oso-cloud 0.4.0 → 0.5.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ae0bc3e70a6d9ea8aeb9f6f02af64afa1ca65099ea036d75d2a611bed86e3f83
-  data.tar.gz: d46f670990a2ffff708c3a72d54f9bed2da6602e8699d3ffab3108d18750851a
+  metadata.gz: 7358c36375c04ca97c57ca8f326b49f1610b3a256aed07550a61a0f8208484aa
+  data.tar.gz: bf8823521cd89afe363c7a1241f7642c8badf49dc57a0a785330d129b963fe68
 SHA512:
-  metadata.gz: 118581772825e045e4f1237a43d8d8077fef30c2f8118d9886ab5d3bbfdbdfa1de383216b2426520a0aee0e0b61239a0153c177cac48de874b4832fac87b50a3
-  data.tar.gz: 6a66ab888f95a43e64ae69e3d8e9c378077da17d5dd580185b25b77371c532bb2ec169df9cdd6781cf0f43b11a68ded664d26ed9efff0d877f9019e75967a2aa
+  metadata.gz: f7a1a6b6167562bb18fa9be85995a7e14384bc551d5ae0da3201f61aa8ece1c77ad7e1eaba9c47107feb2e7f8a92619cf92d386ce82525df601118f3744b47c2
+  data.tar.gz: '09d05422cfd5af07383c358d734e64a52a8508653c4719b6501c393c7ca52a85c68b26a973efbfca7a1ab5c172c1f01bd4418f8eec6906fabc0ee31bb2bde26a'

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    oso-cloud (0.4.0)
+    oso-cloud (0.5.0)
 
 GEM
   remote: https://rubygems.org/

data/lib/oso/client.rb

@@ -27,6 +27,40 @@ module Oso
       allowed
     end
 
+    def authorize_resources(actor, action, resources)
+      return [] if resources.nil?
+      return [] if resources.empty?
+
+      key = lambda do |type, id|
+        "#{type}:#{id}"
+      end
+
+      resources_extracted = resources.map { |r| extract_typed_id(r) }
+      actor_typed_id = extract_typed_id actor
+      result = POST('authorize_resources', {
+        actor_type: actor_typed_id.type, actor_id: actor_typed_id.id,
+        action: action,
+        resources: resources_extracted
+      })
+
+      return [] if result['results'].empty?
+
+      results_lookup = Hash.new
+      result['results'].each do |r|
+        k = key.call(r['type'], r['id'])
+        if results_lookup[k] == nil
+          results_lookup[k] = true
+        end
+      end
+
+      results = resources.select do |r|
+        e = extract_typed_id(r)
+        exists = results_lookup[key.call(e.type, e.id)]
+        exists
+      end
+      results
+    end
+
     def list(actor, action, resource_type)
       actor_typed_id = extract_typed_id actor
       result = POST('list', {
@@ -37,6 +71,17 @@ module Oso
       results = result['results']
       results
     end
+    
+    def actions(actor, resource)
+      actor_typed_id = extract_typed_id actor
+      resource_typed_id = extract_typed_id resource
+      result = POST('actions', {
+        actor_type: actor_typed_id.type, actor_id: actor_typed_id.id,
+        resource_type: resource_typed_id.type, resource_id: resource_typed_id.id,
+      })
+      results = result['results']
+      results
+    end
 
     def tell(predicate, *args)
       typed_args = args.map { |a| extract_typed_id a}

data/lib/oso/version.rb

@@ -1,3 +1,3 @@
 module Oso
-  VERSION = '0.4.0'.freeze
+  VERSION = '0.5.0'.freeze
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: oso-cloud
 version: !ruby/object:Gem::Version
-  version: 0.4.0
+  version: 0.5.0
 platform: ruby
 authors:
 - Oso Security, Inc.
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2022-05-18 00:00:00.000000000 Z
+date: 2022-05-31 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: minitest