...
conf 文件
# Request definition [request_definition] r = sub, obj, act # Policy definition [policy_definition] p = sub, obj, act # Policy effect [policy_effect] e = some(where (p.eft == allow)) # Matchers [matchers] m = r.sub == p.sub && r.obj == p.obj && r.act == p.act
...
policy.csv
p, alice, data1, read p, bob, data2, write
policy 代入 conf 中的 request_definition
待校验参数 代入 conf中的 policy_definition
执行matchers 出True or False ,最后 policy_effect 给出判定结果
来源
https://blog.csdn.net/weixin_45566022/article/details/108880608
https://www.kancloud.cn/a173512/php_note/1690826
... 编辑器