Function NewAccessController

pkg/security/access_control.go:269–309

NewAccessController 创建访问控制器

(config *AccessControlConfig, auditLog AuditLog)

// NewAccessController 创建访问控制器
func NewAccessController(config *AccessControlConfig, auditLog AuditLog) *AccessController {
	if config == nil {
		config = &AccessControlConfig{
			SessionTimeout:         time.Hour * 24,
			MaxSessionsPerUser:     5,
			EnableSessionCache:     true,
			EnablePermissionCache:  true,
			PermissionCacheTimeout: time.Minute * 15,
			EnableAudit:            true,
			AuditLevel:             AuditLevelBasic,
			LoginFailureLockout:    true,
			MaxFailedAttempts:      5,
		}
	}

	ac := &AccessController{
		roles:           make(map[string]*Role),
		permissions:     make(map[string]*Permission),
		policies:        make(map[string]*AccessPolicy),
		users:           make(map[string]*User),
		sessions:        make(map[string]*Session),
		userRoles:       make(map[string][]string),
		rolePermissions: make(map[string][]string),
		userPermissions: make(map[string]map[string]bool),
		config:          config,
		auditLog:        auditLog,
	}

	// 初始化缓存
	if config.EnablePermissionCache {
		ac.cache = &AccessCache{
			entries: make(map[string]*CacheEntry),
			ttl:     config.PermissionCacheTimeout,
		}
	}

	// 启动清理协程
	go ac.startCleanupWorker()

	return ac
}

// CreateUser 创建用户
func (ac *AccessController) CreateUser(user *User) error {