Method UpdatePolicy

pkg/security/policy.go:489–525

UpdatePolicy 更新策略

(policy *SecurityPolicy)

// UpdatePolicy 更新策略
func (bpe *BasicPolicyEngine) UpdatePolicy(policy *SecurityPolicy) error {
	bpe.mu.Lock()
	defer bpe.mu.Unlock()

	if policy.ID == "" {
		return errors.New("policy ID is required")
	}

	existing, exists := bpe.policies[policy.ID]
	if !exists {
		return fmt.Errorf("policy %s not found", policy.ID)
	}

	// 更新时间戳
	policy.UpdatedAt = time.Now()
	policy.CreatedAt = existing.CreatedAt // 保持创建时间
	policy.CreatedBy = existing.CreatedBy // 保持创建者

	bpe.policies[policy.ID] = policy

	// 记录审计日志
	if bpe.config.EnableAudit && bpe.auditLog != nil {
		_ = bpe.auditLog.LogEvent(AuditEvent{
			Type:      AuditTypePolicyUpdated,
			UserID:    policy.UpdatedBy,
			Timestamp: time.Now(),
			Message:   fmt.Sprintf("Policy %s (%s) updated", policy.ID, policy.Name),
			Metadata: map[string]any{
				"policy_id":      policy.ID,
				"policy_name":    policy.Name,
				"policy_version": policy.Version,
			},
		})
	}

	return nil
}

// DeletePolicy 删除策略
func (bpe *BasicPolicyEngine) DeletePolicy(policyID string) error {