casbin
Version:
An authorization library that supports access control models like ACL, RBAC, ABAC in Node.JS
88 lines (87 loc) • 3.73 kB
JavaScript
;
// Copyright 2017 The casbin Authors. All Rights Reserved.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
return new (P || (P = Promise))(function (resolve, reject) {
function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
step((generator = generator.apply(thisArg, _arguments || [])).next());
});
};
Object.defineProperty(exports, "__esModule", { value: true });
exports.Assertion = void 0;
const rbac = require("../rbac");
const log_1 = require("../log");
const model_1 = require("./model");
// Assertion represents an expression in a section of the model.
// For example: r = sub, obj, act
class Assertion {
/**
* constructor is the constructor for Assertion.
*/
constructor() {
this.key = '';
this.value = '';
this.tokens = [];
this.policy = [];
this.rm = new rbac.DefaultRoleManager(10);
}
buildIncrementalRoleLinks(rm, op, rules) {
return __awaiter(this, void 0, void 0, function* () {
this.rm = rm;
const count = (this.value.match(/_/g) || []).length;
if (count < 2) {
throw new Error('the number of "_" in role definition should be at least 2');
}
for (let rule of rules) {
if (rule.length < count) {
throw new Error('grouping policy elements do not meet role definition');
}
if (rule.length > count) {
rule = rule.slice(0, count);
}
switch (op) {
case model_1.PolicyOp.PolicyAdd:
yield this.rm.addLink(rule[0], rule[1], ...rule.slice(2));
break;
case model_1.PolicyOp.PolicyRemove:
yield this.rm.deleteLink(rule[0], rule[1], ...rule.slice(2));
break;
default:
throw new Error('unsupported operation');
}
}
});
}
buildRoleLinks(rm) {
return __awaiter(this, void 0, void 0, function* () {
this.rm = rm;
const count = (this.value.match(/_/g) || []).length;
if (count < 2) {
throw new Error('the number of "_" in role definition should be at least 2');
}
for (let rule of this.policy) {
if (rule.length > count) {
rule = rule.slice(0, count);
}
yield this.rm.addLink(rule[0], rule[1], ...rule.slice(2));
}
log_1.logPrint(`Role links for: ${this.key}`);
yield this.rm.printRoles();
});
}
}
exports.Assertion = Assertion;