Page MenuHomeSealhub
Files F3010739

policy.ts
No OneTemporary
Actions

policy.ts
View Options

import Context from "../context";
import Query from "../datastore/query";
import { AllowAll } from "../datastore/allow-all";
import { CollectionItem } from "../main";
export type PolicyDefinition = [PolicyClass, any] | Policy | PolicyClass;
export type PolicyDecision = {
allowed: boolean;
reason: string;
} | null;
export type PolicyClass = {
new (params?: any): Policy;
type_name: string;
};
export default abstract class Policy {
static type_name: string;
constructor(public params: any = {}) {
this.params = params;
}
// return null if not possible to give an answer
abstract checkerFunction(
context: Context,
item_getter?: () => Promise<CollectionItem<any>>
): Promise<PolicyDecision | null>;
async isItemSensitive(_: Context) {
return false;
}
protected abstract _getRestrictingQuery(context: Context): Promise<Query>;
async getRestrictingQuery(context: Context): Promise<Query> {
if (context.is_super) {
return new AllowAll();
}
return this._getRestrictingQuery(context);
}
async check(
context: Context,
item_getter?: () => Promise<CollectionItem<any>>
): Promise<PolicyDecision | null> {
context.app.Logger.debug3(
"POLICY",
`Checking policy`,
{
this: this,
context,
},
1
);
if (context.is_super) {
return Policy.allow(context.app.i18n("policy_allow"));
}
const is_item_sensitive = await this.isItemSensitive(context);
if (is_item_sensitive && item_getter === undefined) {
return null;
}
return this.checkerFunction(context, item_getter);
}
public static fromDefinition(definition: PolicyDefinition): Policy {
let ret: Policy | null = null;
if (definition instanceof Policy) {
ret = definition;
} else if (Array.isArray(definition)) {
ret = new definition[0](definition[1]);
} else if (typeof definition == "function") {
ret = new (definition as PolicyClass)({});
}
if (!ret) {
throw new Error("could not read the definition");
}
return ret;
}
static allow(reason: string) {
return { allowed: true, reason };
}
static deny(reason: string) {
return { allowed: false, reason };
}
}
export abstract class ReducingPolicy extends Policy {
policies: Policy[];
constructor(params: Policy[]) {
super(params);
this.policies = params.map((definition) =>
Policy.fromDefinition(definition)
);
}
checkAllPolicies(
context: Context,
item_getter?: () => Promise<CollectionItem>
): Promise<PolicyDecision[]> {
return Promise.all(
this.policies.map((strategy) =>
strategy.check(context, item_getter)
)
);
}
}

File Metadata

Mime Type
text/x-java
Expires
Wed, May 7, 19:46 (1 d, 3 h)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
661130
Default Alt Text
policy.ts (2 KB)

Event Timeline