Method resolve

nodedb/src/control/security/predicate.rs:176–189

Resolve this value using the given `AuthContext`. - `Literal`: returned as-is. - `Field`: returned as-is (resolved at scan time by Data Plane). - `AuthRef`: resolved via `AuthContext::resolve_variable()`. - `AuthFunc`: resolved via `AuthContext` metadata (pre-computed). Returns `None` if an `AuthRef`/`AuthFunc` cannot be resolved.

(&self, auth: &AuthContext)

    ///
    /// Returns `None` if an `AuthRef`/`AuthFunc` cannot be resolved.
    pub fn resolve(&self, auth: &AuthContext) -> Option<serde_json::Value> {
        match self {
            Self::Literal(v) => Some(v.clone()),
            Self::Field(_) => None,
            Self::AuthRef(field) => auth.resolve_variable(field),
            Self::AuthFunc { func, args } => {
                // Functions are resolved via pre-computed metadata keys.
                // e.g., scope_status('pro:all') → metadata["scope_status.pro:all"]
                let arg = args.first().map(|s| s.as_str()).unwrap_or("");
                let key = format!("{func}.{arg}");
                auth.resolve_variable(&format!("metadata.{key}"))
            }
        }
    }
}

/// Whether a policy is permissive (OR-combined) or restrictive (AND-combined).