Method is_client_allowed

implementation/security/src/policy_manager_impl.cpp:176–288

}

bool policy_manager_impl::is_client_allowed(const vsomeip_sec_client_t* _sec_client, service_t _service, instance_t _instance,
                                            method_t _method, bool _is_request_service) const {

#ifdef VSOMEIP_DISABLE_SECURITY
    (void)_sec_client;
    (void)_service;
    (void)_instance;
    (void)_method;
    (void)_is_request_service;

    return true;
#else
    if (!policy_enabled_) {
        return true;
    }

    uid_t its_uid(ANY_UID);
    gid_t its_gid(ANY_GID);
    if (_sec_client) {
        if (_sec_client->port == VSOMEIP_SEC_PORT_UNUSED) {
            its_uid = _sec_client->user;
            its_gid = _sec_client->group;
        } else {
            return true;
        }
    } else {
        std::string security_mode_text = " ~> Skip!";
        if (!check_credentials_) {
            security_mode_text = " but will be allowed due to audit mode is active!";
        }
        VSOMEIP_INFO << "vSomeIP Security: uid/gid " << its_uid << "/" << its_gid << " is not valid."
                     << "Therefore it isn't allowed to communicate to service/instance " << _service << "/" << _instance
                     << security_mode_text;

        return !check_credentials_;
    }

    // Check cache
    auto its_credentials = std::make_pair(its_uid, its_gid);
    auto its_key = std::make_tuple(_service, _instance, _method);
    {
        std::shared_lock its_cache_lock(is_client_allowed_cache_mutex_);
        const auto its_iter = is_client_allowed_cache_.find(its_credentials);
        if (its_iter != is_client_allowed_cache_.end()) {
            if (its_iter->second.contains(its_key)) {
                return true;
            }
        }
    }

    // Check policies
    std::shared_lock its_lock(any_client_policies_mutex_);
    for (const auto& p : any_client_policies_) {
        std::scoped_lock its_policy_lock(p->mutex_);
        bool has_uid, has_gid(false);
        bool is_matching(false);

        const auto found_uid = p->credentials_.find(its_uid);