enforcer

type CheckContext struct {
	DetectOnlyModeEnabled bool `json:"detectOnly"`
	BreakGlassModeEnabled bool `json:"breakGlass"`

	Result *CheckResult `json:"result"`

	IgnoredSA   bool   `json:"ignoredSA"`
	Protected   bool   `json:"protected"`
	IEResource  bool   `json:"ieresource"`
	Allow       bool   `json:"allow"`
	Verified    bool   `json:"verified"`
	Aborted     bool   `json:"aborted"`
	AbortReason string `json:"abortReason"`
	Error       error  `json:"error"`
	Message     string `json:"msg"`

	ConsoleLogEnabled bool `json:"-"`
	ContextLogEnabled bool `json:"-"`
	IncludeRequest    bool `json:"-"`
	ReasonCode        int  `json:"reasonCode"`

	AllowByBreakGlassMode bool `json:"allowByBreakGlassMode"`
	AllowByDetectOnlyMode bool `json:"allowByDetectOnlyMode"`
}

type CheckResult struct {
	SignPolicyEvalResult *common.SignPolicyEvalResult `json:"signpolicy"`
	ResolveOwnerResult   *common.ResolveOwnerResult   `json:"owner"`
	MutationEvalResult   *common.MutationEvalResult   `json:"mutation"`
}

type ConcreteMutationChecker struct {
	VerifiedOwners []*common.Owner
}

type ConcreteOwnerResolver struct {
	// contains filtered or unexported fields
}

type DecisionResult struct {
	Allow                 bool
	Verified              bool
	ReasonCode            int
	Message               string
	AllowByDetectOnlyMode bool
	AllowByBreakGlassMode bool
}

type FindOwnerResult struct {
	Ref   *common.ResourceRef
	Owner *common.Owner
	Error *common.CheckError
}

type Loader struct {
	Config            *config.EnforcerConfig
	SignPolicy        *ctlconfig.SignPolicyLoader
	RPP               *ctlconfig.RPPLoader
	CRPP              *ctlconfig.CRPPLoader
	ResourceSignature *ctlconfig.ResSigLoader
}

type MAResult struct {
	IsMutated   bool
	Diff        string
	Filtered    string
	MatchedKeys []string
	Checked     bool
	Msg         string
	Error       error
}

type Ma4kInput struct {
	Before       map[string]interface{} `json:"before"`
	After        map[string]interface{} `json:"after"`
	Namespace    string                 `json:"namespace"`
	UserName     string                 `json:"userName"`
	Kind         string                 `json:"kind"`
	Name         string                 `json:"name"`
	UserGroups   []string               `json:"userGroups"`
	IntegrityRef *common.ResourceRef    `json:"owner"`
}

type MutationChecker interface {
	Eval(reqc *common.ReqContext, rules []*protect.AttrsPattern) (*common.MutationEvalResult, error)
}

type OwnerResolver interface {
	Find(reqc *common.ReqContext) (*common.ResolveOwnerResult, error)
}

type RequestHandler struct {
	// contains filtered or unexported fields
}