Function expand_access_preset

crates/openshell-policy/src/merge.rs:730–757

(protocol: &str, access: &str)

}

fn expand_access_preset(protocol: &str, access: &str) -> Option<Vec<L7Rule>> {
    let methods = match (protocol, access) {
        (_, "full") => vec!["*"],
        ("websocket", "read-only") => vec!["GET"],
        ("websocket", "read-write") => vec!["GET", "WEBSOCKET_TEXT"],
        (_, "read-only") => vec!["GET", "HEAD", "OPTIONS"],
        (_, "read-write") => vec!["GET", "HEAD", "OPTIONS", "POST", "PUT", "PATCH"],
        _ => return None,
    };

    Some(
        methods
            .into_iter()
            .map(|method| L7Rule {
                allow: Some(L7Allow {
                    method: method.to_string(),
                    path: "**".to_string(),
                    command: String::new(),
                    query: HashMap::default(),
                    operation_type: String::new(),
                    operation_name: String::new(),
                    fields: Vec::new(),
                    params: HashMap::default(),
                }),
            })
            .collect(),
    )
}

fn append_unique_binaries(existing: &mut Vec<NetworkBinary>, incoming: &[NetworkBinary]) {
    let mut seen: HashSet<String> = existing.iter().map(|binary| binary.path.clone()).collect();