Method AddPolicy

pkg/security/policy.go:441–486

AddPolicy 添加策略

(policy *SecurityPolicy)

// AddPolicy 添加策略
func (bpe *BasicPolicyEngine) AddPolicy(policy *SecurityPolicy) error {
	bpe.mu.Lock()
	defer bpe.mu.Unlock()

	if policy.ID == "" {
		return errors.New("policy ID is required")
	}

	if _, exists := bpe.policies[policy.ID]; exists {
		return fmt.Errorf("policy %s already exists", policy.ID)
	}

	// 设置默认值
	if policy.Version == "" {
		policy.Version = "1.0.0"
	}
	if policy.Priority == 0 {
		policy.Priority = 100
	}
	if policy.CreatedAt.IsZero() {
		policy.CreatedAt = time.Now()
	}
	if policy.UpdatedAt.IsZero() {
		policy.UpdatedAt = time.Now()
	}

	bpe.policies[policy.ID] = policy

	// 记录审计日志
	if bpe.config.EnableAudit && bpe.auditLog != nil {
		_ = bpe.auditLog.LogEvent(AuditEvent{
			Type:      AuditTypePolicyCreated,
			UserID:    policy.CreatedBy,
			Timestamp: time.Now(),
			Message:   fmt.Sprintf("Policy %s (%s) created", policy.ID, policy.Name),
			Metadata: map[string]any{
				"policy_id":     policy.ID,
				"policy_name":   policy.Name,
				"policy_scope":  policy.Scope,
				"policy_target": policy.Target,
			},
		})
	}

	return nil
}

// UpdatePolicy 更新策略
func (bpe *BasicPolicyEngine) UpdatePolicy(policy *SecurityPolicy) error {