Authorize subject/object.
| 457 | { |
| 458 | // Authorize subject/object. |
| 459 | foreach (const GenericACL& acl, acls) { |
| 460 | if (matches(subject, acl.subjects) && matches(object, acl.objects)) { |
| 461 | return allows(subject, acl.subjects) && allows(object, acl.objects); |
| 462 | } |
| 463 | } |
| 464 | |
| 465 | return permissive_; // None of the ACLs match. |
| 466 | } |