policy-pattern 0.2.4__tar.gz → 0.2.5__tar.gz

{policy_pattern-0.2.4 → policy_pattern-0.2.5}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: policy-pattern
-Version: 0.2.4
+Version: 0.2.5
 Summary: A minimal, embeddable ReBAC authorization engine for Python, inspired by Google Zanzibar.
 Keywords: python,authorization,access-control,rebac,zanzibar,security
 Author: Guillem Pozo Sebastián
@@ -77,7 +77,27 @@ See [Architecture § Scope](docs/architecture.md#scope) for what's planned (v1.x
 ## Example
 
 ```python
+from policy_pattern.adapters.memory import MemoryTupleStore
+from policy_pattern.evaluator import Evaluator
+from policy_pattern.models import (
+    DirectSubject,
+    Model,
+    Mutation,
+    ObjectReference,
+    Reference,
+    Relation,
+    Tuple,
+    TupleToUserset,
+    Type,
+    Union,
+)
+
 model = Model()
+model.types["folder"] = Type(
+    name="folder",
+    relations={"owner": Relation(allowed_subject_types=("user",))},
+    permissions={"viewer": Reference(name="owner")},
+)
 model.types["document"] = Type(
     name="document",
     relations={
@@ -90,8 +110,25 @@ model.types["document"] = Type(
 )
 compiled = model.compile()
 
+store = MemoryTupleStore()
+alice = DirectSubject(object=ObjectReference(type="user", id="alice"))
+engineering = ObjectReference(type="folder", id="engineering")
+document_42 = ObjectReference(type="document", id="42")
+
+store.write_tuples(
+    Mutation(
+        additions=frozenset(
+            {
+                Tuple(subject=alice, relation="owner", object=engineering),
+                Tuple(subject=DirectSubject(object=engineering), relation="parent", object=document_42),
+            }
+        ),
+        deletions=frozenset(),
+    )
+)
+
 evaluator = Evaluator(model=compiled, store=store)
-evaluator.check(alice, "viewer", document_42)
+evaluator.check(alice, "viewer", document_42)  # True — alice owns the parent folder
 ```
 
 `viewer` here means "the document's own owner, or the owner of whatever folder it lives in" — a document under

{policy_pattern-0.2.4 → policy_pattern-0.2.5}/README.md

@@ -52,7 +52,27 @@ See [Architecture § Scope](docs/architecture.md#scope) for what's planned (v1.x
 ## Example
 
 ```python
+from policy_pattern.adapters.memory import MemoryTupleStore
+from policy_pattern.evaluator import Evaluator
+from policy_pattern.models import (
+    DirectSubject,
+    Model,
+    Mutation,
+    ObjectReference,
+    Reference,
+    Relation,
+    Tuple,
+    TupleToUserset,
+    Type,
+    Union,
+)
+
 model = Model()
+model.types["folder"] = Type(
+    name="folder",
+    relations={"owner": Relation(allowed_subject_types=("user",))},
+    permissions={"viewer": Reference(name="owner")},
+)
 model.types["document"] = Type(
     name="document",
     relations={
@@ -65,8 +85,25 @@ model.types["document"] = Type(
 )
 compiled = model.compile()
 
+store = MemoryTupleStore()
+alice = DirectSubject(object=ObjectReference(type="user", id="alice"))
+engineering = ObjectReference(type="folder", id="engineering")
+document_42 = ObjectReference(type="document", id="42")
+
+store.write_tuples(
+    Mutation(
+        additions=frozenset(
+            {
+                Tuple(subject=alice, relation="owner", object=engineering),
+                Tuple(subject=DirectSubject(object=engineering), relation="parent", object=document_42),
+            }
+        ),
+        deletions=frozenset(),
+    )
+)
+
 evaluator = Evaluator(model=compiled, store=store)
-evaluator.check(alice, "viewer", document_42)
+evaluator.check(alice, "viewer", document_42)  # True — alice owns the parent folder
 ```
 
 `viewer` here means "the document's own owner, or the owner of whatever folder it lives in" — a document under

{policy_pattern-0.2.4 → policy_pattern-0.2.5}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "policy-pattern"
-version = "0.2.4"
+version = "0.2.5"
 description = "A minimal, embeddable ReBAC authorization engine for Python, inspired by Google Zanzibar."
 readme = "README.md"
 license = "Apache-2.0"

{policy_pattern-0.2.4 → policy_pattern-0.2.5}/pyproject.toml.orig

@@ -1,6 +1,6 @@
 [project]
 name = "policy-pattern"
-version = "0.2.4"
+version = "0.2.5"
 description = "A minimal, embeddable ReBAC authorization engine for Python, inspired by Google Zanzibar."
 readme = "README.md"
 authors = [