uf-valence-core 0.1.2

Valence ports: DatabaseBackend, router, builder, host injectable traits
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64

//! Privacy policy port and schema-attached evaluators.

use crate::actor::Actor;
use crate::error::Result;
use crate::ports::actor::ActorContext;
use crate::privacy::types::{PrivacyOperation, PrivacyRule};
use crate::runtime::Valence;
use async_trait::async_trait;
use std::any::Any;

/// Per-rule evaluator referenced from schema metadata (not registered on the builder).
///
/// Attach consts in `valence_schema!` `policies:` blocks. See [`crate::privacy`].
#[async_trait]
pub trait PolicyEvaluator: Send + Sync + std::fmt::Debug + Any + 'static {
    fn name(&self) -> &'static str;

    fn description(&self) -> Option<&'static str> {
        None
    }

    async fn evaluate(
        &self,
        _op: PrivacyOperation,
        _record: &serde_json::Value,
        _actor: &dyn ActorContext,
        _v: &Valence,
    ) -> Result<bool> {
        Ok(true)
    }

    fn as_any(&self) -> &dyn Any;
}

fn actor_from_context(actor: &dyn ActorContext) -> Result<Actor> {
    serde_json::from_value(actor.actor_json().clone())
        .map_err(|e| crate::error::Error::Internal(format!("invalid actor context: {e}")))
}

#[async_trait]
impl PolicyEvaluator for PrivacyRule {
    fn name(&self) -> &'static str {
        self.name
    }

    fn description(&self) -> Option<&'static str> {
        self.description
    }

    async fn evaluate(
        &self,
        _op: PrivacyOperation,
        record: &serde_json::Value,
        actor: &dyn ActorContext,
        _v: &Valence,
    ) -> Result<bool> {
        let viewer = actor_from_context(actor)?;
        Ok((self.check)(record, &viewer))
    }

    fn as_any(&self) -> &dyn Any {
        self
    }
}