# Copyright 2015, Tresys Technology, LLC
# Copyright 2018, Chris PeBenito <pebenito@ieee.org>
#
# SPDX-License-Identifier: LGPL-2.1-only
#
from collections import defaultdict
from typing import NamedTuple, Set
from ..policyrep import Role, Type
from .descriptors import DiffResultDescriptor
from .difference import Difference, SymbolWrapper
from .typing import SymbolCache
from .types import type_wrapper_factory
_roles_cache: SymbolCache[Role] = defaultdict(dict)
class ModifiedRole(NamedTuple):
"""Difference details for a modified role."""
added_types: Set[Type]
removed_types: Set[Type]
matched_types: Set[Type]
def role_wrapper_factory(role: Role) -> SymbolWrapper[Role]:
"""
Wrap roles from the specified policy.
This caches results to prevent duplicate wrapper
objects in memory.
"""
try:
return _roles_cache[role.policy][role]
except KeyError:
r = SymbolWrapper(role)
_roles_cache[role.policy][role] = r
return r
class RolesDifference(Difference):
"""Determine the difference in roles between two policies."""
added_roles = DiffResultDescriptor("diff_roles")
removed_roles = DiffResultDescriptor("diff_roles")
modified_roles = DiffResultDescriptor("diff_roles")
def diff_roles(self) -> None:
"""Generate the difference in roles between the policies."""
self.log.info(
"Generating role differences from {0.left_policy} to {0.right_policy}".format(self))
self.added_roles, self.removed_roles, matched_roles = self._set_diff(
(role_wrapper_factory(r) for r in self.left_policy.roles()),
(role_wrapper_factory(r) for r in self.right_policy.roles()))
self.modified_roles = dict()
for left_role, right_role in matched_roles:
# Criteria for modified roles
# 1. change to type set, or
# 2. change to attribute set (not implemented)
added_types, removed_types, matched_types = self._set_diff(
(type_wrapper_factory(t) for t in left_role.types()),
(type_wrapper_factory(t) for t in right_role.types()))
if added_types or removed_types:
self.modified_roles[left_role] = ModifiedRole(added_types,
removed_types,
matched_types)
#
# Internal functions
#
def _reset_diff(self) -> None:
"""Reset diff results on policy changes."""
self.log.debug("Resetting role differences")
self.added_roles = None
self.removed_roles = None
self.modified_roles = None
