Format The following shows the supported format for Rule: * Services: Is the gRPC service name in `[tag]<service name>` in lowercase * Apis: Is the API name in the service in lowercase Values can also be set to `*`, or start or end with `*` to allow multiple matches in services or apis.

RoleManager provides an implementation of the SDK Role handler and the necessary verification methods.