This file defines the Cedar authorizer.

def Cedar.Spec.satisfied (policy : Policy) (req : Request) (entities : Entities) : Bool

Equations

• Cedar.Spec.satisfied policy req entities = decide (Cedar.Spec.evaluate policy.toExpr req entities = Except.ok (Cedar.Spec.Value.prim (Cedar.Spec.Prim.bool true)))

def Cedar.Spec.satisfiedWithEffect (effect : Effect) (policy : Policy) (req : Request) (entities : Entities) : Option PolicyID

Equations

• Cedar.Spec.satisfiedWithEffect effect policy req entities = if (policy.effect == effect && Cedar.Spec.satisfied policy req entities) = true then some policy.id else none

def Cedar.Spec.satisfiedPolicies (effect : Effect) (policies : Policies) (req : Request) (entities : Entities) : Data.Set PolicyID

Equations

• Cedar.Spec.satisfiedPolicies effect policies req entities = Cedar.Data.Set.make (List.filterMap (fun (x : Cedar.Spec.Policy) => Cedar.Spec.satisfiedWithEffect effect x req entities) policies)

def Cedar.Spec.hasError (policy : Policy) (req : Request) (entities : Entities) : Bool

Equations

• Cedar.Spec.hasError policy req entities = match Cedar.Spec.evaluate policy.toExpr req entities with | Except.ok a => false | Except.error a => true

def Cedar.Spec.errored (policy : Policy) (req : Request) (entities : Entities) : Option PolicyID

This function is analogous to satisfiedWithEffect in that it returns Option PolicyID, but not analogous to satisfiedWithEffect in that it does not consider the policy's effect.

Equations

• Cedar.Spec.errored policy req entities = if Cedar.Spec.hasError policy req entities = true then some policy.id else none

def Cedar.Spec.errorPolicies (policies : Policies) (req : Request) (entities : Entities) : Data.Set PolicyID

Equations

• Cedar.Spec.errorPolicies policies req entities = Cedar.Data.Set.make (List.filterMap (fun (x : Cedar.Spec.Policy) => Cedar.Spec.errored x req entities) policies)

def Cedar.Spec.isAuthorized (req : Request) (entities : Entities) (policies : Policies) : Response

Equations

• One or more equations did not get rendered due to their size.