Struct cedar_policy::PolicySet

pub struct PolicySet { /* private fields */ }

Represents a set of Policys

Implementations

impl PolicySet

pub fn new() -> Self

Create a fresh empty PolicySet

pub fn from_policies( policies: impl IntoIterator<Item = Policy> ) -> Result<Self, PolicySetError>

Create a PolicySet from the given policies

pub fn add(&mut self, policy: Policy) -> Result<(), PolicySetError>

Add an static policy to the PolicySet. To add a template instance, use link instead. This function will return an error (and not modify the PolicySet) if a template-linked policy is passed in.

pub fn remove_static( &mut self, policy_id: PolicyId ) -> Result<Policy, PolicySetError>

Remove a static Policy from the PolicySet.

This will error if the policy is not a static policy.

pub fn add_template(&mut self, template: Template) -> Result<(), PolicySetError>

Add a Template to the PolicySet

pub fn remove_template( &mut self, template_id: PolicyId ) -> Result<Template, PolicySetError>

Remove a Template from the PolicySet.

This will error if any policy is linked to the template. This will error if policy_id is not a template.

pub fn get_linked_policies( &self, template_id: PolicyId ) -> Result<impl Iterator<Item = &PolicyId>, PolicySetError>

Get policies linked to a Template in the PolicySet. If any policy is linked to the template, this will error

pub fn policies(&self) -> impl Iterator<Item = &Policy>

Iterate over all the Policys in the PolicySet.

This will include both static and template-linked policies.

pub fn templates(&self) -> impl Iterator<Item = &Template>

Iterate over the Template’s in the PolicySet.

pub fn template(&self, id: &PolicyId) -> Option<&Template>

Get a Template by its PolicyId

pub fn policy(&self, id: &PolicyId) -> Option<&Policy>

Get a Policy by its PolicyId

pub fn annotation<'a>( &'a self, id: &PolicyId, key: impl AsRef<str> ) -> Option<&'a str>

Extract annotation data from a Policy by its PolicyId and annotation key

pub fn template_annotation( &self, id: &PolicyId, key: impl AsRef<str> ) -> Option<String>

Extract annotation data from a Template by its PolicyId and annotation key.

pub fn is_empty(&self) -> bool

Returns true iff the PolicySet is empty

pub fn link( &mut self, template_id: PolicyId, new_id: PolicyId, vals: HashMap<SlotId, EntityUid> ) -> Result<(), PolicySetError>

Attempt to link a template and add the new template-linked policy to the policy set. If link fails, the PolicySet is not modified. Failure can happen for three reasons

1. The map passed in vals may not match the slots in the template
2. The new_id may conflict w/ a policy that already exists in the set
3. template_id does not correspond to a template. Either the id is not in the policy set, or it is in the policy set but is either a linked or static policy rather than a template

pub fn unknown_entities(&self) -> HashSet<EntityUid>

Available on crate feature partial-eval only.

Get all the unknown entities from the policy set

This feature is experimental. For more information see https://github.com/cedar-policy/rfcs/blob/main/README.md#experimental-features

pub fn unlink(&mut self, policy_id: PolicyId) -> Result<Policy, PolicySetError>

Unlink a template link from the policy set. Returns the policy that was unlinked.

Trait Implementations

impl Clone for PolicySet

fn clone(&self) -> PolicySet

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PolicySet

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PolicySet

fn default() -> PolicySet

Returns the “default value” for a type.

impl Display for PolicySet

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl FromStr for PolicySet

fn from_str(policies: &str) -> Result<Self, Self::Err>

Create a policy set from multiple statements.

Policy ids will default to “policy*” with numbers from 0. If you load more policies, do not use the default id, or there will be conflicts.

See Policy for more.

type Err = ParseErrors

The associated error which can be returned from parsing.

impl PartialEq for PolicySet

fn eq(&self, other: &Self) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

This method tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for PolicySet