Function buildUserRoleMap

model/constraint.go:182–199

buildUserRoleMap builds a map of users to their assigned roles from grouping policy.

(groupingPolicy [][]string)

// buildUserRoleMap builds a map of users to their assigned roles from grouping policy.
func buildUserRoleMap(groupingPolicy [][]string) map[string]map[string]bool {
	userRoles := make(map[string]map[string]bool)

	for _, rule := range groupingPolicy {
		if len(rule) < 2 {
			continue
		}
		user := rule[0]
		role := rule[1]

		if userRoles[user] == nil {
			userRoles[user] = make(map[string]bool)
		}
		userRoles[user][role] = true
	}

	return userRoles
}

// validateSOD validates a Separation of Duties constraint.
func (model Model) validateSOD(constraint *Constraint, groupingPolicy [][]string) error {