Struct cedar_policy::PolicySet

pub struct PolicySet { /* private fields */ }

Represents a set of Policys

Implementations

impl PolicySet

pub fn new() -> Self

Create a fresh empty PolicySet

pub fn from_policies( policies: impl IntoIterator<Item = Policy> ) -> Result<Self, PolicySetError>

Create a PolicySet from the given policies

pub fn add(&mut self, policy: Policy) -> Result<(), PolicySetError>

Add an static policy to the PolicySet. To add a template instance, use link instead. This function will return an error (and not modify the PolicySet) if a template-linked policy is passed in. If a link, template or static policy with this ID already exists, this will error.

pub fn add_template(&mut self, template: Template) -> Result<(), PolicySetError>

Add a Template to the PolicySet If a link, template or static policy with this ID already exists, this will error.

pub fn policies(&self) -> impl Iterator<Item = &Policy>

Iterate over all the Policys in the PolicySet.

This will include both static and template-linked policies.

pub fn templates(&self) -> impl Iterator<Item = &Template>

Iterate over the Template’s in the PolicySet.

pub fn template(&self, id: &PolicyId) -> Option<&Template>

Get a Template by its PolicyId

pub fn policy(&self, id: &PolicyId) -> Option<&Policy>

Get a Policy by its PolicyId

pub fn annotation<'a>( &'a self, id: &PolicyId, key: impl AsRef<str> ) -> Option<&'a str>

Extract annotation data from a Policy by its PolicyId and annotation key

pub fn template_annotation( &self, id: &PolicyId, key: impl AsRef<str> ) -> Option<String>

Extract annotation data from a Template by its PolicyId and annotation key.

pub fn is_empty(&self) -> bool

Returns true iff the PolicySet is empty

pub fn link( &mut self, template_id: PolicyId, new_id: PolicyId, vals: HashMap<SlotId, EntityUid> ) -> Result<(), PolicySetError>

Attempt to link a template and add the new template-linked policy to the policy set. If link fails, the PolicySet is not modified. Failure can happen for three reasons

1. The map passed in vals may not match the slots in the template
2. The new_id may conflict w/ a policy that already exists in the set If a link, template or static policy with this ID already exists, this will error.

Trait Implementations

impl Clone for PolicySet

fn clone(&self) -> PolicySet

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PolicySet

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PolicySet

fn default() -> PolicySet

Returns the “default value” for a type.

impl Display for PolicySet

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl FromStr for PolicySet

fn from_str(policies: &str) -> Result<Self, Self::Err>

Create a policy set from multiple statements.

Policy ids will default to “policy*” with numbers from 0. If you load more policies, do not use the default id, or there will be conflicts.

See Policy for more.

type Err = ParseErrors

The associated error which can be returned from parsing.

impl PartialEq for PolicySet

fn eq(&self, other: &Self) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

This method tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for PolicySet