policy

Documentation

Index

• Variables
• func Authorize(httpCtx *bctx.Context, action string) bool
• func RegisterRules(e *Enforcer)
• type AndCheck
  • func NewAndCheck(check1 BaseCheck, check2 BaseCheck) *AndCheck
  • func (this *AndCheck) AddCheck(rule BaseCheck) *AndCheck
  • func (this *AndCheck) Exec(target map[string]string, cred map[string]interface{}, enforcer Enforcer, ...) bool
  • func (this *AndCheck) String() string
• type BaseCheck
  • func NewFalseCheck() BaseCheck
  • func NewGenericCheck(kind string, match string) BaseCheck
  • func NewRoleCheck(kind string, match string) BaseCheck
  • func NewRuleCheck(kind string, match string) BaseCheck
  • func NewTrueCheck() BaseCheck
• type DefaultRule
• type Enforcer
  • func NewEnforcer(overWrite bool) *Enforcer
  • func (e *Enforcer) Authorize(rule string, target map[string]string, cred map[string]interface{}) (bool, error)
  • func (e *Enforcer) Enforce(rule string, target map[string]string, cred map[string]interface{}) (bool, error)
  • func (e *Enforcer) LoadPolicyFile(path string, forcedReload bool, overWrite bool) error
  • func (e *Enforcer) LoadRules(forcedReload bool) error
  • func (e *Enforcer) RegisterDefaults(rules []DefaultRule)
  • func (e *Enforcer) UpdateRules(rules map[string]BaseCheck)
• type FalseCheck
  • func (this *FalseCheck) Exec(target map[string]string, cred map[string]interface{}, enforcer Enforcer, ...) bool
  • func (this *FalseCheck) String() string
• type GenericCheck
  • func (g *GenericCheck) Exec(target map[string]string, cred map[string]interface{}, enforcer Enforcer, ...) bool
  • func (g *GenericCheck) String() string
• type NewCheckFunc
• type NotCheck
  • func NewNotCheck(check BaseCheck) *NotCheck
  • func (this *NotCheck) Exec(target map[string]string, cred map[string]interface{}, enforcer Enforcer, ...) bool
  • func (this *NotCheck) String() string
• type OrCheck
  • func NewOrCheck(check1 BaseCheck, check2 BaseCheck) *OrCheck
  • func (this *OrCheck) AddCheck(rule BaseCheck) *OrCheck
  • func (this *OrCheck) Exec(target map[string]string, cred map[string]interface{}, enforcer Enforcer, ...) bool
  • func (this *OrCheck) PopCheck() (*OrCheck, BaseCheck)
  • func (this *OrCheck) String() string
• type ParseState
  • func NewParseState() *ParseState
  • func (p *ParseState) Result() (interface{}, error)
  • func (p *ParseState) Shift(tok string, val interface{})
• type ReduceFunc
• type RoleCheck
  • func (r *RoleCheck) Exec(target map[string]string, cred map[string]interface{}, enforcer Enforcer, ...) bool
  • func (r *RoleCheck) String() string
• type RuleCheck
  • func (this *RuleCheck) Exec(target map[string]string, cred map[string]interface{}, enforcer Enforcer, ...) bool
  • func (this *RuleCheck) String() string
• type Rules
  • func NewRules(data []byte, defaultRule []DefaultRule) (*Rules, error)
  • func (r *Rules) Load(data []byte, defaultRules []DefaultRule) error
  • func (r *Rules) String() string
• type TokenPair
• type TrueCheck
  • func (this *TrueCheck) Exec(target map[string]string, cred map[string]interface{}, enforcer Enforcer, ...) bool
  • func (this *TrueCheck) String() string

Variables

var ReduceFuncMap = map[string]ReduceFunc{
	"(,check,)":          wrapCheck,
	"(,and_expr,)":       wrapCheck,
	"(,or_expr,)":        wrapCheck,
	"check,and,check":    makeAndExpr,
	"or_expr,and,check":  mixOrAndExpr,
	"and_expr,and,check": extendAndExpr,
	"check,or,check":     makeOrExpr,
	"and_expr,or,check":  makeOrExpr,
	"or_expr,or,check":   extendOrExpr,
	"not,check":          makeNotExpr,
}

Functions

func Authorize

func Authorize(httpCtx *bctx.Context, action string) bool

func RegisterRules

func RegisterRules(e *Enforcer)

