Method validateRoleMax

model/constraint.go:244–266

validateRoleMax validates a role cardinality constraint.

(constraint *Constraint, groupingPolicy [][]string)

// validateRoleMax validates a role cardinality constraint.
func (model Model) validateRoleMax(constraint *Constraint, groupingPolicy [][]string) error {
	roleCount := 0

	// Count how many users have this role
	for _, rule := range groupingPolicy {
		if len(rule) < 2 {
			continue
		}
		role := rule[1]

		if role == constraint.Role {
			roleCount++
		}
	}

	if roleCount > constraint.MaxCount {
		return errors.NewConstraintViolationError(constraint.Key,
			fmt.Sprintf("role '%s' assigned to %d users, exceeds maximum of %d",
				constraint.Role, roleCount, constraint.MaxCount))
	}

	return nil
}

// validateRolePre validates a prerequisite role constraint.
func (model Model) validateRolePre(constraint *Constraint, groupingPolicy [][]string) error {