Something went wrong. Try again.
Monorepo for Tangled tangled.org
Something went wrong. Try again.
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134package rbac
import ( "fmt" "slices" "strings")
func (e *Enforcer) getDomainsForUser(did string, keepFunc func(string) bool, stripFunc func(string) string) ([]string, error) { domains, err := e.E.GetDomainsForUser(did) if err != nil { return nil, err }
n := 0 for _, x := range domains { if keepFunc(x) { domains[n] = stripFunc(x) n++ } } domains = domains[:n]
return domains, nil}
func (e *Enforcer) addOwner(domain, owner string) error { _, err := e.E.AddGroupingPolicy(owner, "server:owner", domain) return err}
func (e *Enforcer) removeOwner(domain, owner string) error { _, err := e.E.RemoveGroupingPolicy(owner, "server:owner", domain) return err}
func (e *Enforcer) addMember(domain, member string) (bool, error) { return e.E.AddGroupingPolicy(member, "server:member", domain)}
func (e *Enforcer) removeMember(domain, member string) (bool, error) { return e.E.RemoveGroupingPolicy(member, "server:member", domain)}
func (e *Enforcer) isRole(user, role, domain string) (bool, error) { roles, err := e.E.GetImplicitRolesForUser(user, domain) if err != nil { return false, err } if slices.Contains(roles, role) { return true, nil } return false, nil}
func (e *Enforcer) isInviteAllowed(user, domain string) (bool, error) { return e.E.Enforce(user, domain, domain, "server:invite")}
func (e *Enforcer) HasAnyPolicyForUser(user string) (bool, error) { pPolicies, err := e.E.GetFilteredNamedPolicy("p", 0, user) if err != nil { return false, err } if len(pPolicies) > 0 { return true, nil } gPolicies, err := e.E.GetFilteredNamedGroupingPolicy("g", 0, user) if err != nil { return false, err } return len(gPolicies) > 0, nil}
func (e *Enforcer) wouldHaveAnyPolicyExcludingGrouping(user, role, domain string) (bool, error) { pPolicies, err := e.E.GetFilteredNamedPolicy("p", 0, user) if err != nil { return false, err } if len(pPolicies) > 0 { return true, nil } gPolicies, err := e.E.GetFilteredNamedGroupingPolicy("g", 0, user) if err != nil { return false, err } for _, gp := range gPolicies { if len(gp) < 3 { return true, nil } if gp[1] != role || gp[2] != domain { return true, nil } } return false, nil}
func (e *Enforcer) WouldHaveAnyPolicyExcludingSpindleMember(user, domain string) (bool, error) { return e.wouldHaveAnyPolicyExcludingGrouping(user, "server:member", intoSpindle(domain))}
func checkRepoFormat(repo string) error { // sanity check, repo must be of the form ownerDid/repo if parts := strings.SplitN(repo, "/", 2); !strings.HasPrefix(parts[0], "did:") { return fmt.Errorf("invalid repo: %s", repo) }
return nil}
const spindlePrefix = "spindle:"
func intoSpindle(domain string) string { if !isSpindle(domain) { return spindlePrefix + domain } return domain}
func unSpindle(domain string) string { if !isSpindle(domain) { return domain } return strings.TrimPrefix(domain, spindlePrefix)}
func isSpindle(domain string) bool { return strings.HasPrefix(domain, spindlePrefix)}
func isNotSpindle(domain string) bool { return !isSpindle(domain)}