tomzx\PolicyEvaluator\Evaluator

Complexity

Total Complexity

14

Size/Duplication

Total Lines	100
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	1

Test Coverage

Coverage

88.57%

Importance

Changes

0

6 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	10	2
A	getStatements()	0	4	1
A	canExecuteActionOnResource()	0	14	3
A	fromJsonString()	0	4	1
A	parseStatements()	0	11	3
A	matchStatement()	0	16	4

<?php

namespace tomzx\PolicyEvaluator;

class Evaluator
{
    /**
     * @var array
     */
    private $policies;

    /**
     * @var Statement[]
     */
    private $statements;

    /**
     * @param array $policies
     */
    public function __construct(array $policies)
    {
        $this->policies = $policies;

        if ( ! isset($this->policies['Statement'])) {
            throw new \InvalidArgumentException('The policy must have at least one statement.');
        }

        $this->parseStatements($this->policies['Statement']);
    }

    /**
     * @return array
     */
    public function getStatements()
    {
        return $this->statements;
    }

    /**
     * @param string $action
     * @param string $resource
     * @return bool
     */
    public function canExecuteActionOnResource($action, $resource)
    {
        // TODO(tom@tomrochette.com): Validate action and resource are in valid format
        $statements = $this->matchStatement($action, $resource);

        foreach ($statements as $statement) {
            // If we found a matching statement with an explicit deny, deny right away
            if ($statement->getEffect()->isDeny()) {
                return false;
            }
        }

        return ! empty($statements);
    }

    /**
     * @param string $document
     * @return \tomzx\PolicyEvaluator\Evaluator
     */
    public static function fromJsonString($document)
    {
        return new self(json_decode($document, true));
    }

    /**
     * @param array $statements
     */
    private function parseStatements(array $statements)
    {
        if (empty($statements)) {
            throw new \InvalidArgumentException('The policy must have at least one statement.');
        }

        foreach ($statements as $statement) {
            $statement = new Statement($statement);
            $this->statements[] = $statement;
        }
    }

    /**
     * @param string $action
     * @param string $resource
     * @return array
     */
    private function matchStatement($action, $resource)
    {
        $statements = [];
        foreach ($this->statements as $statement) {
            if ( ! $statement->matchesAction($action)) {
                continue;
            }

            if ( ! $statement->matchesResource($resource)) {
                continue;
            }

            $statements[] = $statement;
        }
        return $statements;
    }
}