Method registerDomainMatchingFunc

enforcer.go:567–581

registerDomainMatchingFunc registers domain matching function if the matcher uses keyMatch for domains.

(ptype string)

// registerDomainMatchingFunc registers domain matching function if the matcher uses keyMatch for domains.
func (e *Enforcer) registerDomainMatchingFunc(ptype string) {
	// Dynamically detect the domain token name from the model definition.
	// In RBAC with domains, the domain is typically the second parameter (index 1)
	// in both request and policy definitions (e.g., r = sub, dom, obj, act).
	// We extract the actual token names to support arbitrary domain parameter names.
	rDomainToken, pDomainToken := e.getDomainTokens()
	if rDomainToken == "" || pDomainToken == "" {
		return
	}

	matchFun := fmt.Sprintf("keyMatch(%s, %s)", rDomainToken, pDomainToken)
	if strings.Contains(e.model["m"]["m"].Value, matchFun) {
		e.AddNamedDomainMatchingFunc(ptype, "g", util.KeyMatch)
	}
}

func (e *Enforcer) initRmMap() {
	for ptype, assertion := range e.model["g"] {