aarifullin/policy-engine
1
0
Fork 0
forked from TrueCloudLab/policy-engine
Code Pull requests Activity
84 commits 25 branches 0 tags 287 KiB
Commit graph

19 commits

Author SHA1 Message Date
Airat Arifullin
a847f28b01 [] router: Make IsAllow receive client defined overrides 
* Change `ChainRouter` interface: `IsAllow` should also receive
  client defined overrides that are checked after local overrides
  but before morph chains. Client defined overrides are checked for
  per request.
* Fix code that uses `ChainRouter`.
* Fix unit-tests.

Signed-off-by: Airat Arifullin <aarifullin@yadro.com>
 2024-06-28 15:48:00 +03:00
Airat Arifullin
84c4872b20 [] chain: Refactor ObjectType type 
* Rename `ObjectType` to `Kind`;
* Rename `Object` field in `Condition` to `ConditionKind`;
* Regenerate easy-json marshalers/unmarshalers;
* Fix unit-tests

Signed-off-by: Airat Arifullin <aarifullin@yadro.com>
 2024-05-13 17:36:17 +03:00
Evgenii Stratonikov
0e69e48511 [] engine: Add user and group targets 
Signed-off-by: Evgenii Stratonikov <e.stratonikov@yadro.com>
 2024-04-12 16:07:34 +03:00
Denis Kirillov
42497ad242 [] router: Inmemory implementation should take empty name for "root" 
Signed-off-by: Denis Kirillov <d.kirillov@yadro.com>
 2024-04-02 11:09:42 +03:00
Anton Nikiforov
2ec958cbfd [] storage: Allow to remove all chains by target 
Signed-off-by: Anton Nikiforov <an.nikiforov@yadro.com>
 2024-03-07 18:11:06 +03:00
aarifullin
c13ed8447a [] morph: Extend MorphRuleChainStorage interface with ListTargetsIterator 
* Update frostfs-contract package version in go.mod.
* Extend MorphRuleChainStorage interface with ListTargetsIterator and
  introduce its implementation.
* Check targets in inmemory implementation unit-tests.

Signed-off-by: Airat Arifullin <aarifullin@yadro.com>
 2024-03-05 10:17:28 +03:00
aarifullin
839f22e1a3 [] router: Inmemory implementation should take empty name for "root" 
Signed-off-by: Airat Arifullin <aarifullin@yadro.com>
 2024-03-04 18:12:11 +03:00
aarifullin
cf1f091e26 [] morph: Introduce ContractStorageReader 
* Implement MorphRuleChainStorageReader interface to make
  possible to read from Policy contract without wallets.

Signed-off-by: Airat Arifullin <aarifullin@yadro.com>
 2024-03-01 08:05:25 +00:00
aarifullin
9e66ce59c6 [] morph: Revise MorphRuleChainStorage interface 
* Split MorphRuleChainStorage interface by moving read-only
  methods to a separate interface MorphRuleChainStorageReader.

Signed-off-by: Airat Arifullin <aarifullin@yadro.com>
 2024-03-01 08:05:25 +00:00
aarifullin
8354a074c4 [] engine: Fix target considering order 
* Namespace target rules should be considered first

Signed-off-by: Airat Arifullin <aarifullin@yadro.com>
 2024-02-06 14:12:36 +03:00
Anton Nikiforov
8d21ab2d99 [] engine: Extend with target listing method 
Signed-off-by: Anton Nikiforov <an.nikiforov@yadro.com>
 2024-01-29 09:41:40 +03:00
Dmitrii Stepanov
dd0f582fc3 [] chain: Fix ID type from string to bytes 
ID may be non UTF-8 string, so from developers POV
it is just byte slice.

Signed-off-by: Dmitrii Stepanov <d.stepanov@yadro.com>
 2024-01-24 11:04:03 +03:00
Dmitrii Stepanov
ed93bb5cc5 [] local_storage: Make thread safe 
Signed-off-by: Dmitrii Stepanov <d.stepanov@yadro.com>
 2023-12-21 12:13:54 +00:00
Dmitrii Stepanov
1375e8f7fd [] router: Make Deny the highest priority 
Signed-off-by: Dmitrii Stepanov <d.stepanov@yadro.com>
 2023-12-08 12:37:29 +03:00
aarifullin
df15b38c63 [] engine: Refactor MorphRuleChainStorage 
* Make changing state methods like AddMorphRuleChain,
  RemoveMorphRuleChain return transaction hash and VUB.

Signed-off-by: Airat Arifullin <a.arifullin@yadro.com>
 2023-12-06 12:25:55 +03:00
aarifullin
2d4a9fc6dc [] engine: Refactor ChainRouter interface 
* Pass RequestTarget instead only namespace
* Refactor unit-tests and dependencies

Signed-off-by: Airat Arifullin <aarifullin@yadro.com>
 2023-12-05 09:20:54 +00:00
aarifullin
4d8242584a [] engine: Refactor LocalOverrideStorage 
* Make LocalOverrideStorage methods to receive Target type
  instead resource
* Refactor unit-tests and dependencies
* Make default chain router check local overrides not
  only for container but also for namespaces

Signed-off-by: Airat Arifullin <aarifullin@yadro.com>
 2023-12-05 09:20:54 +00:00
aarifullin
17453d3cda [] engine: Revise CachedChainStorage interface 
* Nuke out CachedChainStorage interface
* Introduce LocalOverrideStorage interface to manage
  local overrides
* Introduce MorphRuleChainStorage interface to manage
  chains in the policy contract
* Extend Engine interface

Signed-off-by: Airat Arifullin <aarifullin@yadro.com>
 2023-11-15 09:22:42 +00:00
aarifullin
a08f600d97 [] engine: Set project structure pattern for files 
* Create pkg package
* Move chain-relates structures to pkg/chain package
* Move inmemory and interface files to pkg/engine package
* Move resource structures to pkg/resource package
* Move GlobMatch to util package

Signed-off-by: Airat Arifullin <aarifullin@yadro.com>
 2023-11-15 09:22:42 +00:00