regorus 0.10.1

A fast, lightweight Rego (OPA policy language) interpreter
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66

// Copyright (c) Microsoft Corporation.
// Licensed under the MIT License.

//! Azure RBAC condition expression interpreter.
//!
//! This module evaluates parsed condition expressions against an
//! [`EvaluationContext`] without compiling to RVM instructions.

#[path = "interpreter/access.rs"]
mod access;
#[path = "interpreter/attributes.rs"]
mod attributes;
#[path = "interpreter/error.rs"]
mod error;
#[path = "interpreter/eval.rs"]
mod eval;
#[path = "interpreter/literals.rs"]
mod literals;
#[path = "interpreter/quantifiers.rs"]
mod quantifiers;

pub use error::ConditionEvalError;

use crate::languages::azure_rbac::ast::{ConditionExpr, ConditionExpression, EvaluationContext};
use crate::value::Value;
use eval::Evaluator;

/// Dynamic interpreter for Azure RBAC conditions.
#[derive(Debug, Clone)]
pub struct ConditionInterpreter<'a> {
    context: &'a EvaluationContext,
}

impl<'a> ConditionInterpreter<'a> {
    /// Create a new interpreter bound to a context.
    pub const fn new(context: &'a EvaluationContext) -> Self {
        Self { context }
    }

    /// Parse and evaluate a condition string.
    pub fn evaluate_str(&self, condition: &str) -> Result<bool, ConditionEvalError> {
        let mut evaluator = Evaluator::new(self.context);
        evaluator.evaluate_str(condition)
    }

    /// Evaluate a parsed condition expression.
    pub fn evaluate_condition_expression(
        &self,
        condition: &ConditionExpression,
    ) -> Result<bool, ConditionEvalError> {
        let mut evaluator = Evaluator::new(self.context);
        evaluator.evaluate_condition_expression(condition)
    }

    /// Evaluate a condition AST and return a boolean result.
    pub fn evaluate_bool(&self, expr: &ConditionExpr) -> Result<bool, ConditionEvalError> {
        let mut evaluator = Evaluator::new(self.context);
        evaluator.evaluate_bool(expr)
    }

    /// Evaluate a condition AST and return a value.
    pub fn evaluate_value(&self, expr: &ConditionExpr) -> Result<Value, ConditionEvalError> {
        let mut evaluator = Evaluator::new(self.context);
        evaluator.evaluate_value(expr)
    }
}