7e385fc126
Some checks failed
SonarQube / SonarQube (push) Failing after 5m28s
E2e test on main branch push / server and client test (map[name:admin port:8080]) (push) Failing after 3m33s
Server and lib tests / Library test (js) (push) Failing after 1m36s
Server and lib tests / Library test (vue) (push) Successful in 2m24s
Server and lib tests / Web client test (admin) (push) Successful in 2m52s
Server and lib tests / Web client test (compose) (push) Successful in 3m23s
Server and lib tests / Web client test (discovery) (push) Successful in 2m49s
Server and lib tests / Web client test (one) (push) Successful in 2m52s
Server and lib tests / Web client test (privacy) (push) Successful in 2m44s
Server and lib tests / Web client test (reporter) (push) Successful in 2m56s
Server and lib tests / Web client test (workflow) (push) Successful in 3m0s
Server and lib tests / Server tests (push) Failing after 4m55s
E2e test on main branch push / notify-failure (push) Failing after 9s
Server and lib tests / Send matrix testing notification (push) Successful in 2s
Mark stale issues and pull requests / stale (push) Successful in 40s
42 lines
1.0 KiB
Go
42 lines
1.0 KiB
Go
package envoy
|
|
|
|
import (
|
|
"fmt"
|
|
|
|
"github.com/cortezaproject/corteza/server/pkg/envoy/resource"
|
|
)
|
|
|
|
// FilterRequestedRBACRules returns only RBAC rules relevant for the given resources
|
|
func FilterRequestedRBACRules(request resource.InterfaceSet, rules []*resource.RbacRule) (out []*resource.RbacRule) {
|
|
out = make([]*resource.RbacRule, 0, 10)
|
|
|
|
// Filter
|
|
dupRuleIndex := make(map[string]bool)
|
|
procResSet(request, func(r resource.Interface) {
|
|
rbacRes, ok := r.(resource.RBACInterface)
|
|
if !ok {
|
|
return
|
|
}
|
|
|
|
_, ref, pp := rbacRes.RBACParts()
|
|
resourceRefSet := appendRefSet(pp, ref)
|
|
|
|
for _, rule := range rules {
|
|
k := fmt.Sprintf("%s, %s, %d; %d", rule.Res.Resource, rule.Res.Operation, rule.Res.Access, rule.Res.RoleID)
|
|
if dupRuleIndex[k] {
|
|
continue
|
|
}
|
|
dupRuleIndex[k] = true
|
|
ruleRefSet := appendRefSet(rule.RefPath, rule.RefRes)
|
|
// Checking if rule is <= resource since wildflags can be used
|
|
if !ruleRefSet.IsSubset(resourceRefSet) {
|
|
continue
|
|
}
|
|
|
|
out = append(out, rule)
|
|
}
|
|
})
|
|
|
|
return
|
|
}
|