Function TestLinkConditionFunc

enforcer_test.go:626–728

(t *testing.T)

}

func TestLinkConditionFunc(t *testing.T) {
	TrueFunc := func(args ...string) (bool, error) {
		if len(args) != 0 {
			return args[0] == "_" || args[0] == "true", nil
		}
		return false, nil
	}

	FalseFunc := func(args ...string) (bool, error) {
		if len(args) != 0 {
			return args[0] == "_" || args[0] == "false", nil
		}
		return false, nil
	}

	m, _ := model.NewModelFromFile("examples/rbac_with_temporal_roles_model.conf")
	e, _ := NewEnforcer(m)

	_, _ = e.AddPolicies([][]string{
		{"alice", "data1", "read"},
		{"alice", "data1", "write"},
		{"data2_admin", "data2", "read"},
		{"data2_admin", "data2", "write"},
		{"data3_admin", "data3", "read"},
		{"data3_admin", "data3", "write"},
		{"data4_admin", "data4", "read"},
		{"data4_admin", "data4", "write"},
		{"data5_admin", "data5", "read"},
		{"data5_admin", "data5", "write"},
	})

	_, _ = e.AddGroupingPolicies([][]string{
		{"alice", "data2_admin", "_", "_"},
		{"alice", "data3_admin", "_", "_"},
		{"alice", "data4_admin", "_", "_"},
		{"alice", "data5_admin", "_", "_"},
	})

	e.AddNamedLinkConditionFunc("g", "alice", "data2_admin", TrueFunc)
	e.AddNamedLinkConditionFunc("g", "alice", "data3_admin", TrueFunc)
	e.AddNamedLinkConditionFunc("g", "alice", "data4_admin", FalseFunc)
	e.AddNamedLinkConditionFunc("g", "alice", "data5_admin", FalseFunc)

	e.SetNamedLinkConditionFuncParams("g", "alice", "data2_admin", "true")
	e.SetNamedLinkConditionFuncParams("g", "alice", "data3_admin", "not true")
	e.SetNamedLinkConditionFuncParams("g", "alice", "data4_admin", "false")
	e.SetNamedLinkConditionFuncParams("g", "alice", "data5_admin", "not false")

	testEnforce(t, e, "alice", "data1", "read", true)
	testEnforce(t, e, "alice", "data1", "write", true)
	testEnforce(t, e, "alice", "data2", "read", true)
	testEnforce(t, e, "alice", "data2", "write", true)
	testEnforce(t, e, "alice", "data3", "read", false)
	testEnforce(t, e, "alice", "data3", "write", false)
	testEnforce(t, e, "alice", "data4", "read", true)
	testEnforce(t, e, "alice", "data4", "write", true)
	testEnforce(t, e, "alice", "data5", "read", false)
	testEnforce(t, e, "alice", "data5", "write", false)