Method checkDirect

internal/check/engine.go:169–210

checkDirect checks if the relation tuple is in the database directly.

(r *relationTuple, restDepth int)

// checkDirect checks if the relation tuple is in the database directly.
func (e *Engine) checkDirect(r *relationTuple, restDepth int) checkgroup.CheckFunc {
	if restDepth <= 0 {
		e.d.Logger().
			WithField("method", "checkDirect").
			Debug("reached max-depth, therefore this query will not be further expanded")
		return checkgroup.UnknownMemberFunc
	}
	return func(ctx context.Context, resultCh chan<- checkgroup.Result) {
		e.d.Logger().
			WithField("request", r.String()).
			Trace("check direct")
		found, err := e.d.RelationTupleManager().ExistsRelationTuples(
			ctx,
			r.ToQuery(),
		)

		switch {
		case err != nil:
			e.d.Logger().
				WithField("method", "checkDirect").
				WithError(err).
				Error("failed to look up direct access in db")
			resultCh <- checkgroup.Result{
				Membership: checkgroup.NotMember,
			}

		case found:
			resultCh <- checkgroup.Result{
				Membership: checkgroup.IsMember,
				Tree: &ketoapi.Tree[*relationtuple.RelationTuple]{
					Type:  ketoapi.TreeNodeLeaf,
					Tuple: r,
				},
			}

		default:
			resultCh <- checkgroup.Result{
				Membership: checkgroup.NotMember,
			}
		}
	}
}

// checkIsAllowed checks if the relation tuple is allowed (there is a path from
// the relation tuple subject to the namespace, object and relation) either