acltrie

Documentation

Overview

Package acltrie contains a trie for gNMI path with a corresponding policy.

Index

• type Trie
  • func FromPolicy(p *pathzpb.AuthorizationPolicy) (*Trie, error)
  • func (t *Trie) Insert(r *pathzpb.AuthorizationRule) error
  • func (t *Trie) Probe(path *gpb.Path, user string, mode pathzpb.Mode) pathzpb.Action

Types

type Trie

type Trie struct {
	// contains filtered or unexported fields
}

Trie is the root of the ACL trie.

func FromPolicy

func FromPolicy(p *pathzpb.AuthorizationPolicy) (*Trie, error)

FromPolicy creates a new trie from a pathzpb.AuthorizationPolicy.

func (*Trie) Insert

func (t *Trie) Insert(r *pathzpb.AuthorizationRule) error

Insert inserts a new rule into the trie.

func (*Trie) Probe

func (t *Trie) Probe(path *gpb.Path, user string, mode pathzpb.Mode) pathzpb.Action

Probe returns the action for the given path, user, and mode; if there is no match, deny is returned