Method validateConstraint

model/constraint.go:166–179

validateConstraint validates a single constraint against the policy.

(constraint *Constraint, groupingPolicy [][]string)

// validateConstraint validates a single constraint against the policy.
func (model Model) validateConstraint(constraint *Constraint, groupingPolicy [][]string) error {
	switch constraint.Type {
	case ConstraintTypeSOD:
		return model.validateSOD(constraint, groupingPolicy)
	case ConstraintTypeSODMax:
		return model.validateSODMax(constraint, groupingPolicy)
	case ConstraintTypeRoleMax:
		return model.validateRoleMax(constraint, groupingPolicy)
	case ConstraintTypeRolePre:
		return model.validateRolePre(constraint, groupingPolicy)
	default:
		return fmt.Errorf("unknown constraint type")
	}
}

// buildUserRoleMap builds a map of users to their assigned roles from grouping policy.
func buildUserRoleMap(groupingPolicy [][]string) map[string]map[string]bool {