Method load

cli/coder/policy_manager.go:271–328

()

}

func (pm *PolicyManager) load() {
	globalPath := pm.configPath
	globalRules := []Rule{}

	if _, err := os.Stat(globalPath); os.IsNotExist(err) {
		pm.defaultRules()
		globalRules = pm.Rules
	} else {
		data, err := os.ReadFile(globalPath) //#nosec G304 -- path supplied by user/agent through validated tool surface (boundary check upstream)
		if err != nil {
			pm.logger.Warn("Failed to read security policy", zap.Error(err))
		} else {
			var pf policyFile
			if err := json.Unmarshal(data, &pf); err != nil {
				pm.logger.Warn("Failed to parse security policy", zap.Error(err))
			} else {
				globalRules = pf.Rules
			}
		}
	}

	localPath := findLocalPolicyPath()
	if localPath == "" {
		pm.Rules = globalRules
		pm.localPath = ""
		pm.mergeLocal = false
		return
	}

	localData, err := os.ReadFile(localPath) //#nosec G304 -- path supplied by user/agent through validated tool surface (boundary check upstream)
	if err != nil {
		pm.logger.Warn("Failed to read local security policy", zap.Error(err))
		pm.Rules = globalRules
		pm.localPath = ""
		pm.mergeLocal = false
		return
	}

	var local policyFile
	if err := json.Unmarshal(localData, &local); err != nil {
		pm.logger.Warn("Failed to parse local security policy", zap.Error(err))
		pm.Rules = globalRules
		pm.localPath = ""
		pm.mergeLocal = false
		return
	}

	if local.Merge {
		pm.Rules = mergeRules(globalRules, local.Rules)
	} else {
		pm.Rules = local.Rules
	}

	// Se existe policy local, persistir alterações nela.
	pm.configPath = localPath
	pm.localPath = localPath
	pm.mergeLocal = local.Merge
}