Package io.grpc.xds.internal.rbac.engine
Class GrpcAuthorizationEngine.PolicyMatcher
- java.lang.Object
-
- io.grpc.xds.internal.rbac.engine.GrpcAuthorizationEngine.PolicyMatcher
-
- All Implemented Interfaces:
GrpcAuthorizationEngine.Matcher
- Direct Known Subclasses:
AutoValue_GrpcAuthorizationEngine_PolicyMatcher
- Enclosing class:
- GrpcAuthorizationEngine
public abstract static class GrpcAuthorizationEngine.PolicyMatcher extends java.lang.Object implements GrpcAuthorizationEngine.Matcher
Implements a top levelGrpcAuthorizationEngine.Matcher
for a single RBAC policy configuration per envoy protocol: https://www.envoyproxy.io/docs/envoy/latest/api-v3/config/rbac/v3/rbac.proto#config-rbac-v3-policy.Currently we only support matching some of the request fields. Those unsupported fields are considered not match until we stop ignoring them.
-
-
Constructor Summary
Constructors Constructor Description PolicyMatcher()
-
Method Summary
All Methods Static Methods Instance Methods Abstract Methods Concrete Methods Modifier and Type Method Description static GrpcAuthorizationEngine.PolicyMatcher
create(java.lang.String name, GrpcAuthorizationEngine.OrMatcher permissions, GrpcAuthorizationEngine.OrMatcher principals)
Constructs a matcher for one RBAC policy.boolean
matches(GrpcAuthorizationEngine.EvaluateArgs args)
abstract java.lang.String
name()
abstract GrpcAuthorizationEngine.OrMatcher
permissions()
abstract GrpcAuthorizationEngine.OrMatcher
principals()
-
-
-
Method Detail
-
name
public abstract java.lang.String name()
-
permissions
public abstract GrpcAuthorizationEngine.OrMatcher permissions()
-
principals
public abstract GrpcAuthorizationEngine.OrMatcher principals()
-
create
public static GrpcAuthorizationEngine.PolicyMatcher create(java.lang.String name, GrpcAuthorizationEngine.OrMatcher permissions, GrpcAuthorizationEngine.OrMatcher principals)
Constructs a matcher for one RBAC policy.
-
matches
public boolean matches(GrpcAuthorizationEngine.EvaluateArgs args)
- Specified by:
matches
in interfaceGrpcAuthorizationEngine.Matcher
-
-