regorus 0.10.1

A fast, lightweight Rego (OPA policy language) interpreter
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62

// Copyright (c) Microsoft Corporation.
// Licensed under the MIT License.

use alloc::vec;
use alloc::vec::Vec;

use crate::value::Value;

use super::evaluator::RbacBuiltinError;

// Cross-product operators over collections.
//
// The operators use value equality across elements. Non-collection values are
// treated as singleton collections.

pub(super) fn for_any_of_any_values(left: &Value, right: &Value) -> Result<bool, RbacBuiltinError> {
    let left_values = collect_values(left);
    let right_values = collect_values(right);

    Ok(left_values
        .iter()
        .any(|left_value| right_values.contains(left_value)))
}

pub(super) fn for_all_of_any_values(left: &Value, right: &Value) -> Result<bool, RbacBuiltinError> {
    let left_values = collect_values(left);
    let right_values = collect_values(right);

    Ok(left_values
        .iter()
        .all(|left_value| right_values.contains(left_value)))
}

pub(super) fn for_any_of_all_values(left: &Value, right: &Value) -> Result<bool, RbacBuiltinError> {
    let left_values = collect_values(left);
    let right_values = collect_values(right);

    Ok(left_values.iter().any(|left_value| {
        right_values
            .iter()
            .all(|right_value| *left_value == *right_value)
    }))
}

pub(super) fn for_all_of_all_values(left: &Value, right: &Value) -> Result<bool, RbacBuiltinError> {
    let left_values = collect_values(left);
    let right_values = collect_values(right);

    Ok(left_values.iter().all(|left_value| {
        right_values
            .iter()
            .all(|right_value| *left_value == *right_value)
    }))
}

fn collect_values(value: &Value) -> Vec<&Value> {
    match *value {
        Value::Array(ref list) => list.iter().collect(),
        Value::Set(ref set) => set.iter().collect(),
        _ => vec![value],
    }
}