lib/actors/security/acl/default_acl_manager.ex

defmodule Actors.Security.Acl.DefaultAclManager do
  @doc """
  `DefaultAclManager`
  """
  alias Actors.Security.Acl.Policy

  alias Actors.Security.Acl.Rules.AclEvaluator
  import Spawn.Utils.Common, only: [to_existing_atom_or_new: 1]

  @behaviour Actors.Security.Acl

  @impl true
  def load_acl_policies(base_policies_path) do
    case Agent.start_link(fn -> %{} end, name: __MODULE__) do
      {:ok, _pid} ->
        Agent.get_and_update(__MODULE__, fn policies ->
          update_policies(base_policies_path, policies)
        end)

      {:error, {:already_started, _pid}} ->
        Agent.get(__MODULE__, fn policies -> policies end)
    end
  end

  @impl true
  def get_policies!(), do: Agent.get(__MODULE__, fn policies -> policies end)

  @impl true
  def is_authorized?(policies, invocation) do
    Enum.any?(policies, fn policy -> evaluate(policy, invocation) end)
  end

  defp evaluate(policy, invocation), do: AclEvaluator.eval(policy, invocation)

  defp update_policies(path, policies) do
    if policies == %{} do
      policies = load_policies(path)
      {policies, policies}
    else
      {policies, policies}
    end
  end

  defp load_policies(base_policies_path) do
    policies =
      Path.wildcard("#{base_policies_path}/*.policy")
      |> Enum.map(fn file -> {file, from_file_to_map(file)} end)
      |> Enum.map(fn {file, data} ->
        %Policy{
          name: get_file_name(file),
          type: Map.get(data, :type, :allow),
          actors: Map.get(data, :actors, ["*"]),
          actions: Map.get(data, :actions, ["*"]),
          actor_systems: Map.get(data, :actor_systems, ["*"])
        }
      end)

    if length(policies) > 0, do: policies, else: [get_default_policy()]
  end

  defp get_default_policy() do
    %Policy{
      name: "default",
      type: :allow,
      actors: ["*"],
      actions: ["*"],
      actor_systems: ["*"]
    }
  end

  defp get_file_name(file) do
    Path.basename(file)
    |> String.replace(".policy", "")
    |> String.trim()
  end

  defp from_file_to_map(path) do
    if File.exists?(path) do
      File.stream!(path)
      |> Stream.map(fn line ->
        [key | value] = String.split(line, ":")
        key = to_existing_atom_or_new(key)

        value =
          case key do
            :type ->
              List.first(value)
              |> String.replace("\n", "")
              |> String.replace("\"", "")
              |> String.trim()
              |> String.downcase()
              |> to_existing_atom_or_new()

            _ ->
              value
              |> Enum.map(fn elem ->
                String.replace(elem, "\n", "")
                |> String.trim()
              end)
          end

        {key, value}
      end)
      |> Enum.into(%{})
    else
      %{}
    end
  end
end