policies

Documentation

Overview

Package policy provides policy and permission interfaces for OpenBotStack.

Policy enforcement happens in the control plane BEFORE execution. The runtime blindly executes; the control plane governs.

Index

• type AllowAllEnforcer
  • func NewAllowAllEnforcer() *AllowAllEnforcer
  • func (e *AllowAllEnforcer) IsAllowed(action string, context map[string]any) (bool, error)
• type PolicyEnforcer

Types

type AllowAllEnforcer

type AllowAllEnforcer struct{}

AllowAllEnforcer is a stub implementation of PolicyEnforcer that permits all actions.

func NewAllowAllEnforcer

func NewAllowAllEnforcer() *AllowAllEnforcer

NewAllowAllEnforcer creates a new AllowAllEnforcer.

func (*AllowAllEnforcer) IsAllowed

func (e *AllowAllEnforcer) IsAllowed(action string, context map[string]any) (bool, error)

IsAllowed always returns true, nil.

type PolicyEnforcer

type PolicyEnforcer interface {
	// IsAllowed checks if the action is permitted for the given context.
	IsAllowed(action string, context map[string]any) (bool, error)
}

PolicyEnforcer checks whether an action is permitted. Full definition deferred to future implementation.