1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
|
package datasets
import (
"fmt"
v1 "github.com/authzed/spicedb/pkg/proto/dispatch/v1"
"github.com/authzed/spicedb/pkg/tuple"
)
// NewSubjectSetByResourceID creates and returns a map of subject sets, indexed by resource ID.
func NewSubjectSetByResourceID() SubjectSetByResourceID {
return SubjectSetByResourceID{
subjectSetByResourceID: map[string]SubjectSet{},
}
}
// SubjectSetByResourceID defines a helper type which maps from a resource ID to its associated found
// subjects, in the form of a subject set per resource ID.
type SubjectSetByResourceID struct {
subjectSetByResourceID map[string]SubjectSet
}
func (ssr SubjectSetByResourceID) add(resourceID string, subject *v1.FoundSubject) error {
if subject == nil {
return fmt.Errorf("cannot add a nil subject to SubjectSetByResourceID")
}
_, ok := ssr.subjectSetByResourceID[resourceID]
if !ok {
ssr.subjectSetByResourceID[resourceID] = NewSubjectSet()
}
return ssr.subjectSetByResourceID[resourceID].Add(subject)
}
// AddFromRelationship adds the subject found in the given relationship to this map, indexed at
// the resource ID specified in the relationship.
func (ssr SubjectSetByResourceID) AddFromRelationship(relationship tuple.Relationship) error {
return ssr.add(relationship.Resource.ObjectID, &v1.FoundSubject{
SubjectId: relationship.Subject.ObjectID,
CaveatExpression: wrapCaveat(relationship.OptionalCaveat),
})
}
// UnionWith unions the map's sets with the other map of sets provided.
func (ssr SubjectSetByResourceID) UnionWith(other map[string]*v1.FoundSubjects) error {
for resourceID, subjects := range other {
if subjects == nil {
return fmt.Errorf("received nil FoundSubjects in other map of SubjectSetByResourceID's UnionWith for key %s", resourceID)
}
for _, subject := range subjects.FoundSubjects {
if err := ssr.add(resourceID, subject); err != nil {
return err
}
}
}
return nil
}
// IntersectionDifference performs an in-place intersection between the two maps' sets.
func (ssr SubjectSetByResourceID) IntersectionDifference(other SubjectSetByResourceID) error {
for otherResourceID, otherSubjectSet := range other.subjectSetByResourceID {
existing, ok := ssr.subjectSetByResourceID[otherResourceID]
if !ok {
continue
}
err := existing.IntersectionDifference(otherSubjectSet)
if err != nil {
return err
}
if existing.IsEmpty() {
delete(ssr.subjectSetByResourceID, otherResourceID)
}
}
for existingResourceID := range ssr.subjectSetByResourceID {
_, ok := other.subjectSetByResourceID[existingResourceID]
if !ok {
delete(ssr.subjectSetByResourceID, existingResourceID)
continue
}
}
return nil
}
// SubtractAll subtracts all sets in the other map from this map's sets.
func (ssr SubjectSetByResourceID) SubtractAll(other SubjectSetByResourceID) {
for otherResourceID, otherSubjectSet := range other.subjectSetByResourceID {
existing, ok := ssr.subjectSetByResourceID[otherResourceID]
if !ok {
continue
}
existing.SubtractAll(otherSubjectSet)
if existing.IsEmpty() {
delete(ssr.subjectSetByResourceID, otherResourceID)
}
}
}
// IsEmpty returns true if the map is empty.
func (ssr SubjectSetByResourceID) IsEmpty() bool {
return len(ssr.subjectSetByResourceID) == 0
}
// AsMap converts the map into a map for storage in a proto.
func (ssr SubjectSetByResourceID) AsMap() map[string]*v1.FoundSubjects {
mapped := make(map[string]*v1.FoundSubjects, len(ssr.subjectSetByResourceID))
for resourceID, subjectsSet := range ssr.subjectSetByResourceID {
mapped[resourceID] = subjectsSet.AsFoundSubjects()
}
return mapped
}
|
