From 8223d7d0e9f967b5c2ac86ed99b209402c692b56 Mon Sep 17 00:00:00 2001
From: Anatoly Prohacky <paa@it-east.ru>
Date: Sat, 30 Jul 2022 18:53:46 +1000
Subject: [PATCH] =?UTF-8?q?=D0=94=D0=BE=D0=B1=D0=B0=D0=B2=D0=BB=D0=B5?=
 =?UTF-8?q?=D0=BD=D0=B8=D0=B5=20rback?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 rbac.go | 211 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 211 insertions(+)
 create mode 100644 rbac.go

diff --git a/rbac.go b/rbac.go
new file mode 100644
index 0000000..3a85062
--- /dev/null
+++ b/rbac.go
@@ -0,0 +1,211 @@
+package rbac
+
+const (
+	SubNull    Subject  = ""
+	AtrDefault Atribute = "*"
+)
+
+type Subject string
+type Object string
+type Action string
+type Atribute string
+
+// Filter defines the filtering
+type RbacList struct {
+	P []RbacRuleP
+	G []RbacRuleG
+}
+
+type RbacRule struct {
+	P RbacRuleP
+	G RbacRuleG
+}
+
+// CasbinRule is the model for casbin rule
+type RbacRuleP struct {
+	Sub Subject
+	Obj Object
+	Act Action
+	Atr Atribute
+}
+
+// CasbinRule is the model for casbin rule
+type RbacRuleG struct {
+	Sub1 Subject
+	Sub2 Subject
+}
+
+// Initialize policy enforce
+func NewRbacRule() *RbacList {
+	rbac := new(RbacList)
+
+	return rbac
+}
+
+//Add policy in table P (policy)
+func (r *RbacList) AddDefP(sub Subject, obj Object, act Action, atr ...Atribute) {
+
+	rb := NewRbacRuleP(sub.String(), obj, act, atr...)
+
+	rr := RbacRuleP{
+		Sub: rb.P.Sub,
+		Obj: rb.P.Obj,
+		Act: rb.P.Act,
+		Atr: rb.P.Atr,
+	}
+
+	r.P = append(r.P, rr)
+}
+
+//Add policy in table P (policy)
+func (r *RbacList) AddDefG(sub1 Subject, sub2 Subject) {
+
+	rr := RbacRuleG{
+		Sub1: Subject(sub1),
+		Sub2: sub2,
+	}
+
+	r.G = append(r.G, rr)
+}
+
+func (r *RbacRuleP) String() string {
+
+	return r.Sub.String() + ", " + r.Obj.String() + ", " + r.Act.String() + ", " + r.Atr.String()
+
+}
+
+func (r *RbacRuleG) String() string {
+
+	return r.Sub1.String() + ", " + r.Sub2.String()
+
+}
+
+// Converted EnforcesPolicy To String
+func (r *RbacList) String() string {
+	var str string
+
+	if len(r.P) > 0 {
+		for _, p := range r.P {
+			str = str + p.String() + "\n"
+
+		}
+	}
+
+	if len(r.G) > 0 {
+		for _, g := range r.G {
+			str = str + g.String() + "\n"
+
+		}
+	}
+	return str
+}
+
+func (s Subject) String() string {
+
+	b := []byte(s)
+
+	return string(b)
+}
+
+func (o Object) String() string {
+
+	b := []byte(o)
+
+	return string(b)
+}
+
+func (a Action) String() string {
+
+	b := []byte(a)
+
+	return string(b)
+}
+
+func (a Atribute) String() string {
+
+	b := []byte(a)
+
+	return string(b)
+}
+
+func NewSubject(login string) Subject {
+
+	s := Subject(login)
+	return s
+}
+
+func NewRbacRuleP(police string, obj Object, act Action, atr ...Atribute) RbacRule {
+	var rule RbacRule
+	var atrList Atribute
+	if len(atr) == 0 {
+		atrList = AtrDefault
+	} else {
+		atrList = atr[0]
+	}
+	rule.G.Sub1 = SubNull
+	rule.P.Sub = NewSubject(police)
+	rule.P.Obj = obj
+	rule.P.Act = act
+	rule.P.Atr = atrList
+	return rule
+}
+
+func NewRbacRuleG(login string, sub Subject) RbacRule {
+	var rule RbacRule
+	rule.P.Sub = SubNull
+	rule.G.Sub1 = NewSubject(login)
+	rule.G.Sub2 = sub
+	return rule
+}
+
+// Enforced
+func (r *RbacList) Enforce(login string, obj Object, act Action) *Atribute {
+
+	// Detected policy list for login
+	for _, enf := range r.P {
+		if login == enf.Sub.String() && enf.Obj == obj && enf.Act == act {
+			return &enf.Atr
+		}
+	}
+
+	// Detected policy list for group
+	var listP []RbacRuleP
+
+	listG := listEnforce(login, r)
+
+	for _, lG := range listG {
+		for _, rdbP := range r.P {
+			if lG == rdbP.Sub || login == rdbP.Sub.String() {
+				listP = append(listP, rdbP)
+			}
+		}
+	}
+
+	for _, enf := range listP {
+		if enf.Obj == obj && enf.Act == act {
+			return &enf.Atr
+		}
+	}
+
+	return nil
+}
+
+// List Enforced for iterated
+func listEnforce(login string, rules *RbacList) []Subject {
+	var listG []Subject
+
+	for _, rdbG := range rules.G {
+		if login == rdbG.Sub1.String() {
+			listG = append(listG, rdbG.Sub2)
+		}
+	}
+
+	for _, listFull := range listG {
+		if login != listFull.String() {
+			lG := listEnforce(listFull.String(), rules)
+			listG = append(listG, lG...)
+		}
+	}
+
+	return listG
+}