package cedar_policy_core

Get desktop application:
View/edit binary Protocol Buffers messages

Used in: TemplateBody

• oneof data

  • ActionConstraint.Any any = 1

  • ActionConstraint.InMessage in = 2

  • ActionConstraint.EqMessage eq = 3

Zero-arity constructors represented as enums with only one member

Used in: ActionConstraint

• unit = 0

  the one option for the enum

Used in: ActionConstraint

• optional EntityUid euid = 1

Used in: ActionConstraint

• repeated EntityUid euids = 1

Used in: TemplateBody

• Forbid = 0

• Permit = 1

• repeated Entity entities = 1

Used in: Entities

• optional EntityUid uid = 1

• map<string, Expr> attrs = 2

• repeated EntityUid ancestors = 3

• map<string, Expr> tags = 4

an EntityReference may either be an EntityUid or a Slot.

Used in: PrincipalOrResourceConstraint.EqMessage, PrincipalOrResourceConstraint.InMessage, PrincipalOrResourceConstraint.IsInMessage

• oneof data

  • EntityReference.Slot slot = 1

  • EntityUid euid = 2

if it's a Slot, we know from context which Slot it is, so we don't need a `SlotId` and can just use this one-armed enum

Used in: EntityReference

• unit = 0

  the one option for the enum

Used in: ActionConstraint.EqMessage, ActionConstraint.InMessage, Entity, EntityReference, Expr.Literal, Policy, Request, cedar_policy_validator.ActionDecl

• optional Name ty = 1

• string eid = 2

Used in: Entity, Expr.And, Expr.BinaryApp, Expr.ExtensionFunctionApp, Expr.GetAttr, Expr.HasAttr, Expr.If, Expr.Is, Expr.Like, Expr.Or, Expr.Record, Expr.Set, Expr.UnaryApp, Request, TemplateBody

• oneof expr_kind

  • Expr.Literal lit = 1

  • Expr.Var var = 2

  • SlotId slot = 3

  • Expr.If if = 4

  • Expr.And and = 5

  • Expr.Or or = 6

  • Expr.UnaryApp uApp = 7

  • Expr.BinaryApp bApp = 8

  • Expr.ExtensionFunctionApp extApp = 9

  • Expr.GetAttr getAttr = 10

  • Expr.HasAttr hasAttr = 11

  • Expr.Like like = 12

  • Expr.Is is = 13

  • Expr.Set set = 14

  • Expr.Record record = 15

Used in: Expr

• optional Expr left = 1

• optional Expr right = 2

Used in: Expr

• BinaryApp.Op op = 1

• optional Expr left = 2

• optional Expr right = 3

Used in: BinaryApp

• Eq = 0

• Less = 1

• LessEq = 2

• Add = 3

• Sub = 4

• Mul = 5

• In = 6

• Contains = 7

• ContainsAll = 8

• ContainsAny = 9

• GetTag = 10

• HasTag = 11

Used in: Expr

• optional Name fn_name = 1

• repeated Expr args = 2

Used in: Expr

• optional Expr expr = 1

• string attr = 2

Used in: Expr

• optional Expr expr = 1

• string attr = 2

Used in: Expr

• optional Expr test_expr = 1

• optional Expr then_expr = 2

• optional Expr else_expr = 3

Used in: Expr

• optional Expr expr = 1

• optional Name entity_type = 2

Used in: Expr

• optional Expr expr = 1

• repeated Like.PatternElem pattern = 2

Used in: Like

• oneof data

  • PatternElem.Wildcard wildcard = 1

  • string c = 2

Zero-arity constructors represented as enums with only one member

Used in: PatternElem

• unit = 0

  the one option for the enum

Used in: Expr

• oneof lit

  • bool b = 1

  • int64 i = 2

  • string s = 3

  • EntityUid euid = 4

Used in: Expr

• optional Expr left = 1

• optional Expr right = 2

Used in: Expr

• map<string, Expr> items = 1

Used in: Expr

• repeated Expr elements = 1

Used in: Expr

• UnaryApp.Op op = 1

• optional Expr expr = 2

Used in: UnaryApp

• Not = 0

• Neg = 1

• IsEmpty = 2

Used in: Expr

• Principal = 0

• Action = 1

• Resource = 2

• Context = 3

Used in: EntityUid, Expr.ExtensionFunctionApp, Expr.Is, PrincipalOrResourceConstraint.IsInMessage, PrincipalOrResourceConstraint.IsMessage, cedar_policy_validator.ActionDecl, cedar_policy_validator.EntityDecl, cedar_policy_validator.Type

• string id = 1

• repeated string path = 2

the protobuf Policy message describes either a static or a template-linked policy.

Used in: PolicySet

• string template_id = 1

  ID of the template associated with this policy. For static policies, this is the ID of a zero-slot template.

• optional string link_id = 2

  ID of this policy itself. For static policies, this is omitted/ignored; the ID of the policy is the `template_id`.

• bool is_template_link = 3

  Whether this policy is a static (false) or template-linked (true) policy

• optional EntityUid principal_euid = 4

  Value of the `?principal` slot. Omitted/ignored for templates without the `?principal` slot.

• optional EntityUid resource_euid = 5

  Value of the `?resource` slot. Omitted/ignored for templates without the `?resource` slot.

the protobuf PolicySet message describes a complete policy set, including templates, static policies, and/or template-linked policies.

• repeated TemplateBody templates = 1

  Both templates and static policies are included here, with static policies represented as templates with zero slots.

• repeated Policy links = 2

  All static policies and template-linked policies are included here. Static policies must appear exactly once, and the PolicyID of the static policy must be the same in this list and the above list.

Used in: TemplateBody

• oneof data

  • PrincipalOrResourceConstraint.Any any = 1

  • PrincipalOrResourceConstraint.InMessage in = 2

  • PrincipalOrResourceConstraint.EqMessage eq = 3

  • PrincipalOrResourceConstraint.IsMessage is = 4

  • PrincipalOrResourceConstraint.IsInMessage isIn = 5

Zero-arity constructors represented as enums with only one member

Used in: PrincipalOrResourceConstraint

• unit = 0

  the one option for the enum

Used in: PrincipalOrResourceConstraint

• optional EntityReference er = 1

Used in: PrincipalOrResourceConstraint

• optional EntityReference er = 1

Used in: PrincipalOrResourceConstraint

• optional EntityReference er = 1

• optional Name entity_type = 2

Used in: PrincipalOrResourceConstraint

• optional Name entity_type = 1

• optional EntityUid principal = 1

• optional EntityUid action = 2

• optional EntityUid resource = 3

• map<string, Expr> context = 4

Used in: Expr

• Principal = 0

• Resource = 1

Used in: PolicySet

• string id = 1

• map<string, string> annotations = 3

• Effect effect = 4

• optional PrincipalOrResourceConstraint principal_constraint = 5

• optional ActionConstraint action_constraint = 6

• optional PrincipalOrResourceConstraint resource_constraint = 7

• optional Expr non_scope_constraints = 8