41 lines
1.1 KiB
Go
41 lines
1.1 KiB
Go
|
package abac
|
||
|
|
|
||
|
|
type SimplePolicyEngine struct {
|
||
|
|
rules []Rule
|
||
|
|
}
|
||
|
|
|
||
|
|
type Rule struct {
|
||
|
|
Effect string `json:"effect"`
|
||
|
|
Action string `json:"action"`
|
||
|
|
Condition Condition `json:"condition"`
|
||
|
|
}
|
||
|
|
|
||
|
|
type Condition struct {
|
||
|
|
AttributeKey string `json:"attribute_key"`
|
||
|
|
AttributeValue string `json:"attribute_value"`
|
||
|
|
}
|
||
|
|
|
||
|
|
func (engine *SimplePolicyEngine) EvaluatePolicy(userAttributes, resourceAttributes []Attribute, action string) PolicyDecision {
|
||
|
|
for _, rule := range engine.rules {
|
||
|
|
if rule.Action == action {
|
||
|
|
if rule.Condition.AttributeKey != "" && rule.Condition.AttributeValue != "" {
|
||
|
|
attributeFound := false
|
||
|
|
for _, attribute := range userAttributes {
|
||
|
|
if attribute.Key == rule.Condition.AttributeKey && attribute.Value == rule.Condition.AttributeValue {
|
||
|
|
attributeFound = true
|
||
|
|
break
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
if !attributeFound {
|
||
|
|
continue
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
return PolicyDecision(rule.Effect == "Allow")
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
return Deny
|
||
|
|
}
|