(t *testing.T)
| 90 | } |
| 91 | |
| 92 | func TestKeyMatchModelInMemoryDeny(t *testing.T) { |
| 93 | m := model.NewModel() |
| 94 | m.AddDef("r", "r", "sub, obj, act") |
| 95 | m.AddDef("p", "p", "sub, obj, act") |
| 96 | m.AddDef("e", "e", "!some(where (p.eft == deny))") |
| 97 | m.AddDef("m", "m", "r.sub == p.sub && keyMatch(r.obj, p.obj) && regexMatch(r.act, p.act)") |
| 98 | |
| 99 | a := fileadapter.NewAdapter("examples/keymatch_policy.csv") |
| 100 | |
| 101 | e, _ := NewEnforcer(m, a) |
| 102 | |
| 103 | testEnforce(t, e, "alice", "/alice_data/resource2", "POST", true) |
| 104 | } |
| 105 | |
| 106 | func TestRBACModelInMemoryIndeterminate(t *testing.T) { |
| 107 | m := model.NewModel() |
nothing calls this directly
no test coverage detected
searching dependent graphs…