document

type Document struct {
	Name        string
	Description string
	Package     string
	Roles       []RoleDefinition
	SilentRoles []RoleDefinition
	DefaultRole string
	Policies    []PolicyDefinition
}

type PolicyDefinition struct {
	// Name must begin with either "Allow" or "Deny" prefix. The prefix determines if the returned value when a policy matches will be either Allow or Deny.
	Name string
	// Description expresses the comment that will be added above the generated policy function.
	Description              string
	MatchResourcePathExactly string
	MatchResourcePathByMask  string
	MatchAnyAction           []string
	MatchEachPredicate       []PredicateDefinition
	MatchAnyPredicate        []PredicateDefinition
}

type PredicateDefinition struct {
	Property      string
	DesiredValues []string
}

type RoleDefinition struct {
	Name        string
	Description string
	Policies    []string
}

type TestCaseDefinition struct {
	Action         string
	ResourcePath   []string
	MockPredicates map[string]bool
	ExpectAllow    bool
	ExpectDeny     bool
	ExpectOmit     bool
}