1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
package executor
import (
"context"
)
type DenyExecutor struct {
RecordType string
Message string
}
func NewDeny(recordType, message string) *DenyExecutor {
return &DenyExecutor{RecordType: recordType, Message: message}
}
func (d *DenyExecutor) Kind() string {
return d.RecordType
}
func (d *DenyExecutor) Execute(ctx context.Context, record PolicyRecord, eval *EvalContext, permissions map[string]any) (Verdict, error) {
return Deny(d.Message, d.RecordType), nil
}
func (d *DenyExecutor) Scope(ctx context.Context, record PolicyRecord, input ScopeInput) (Verdict, bool, error) {
return Deny(d.Message, d.RecordType), true, nil
}
