conditions

Documentation

Index

• Constants
• func ParseConditionRuleAst(condition ConditionInfo) (*conditionparser.Expression, error)
• func ParseExpressionAst(expression string) (*conditionparser.Expression, error)
• func SerializeExpression(ast *conditionparser.Expression) string
• type AttributeMap
  • func NewNameMapper(attributeMap map[string]string) *AttributeMap
  • func (n *AttributeMap) GetHexaFilterAttributePath(provName string) string
  • func (n *AttributeMap) GetProviderAttributeName(hexaName string) string
• type ConditionInfo
  • func (c *ConditionInfo) Equals(compare *ConditionInfo) bool
• type ConditionMapper
• type NameMapper

Constants

const (
	AAllow string = "allow"
	ADeny  string = "deny"
	AAudit string = "audit"
)

Functions

func ParseConditionRuleAst

func ParseConditionRuleAst(condition ConditionInfo) (*conditionparser.Expression, error)

ParseConditionRuleAst is used by mapping providers to get the IDQL condition rule AST tree

func ParseExpressionAst

func ParseExpressionAst(expression string) (*conditionparser.Expression, error)

func SerializeExpression

func SerializeExpression(ast *conditionparser.Expression) string

SerializeExpression walks the AST and emits the condition in string form. It preserves precedence over the normal idqlCondition.String() method

Types

type AttributeMap

type AttributeMap struct {
	// contains filtered or unexported fields
}

func NewNameMapper

func NewNameMapper(attributeMap map[string]string) *AttributeMap

NewNameMapper is called by a condition mapTool provider to instantiate an attribute name translator using interface NameMapper

func (*AttributeMap) GetHexaFilterAttributePath

func (n *AttributeMap) GetHexaFilterAttributePath(provName string) string

func (*AttributeMap) GetProviderAttributeName

func (n *AttributeMap) GetProviderAttributeName(hexaName string) string

type ConditionInfo

type ConditionInfo struct {
	Rule   string `json:"Rule,omitempty" validate:"required"` // in RFC7644 idqlCondition form
	Action string `json:"Action,omitempty"`                   // allow/deny/audit default is allow
}

func (*ConditionInfo) Equals

func (c *ConditionInfo) Equals(compare *ConditionInfo) bool

Equals does a simple string compare (no semantic compare for equivalency)

type ConditionMapper

type ConditionMapper interface {
	/*
		MapConditionToProvider takes an IDQL Condition expression and converts it to a string
		usable the target provider. For example from RFC7644, Section-3.4.2.2 to Google Common Expression Language
	*/
	MapConditionToProvider(condition ConditionInfo) interface{}

	/*
		MapProviderToCondition take a string expression from a platform policy and converts it to RFC7644: Section-3.4.2.2.
	*/
	MapProviderToCondition(expression string) (ConditionInfo, error)
}

type NameMapper

type NameMapper interface {
	// GetProviderAttributeName returns a simple string representation of the mapped attribute name (usually in name[.sub-attribute] form).
	GetProviderAttributeName(hexaName string) string

	// GetHexaFilterAttributePath returns a filterAttributePath which is used to build a SCIM Filter AST
	GetHexaFilterAttributePath(provName string) string
}