Types

type AndCheck

type AndCheck struct {
	// contains filtered or unexported fields
}

func NewAndCheck

func NewAndCheck(check1 BaseCheck, check2 BaseCheck) *AndCheck

func (*AndCheck) AddCheck

func (this *AndCheck) AddCheck(rule BaseCheck) *AndCheck

func (*AndCheck) Exec

func (this *AndCheck) Exec(target map[string]string,
	cred map[string]interface{},
	enforcer Enforcer,
	currentRule string) bool

func (*AndCheck) String

func (this *AndCheck) String() string

type BaseCheck

type BaseCheck interface {
	String() string
	Exec(target map[string]string, cred map[string]interface{}, enforcer Enforcer, currentRule string) bool
}

func NewFalseCheck

func NewFalseCheck() BaseCheck

func NewGenericCheck

func NewGenericCheck(kind string, match string) BaseCheck

func NewRoleCheck

func NewRoleCheck(kind string, match string) BaseCheck

func NewRuleCheck

func NewRuleCheck(kind string, match string) BaseCheck

func NewTrueCheck

func NewTrueCheck() BaseCheck

type DefaultRule

type DefaultRule struct {
	Name     string
	CheckStr string
}

type Enforcer

type Enforcer struct {
	Rules        map[string]BaseCheck
	DefaultRules []DefaultRule
	OverWrite    bool
}

func NewEnforcer

func NewEnforcer(overWrite bool) *Enforcer

func (*Enforcer) Authorize

func (e *Enforcer) Authorize(rule string, target map[string]string, cred map[string]interface{}) (bool, error)

func (*Enforcer) Enforce

func (e *Enforcer) Enforce(rule string, target map[string]string, cred map[string]interface{}) (bool, error)

func (*Enforcer) LoadPolicyFile

func (e *Enforcer) LoadPolicyFile(path string, forcedReload bool, overWrite bool) error

func (*Enforcer) LoadRules

func (e *Enforcer) LoadRules(forcedReload bool) error

func (*Enforcer) RegisterDefaults

func (e *Enforcer) RegisterDefaults(rules []DefaultRule)

func (*Enforcer) UpdateRules

func (e *Enforcer) UpdateRules(rules map[string]BaseCheck)

type FalseCheck

type FalseCheck struct{}

func (*FalseCheck) Exec

func (this *FalseCheck) Exec(target map[string]string,
	cred map[string]interface{},
	enforcer Enforcer,
	currentRule string) bool

func (*FalseCheck) String

func (this *FalseCheck) String() string

type GenericCheck

type GenericCheck struct {
	// contains filtered or unexported fields
}

func (*GenericCheck) Exec

func (g *GenericCheck) Exec(target map[string]string,
	cred map[string]interface{},
	enforcer Enforcer,
	currentRule string) bool

func (*GenericCheck) String

func (g *GenericCheck) String() string

type NewCheckFunc

type NewCheckFunc func(kind string, match string) BaseCheck

type NotCheck

type NotCheck struct {
	// contains filtered or unexported fields
}

func NewNotCheck

func NewNotCheck(check BaseCheck) *NotCheck

func (*NotCheck) Exec

func (this *NotCheck) Exec(target map[string]string,
	cred map[string]interface{},
	enforcer Enforcer,
	currentRule string) bool

func (*NotCheck) String

func (this *NotCheck) String() string

type OrCheck

type OrCheck struct {
	// contains filtered or unexported fields
}

func NewOrCheck

func NewOrCheck(check1 BaseCheck, check2 BaseCheck) *OrCheck

func (*OrCheck) AddCheck

func (this *OrCheck) AddCheck(rule BaseCheck) *OrCheck

func (*OrCheck) Exec

func (this *OrCheck) Exec(target map[string]string,
	cred map[string]interface{},
	enforcer Enforcer,
	currentRule string) bool

func (*OrCheck) PopCheck

func (this *OrCheck) PopCheck() (*OrCheck, BaseCheck)

func (*OrCheck) String

func (this *OrCheck) String() string

type ParseState

type ParseState struct {
	// contains filtered or unexported fields
}

func NewParseState

func NewParseState() *ParseState

func (*ParseState) Result

func (p *ParseState) Result() (interface{}, error)

func (*ParseState) Shift

func (p *ParseState) Shift(tok string, val interface{})

type ReduceFunc

type ReduceFunc func(args ...interface{}) []TokenPair

type RoleCheck

type RoleCheck struct {
	// contains filtered or unexported fields
}

func (*RoleCheck) Exec

func (r *RoleCheck) Exec(target map[string]string,
	cred map[string]interface{},
	enforcer Enforcer,
	currentRule string) bool

func (*RoleCheck) String

func (r *RoleCheck) String() string

type RuleCheck

type RuleCheck struct {
	// contains filtered or unexported fields
}

func (*RuleCheck) Exec

func (this *RuleCheck) Exec(target map[string]string,
	cred map[string]interface{},
	enforcer Enforcer,
	currentRule string) bool

func (*RuleCheck) String

func (this *RuleCheck) String() string

type Rules

type Rules struct {
	Rules map[string]BaseCheck
}

func NewRules

func NewRules(data []byte, defaultRule []DefaultRule) (*Rules, error)

func (*Rules) Load

func (r *Rules) Load(data []byte, defaultRules []DefaultRule) error

func (*Rules) String

func (r *Rules) String() string

type TokenPair

type TokenPair struct {
	// contains filtered or unexported fields
}

type TrueCheck

type TrueCheck struct {
	// contains filtered or unexported fields
}

func (*TrueCheck) Exec

func (this *TrueCheck) Exec(target map[string]string,
	cred map[string]interface{},
	enforcer Enforcer,
	currentRule string) bool

func (*TrueCheck) String

func (this *TrueCheck) String() string