// Licensed to the Apache Software Foundation (ASF) under one // or more contributor license agreements. See the NOTICE file // distributed with this work for additional information // regarding copyright ownership. The ASF licenses this file // to you under the Apache License, Version 2.0 (the // "License"); you may not use this file except in compliance // with the License. You may obtain a copy of the License at // // http://www.apache.org/licenses/LICENSE-2.0 // // Unless required by applicable law or agreed to in writing, // software distributed under the License is distributed on an // "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY // KIND, either express or implied. See the License for the // specific language governing permissions and limitations // under the License. package casbin import ( "fmt" "testing" ) func BenchmarkCachedRaw(b *testing.B) { for i := 0; i < b.N; i++ { rawEnforce("alice", "data1", "read") } } func BenchmarkCachedBasicModel(b *testing.B) { e, _ := NewCachedEnforcer("examples/basic_model.conf", "examples/basic_policy.csv") b.ResetTimer() for i := 0; i < b.N; i++ { _, _ = e.Enforce("alice", "data1", "read") } } func BenchmarkCachedRBACModel(b *testing.B) { e, _ := NewCachedEnforcer("examples/rbac_model.conf", "examples/rbac_policy.csv") b.ResetTimer() for i := 0; i < b.N; i++ { _, _ = e.Enforce("alice", "data2", "read") } } func BenchmarkCachedRBACModelSmall(b *testing.B) { e, _ := NewCachedEnforcer("examples/rbac_model.conf") // 100 roles, 10 resources. for i := 0; i < 100; i++ { _, err := e.AddPolicy(fmt.Sprintf("group%d", i), fmt.Sprintf("data%d", i/10), "read") if err != nil { b.Fatal(err) } } // 1000 users. for i := 0; i < 1000; i++ { _, err := e.AddGroupingPolicy(fmt.Sprintf("user%d", i), fmt.Sprintf("group%d", i/10)) if err != nil { b.Fatal(err) } } b.ResetTimer() for i := 0; i < b.N; i++ { _, _ = e.Enforce("user501", "data9", "read") } } func BenchmarkCachedRBACModelMedium(b *testing.B) { e, _ := NewCachedEnforcer("examples/rbac_model.conf") // 1000 roles, 100 resources. pPolicies := make([][]string, 0) for i := 0; i < 1000; i++ { pPolicies = append(pPolicies, []string{fmt.Sprintf("group%d", i), fmt.Sprintf("data%d", i/10), "read"}) } _, err := e.AddPolicies(pPolicies) if err != nil { b.Fatal(err) } // 10000 users. gPolicies := make([][]string, 0) for i := 0; i < 10000; i++ { gPolicies = append(gPolicies, []string{fmt.Sprintf("user%d", i), fmt.Sprintf("group%d", i/10)}) } _, err = e.AddGroupingPolicies(gPolicies) if err != nil { b.Fatal(err) } b.ResetTimer() for i := 0; i < b.N; i++ { _, _ = e.Enforce("user5001", "data150", "read") } } func BenchmarkCachedRBACModelLarge(b *testing.B) { e, _ := NewCachedEnforcer("examples/rbac_model.conf") // 10000 roles, 1000 resources. pPolicies := make([][]string, 0) for i := 0; i < 10000; i++ { pPolicies = append(pPolicies, []string{fmt.Sprintf("group%d", i), fmt.Sprintf("data%d", i/10), "read"}) } _, err := e.AddPolicies(pPolicies) if err != nil { b.Fatal(err) } // 100000 users. gPolicies := make([][]string, 0) for i := 0; i < 100000; i++ { gPolicies = append(gPolicies, []string{fmt.Sprintf("user%d", i), fmt.Sprintf("group%d", i/10)}) } _, err = e.AddGroupingPolicies(gPolicies) if err != nil { b.Fatal(err) } b.ResetTimer() for i := 0; i < b.N; i++ { _, _ = e.Enforce("user50001", "data1500", "read") } } func BenchmarkCachedRBACModelWithResourceRoles(b *testing.B) { e, _ := NewCachedEnforcer("examples/rbac_with_resource_roles_model.conf", "examples/rbac_with_resource_roles_policy.csv") b.ResetTimer() for i := 0; i < b.N; i++ { _, _ = e.Enforce("alice", "data1", "read") } } func BenchmarkCachedRBACModelWithDomains(b *testing.B) { e, _ := NewCachedEnforcer("examples/rbac_with_domains_model.conf", "examples/rbac_with_domains_policy.csv") b.ResetTimer() for i := 0; i < b.N; i++ { _, _ = e.Enforce("alice", "domain1", "data1", "read") } } func BenchmarkCachedABACModel(b *testing.B) { e, _ := NewCachedEnforcer("examples/abac_model.conf") data1 := newTestResource("data1", "alice") b.ResetTimer() for i := 0; i < b.N; i++ { _, _ = e.Enforce("alice", data1, "read") } } func BenchmarkCachedKeyMatchModel(b *testing.B) { e, _ := NewCachedEnforcer("examples/keymatch_model.conf", "examples/keymatch_policy.csv") b.ResetTimer() for i := 0; i < b.N; i++ { _, _ = e.Enforce("alice", "/alice_data/resource1", "GET") } } func BenchmarkCachedRBACModelWithDeny(b *testing.B) { e, _ := NewCachedEnforcer("examples/rbac_with_deny_model.conf", "examples/rbac_with_deny_policy.csv") b.ResetTimer() for i := 0; i < b.N; i++ { _, _ = e.Enforce("alice", "data1", "read") } } func BenchmarkCachedPriorityModel(b *testing.B) { e, _ := NewCachedEnforcer("examples/priority_model.conf", "examples/priority_policy.csv") b.ResetTimer() for i := 0; i < b.N; i++ { _, _ = e.Enforce("alice", "data1", "read") } } func BenchmarkCachedWithEnforceContext(b *testing.B) { e, _ := NewCachedEnforcer("examples/priority_model_enforce_context.conf", "examples/priority_policy_enforce_context.csv") b.ResetTimer() for i := 0; i < b.N; i++ { _, _ = e.Enforce(EnforceContext{RType: "r2", PType: "p", EType: "e", MType: "m2"}, "alice", "data1") } } func BenchmarkCachedRBACModelMediumParallel(b *testing.B) { e, _ := NewCachedEnforcer("examples/rbac_model.conf") // 10000 roles, 1000 resources. pPolicies := make([][]string, 0) for i := 0; i < 10000; i++ { pPolicies = append(pPolicies, []string{fmt.Sprintf("group%d", i), fmt.Sprintf("data%d", i/10), "read"}) } _, err := e.AddPolicies(pPolicies) if err != nil { b.Fatal(err) } // 100000 users. gPolicies := make([][]string, 0) for i := 0; i < 100000; i++ { gPolicies = append(gPolicies, []string{fmt.Sprintf("user%d", i), fmt.Sprintf("group%d", i/10)}) } _, err = e.AddGroupingPolicies(gPolicies) if err != nil { b.Fatal(err) } b.ResetTimer() b.RunParallel(func(pb *testing.PB) { for pb.Next() { _, _ = e.Enforce("user5001", "data150", "read") } }) }