Method AddRule

cli/coder/policy_manager.go:192–223

(pattern string, action Action)

}

func (pm *PolicyManager) AddRule(pattern string, action Action) error {
	pm.mu.Lock()
	defer pm.mu.Unlock()

	pattern = strings.TrimSpace(pattern)

	// Reject empty or excessively long patterns
	if pattern == "" {
		return fmt.Errorf("empty policy pattern rejected")
	}
	if len(pattern) > 500 {
		return fmt.Errorf("policy pattern too long (%d chars)", len(pattern))
	}

	pm.logger.Info("Updating security policy", zap.String("pattern", pattern), zap.String("action", string(action)))

	updated := false
	for i, rule := range pm.Rules {
		if rule.Pattern == pattern {
			pm.Rules[i].Action = action
			updated = true
			break
		}
	}

	if !updated {
		pm.Rules = append(pm.Rules, Rule{Pattern: pattern, Action: action})
	}

	pm.lastRule = nil
	return pm.save()
}

// DeleteRule removes the rule whose Pattern matches exactly. Returns
// (true, nil) when a rule was removed, (false, nil) when no rule