rbac.h

Go to the documentation of this file.

// Copyright (C) 2026 Internet Systems Consortium, Inc. ("ISC")
//
// This Source Code Form is subject to the terms of the Mozilla Public
// License, v. 2.0. If a copy of the MPL was not distributed with this
// file, You can obtain one at http://mozilla.org/MPL/2.0/.
 
#ifndef RBAC_H
#define RBAC_H
 
#include <cc/simple_parser.h>
 
#include <rbac/rbac_acl.h>
#include <rbac/rbac_response_filter.h>
#include <rbac/rbac_role.h>
 
namespace isc {
namespace rbac {

class RoleConfig;

typedef boost::shared_ptr<RoleConfig> RoleConfigPtr;

typedef std::map<std::string, RoleConfigPtr> RoleConfigTable;

class RoleConfig {
public:
    static const data::SimpleKeywords ROLE_PARAMETERS;

    RoleConfig(const std::string& name,
               const AclPtr& accept, const AclPtr& reject,
               bool others, bool preference,
               const ResponseFilterList& response_filters)
        : name_(name), accept_(accept), reject_(reject),
          others_(others), preference_(preference),
          response_filters_(response_filters) {
    }

    virtual ~RoleConfig() = default;

    std::string name_;

    AclPtr accept_;

    AclPtr reject_;

    bool others_;

    bool preference_;

    ResponseFilterList response_filters_;

    bool match(const std::string& command) const {
        if (preference_) {
            if (accept_ && accept_->match(command)) {
                return (true);
            }
            if (reject_ && reject_->match(command)) {
                return (false);
            }
        } else {
            if (reject_ && reject_->match(command)) {
                return (false);
            }
            if (accept_ && accept_->match(command)) {
                return (true);
            }
        }
        return (others_);
    }

    bool filter(const std::string& command, data::ConstElementPtr body) const {
        bool modified = false;
        for (auto const& response_filter : response_filters_) {
            if (response_filter) {
                if (response_filter->filter(command, *this, body)) {
                    modified = true;
                }
            }
        }
        return (modified);
    }

    static RoleConfigPtr getConfig(const std::string& role);

    static RoleConfigPtr parse(data::ConstElementPtr cfg,
                               std::string name = "");

    static http::HttpResponseJsonPtr
    createReject(const http::HttpRequestPtr& request,
                 const http::HttpStatusCode& status_code);
};

extern RolePtr roleAssign;

extern RoleConfigTable roleConfigTable;

extern RoleConfigPtr defaultRoleConfig;

extern RoleConfigPtr unknownRoleConfig;
 
} // end of namespace rbac
} // end of namespace isc
#endif