Struct PolicySet

pub struct PolicySet { /* private fields */ }

Represents a set of Policys

Implementations

impl PolicySet

pub fn from_json_str(src: impl AsRef<str>) -> Result<Self, PolicySetError>

Deserialize the PolicySet from a JSON string

pub fn from_json_value(src: Value) -> Result<Self, PolicySetError>

Deserialize the PolicySet from a JSON value

pub fn from_json_file(r: impl Read) -> Result<Self, PolicySetError>

Deserialize the PolicySet from a JSON reader

pub fn to_json(self) -> Result<Value, PolicySetError>

Serialize the PolicySet as a JSON value

pub fn new() -> Self

Create a fresh empty PolicySet

pub fn from_policies( policies: impl IntoIterator<Item = Policy>, ) -> Result<Self, PolicySetError>

Create a PolicySet from the given policies

pub fn add(&mut self, policy: Policy) -> Result<(), PolicySetError>

Add an static policy to the PolicySet. To add a template instance, use link instead. This function will return an error (and not modify the PolicySet) if a template-linked policy is passed in.

pub fn remove_static( &mut self, policy_id: PolicyId, ) -> Result<Policy, PolicySetError>

Remove a static Policy from the PolicySet.

This will error if the policy is not a static policy.

pub fn add_template(&mut self, template: Template) -> Result<(), PolicySetError>

Add a Template to the PolicySet

pub fn remove_template( &mut self, template_id: PolicyId, ) -> Result<Template, PolicySetError>

Remove a Template from the PolicySet.

This will error if any policy is linked to the template. This will error if policy_id is not a template.

pub fn get_linked_policies( &self, template_id: PolicyId, ) -> Result<impl Iterator<Item = &PolicyId>, PolicySetError>

Get policies linked to a Template in the PolicySet. If any policy is linked to the template, this will error

pub fn policies(&self) -> impl Iterator<Item = &Policy>

Iterate over all the Policys in the PolicySet.

This will include both static and template-linked policies.

pub fn templates(&self) -> impl Iterator<Item = &Template>

Iterate over the Template’s in the PolicySet.

pub fn template(&self, id: &PolicyId) -> Option<&Template>

Get a Template by its PolicyId

pub fn policy(&self, id: &PolicyId) -> Option<&Policy>

Get a Policy by its PolicyId

pub fn annotation(&self, id: &PolicyId, key: impl AsRef<str>) -> Option<&str>

Extract annotation data from a Policy by its PolicyId and annotation key. If the annotation is present without an explicit value (e.g., @annotation), then this function returns Some(""). It returns None only when the annotation is not present.

pub fn template_annotation( &self, id: &PolicyId, key: impl AsRef<str>, ) -> Option<&str>

Extract annotation data from a Template by its PolicyId and annotation key. If the annotation is present without an explicit value (e.g., @annotation), then this function returns Some(""). It returns None only when the annotation is not present.

pub fn is_empty(&self) -> bool

Returns true iff the PolicySet is empty

pub fn num_of_policies(&self) -> usize

Returns the number of Policys in the PolicySet.

This will include both static and template-linked policies.

pub fn num_of_templates(&self) -> usize

Returns the number of Templates in the PolicySet.

pub fn link( &mut self, template_id: PolicyId, new_id: PolicyId, vals: HashMap<SlotId, EntityUid>, ) -> Result<(), PolicySetError>

Attempt to link a template and add the new template-linked policy to the policy set. If link fails, the PolicySet is not modified. Failure can happen for three reasons

1. The map passed in vals may not match the slots in the template
2. The new_id may conflict w/ a policy that already exists in the set
3. template_id does not correspond to a template. Either the id is not in the policy set, or it is in the policy set but is either a linked or static policy rather than a template

pub fn unknown_entities(&self) -> HashSet<EntityUid>

Available on crate feature partial-eval only.

Get all the unknown entities from the policy set

This feature is experimental. For more information see https://github.com/cedar-policy/rfcs/blob/main/README.md#experimental-features

pub fn unlink(&mut self, policy_id: PolicyId) -> Result<Policy, PolicySetError>

Unlink a template-linked policy from the policy set. Returns the policy that was unlinked.

Trait Implementations

impl Clone for PolicySet

fn clone(&self) -> PolicySet

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PolicySet

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PolicySet

fn default() -> PolicySet

Returns the “default value” for a type.

impl Display for PolicySet

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl From<&PolicySet> for LiteralPolicySet

Available on crate feature protobufs only.

fn from(v: &PolicySet) -> Self

Converts to this type from the input type.

impl FromStr for PolicySet

fn from_str(policies: &str) -> Result<Self, Self::Err>

Create a policy set from multiple statements.

Policy ids will default to “policy*” with numbers from 0. If you load more policies, do not use the default id, or there will be conflicts.

See Policy for more.

type Err = ParseErrors

The associated error which can be returned from parsing.

impl PartialEq for PolicySet

fn eq(&self, other: &Self) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Protobuf for PolicySet

Available on crate feature protobufs only.

fn encode(&self) -> Vec<u8>

Encode into protobuf format. Returns a freshly-allocated buffer containing binary data.

fn decode(buf: impl Buf) -> Result<Self, DecodeError>

Decode the binary data in buf, producing something of type Self

impl TryFrom<&LiteralPolicySet> for PolicySet

Available on crate feature protobufs only.

type Error = PolicySetError

The type returned in the event of a conversion error.

fn try_from(v: &LiteralPolicySet) -> Result<Self, Self::Error>

Performs the conversion.

impl Eq for PolicySet