[Question] role cross reference is it harmless？

[HimawariSunFlower]

Want to prioritize this issue? Try:

---

What's your scenario? What do you want to achieve?
i'm building a RBAC access control system,and i wanna kown my AddRolesForUser verify Is it necessary?

Your model:

[request_definition]
r = sub, obj, act

[policy_definition]
p = sub, obj, act

[role_definition]
g = _, _

[policy_effect]
e = some(where (p.eft == allow))

[matchers]
m = g(r.sub, p.sub) && r.obj == p.obj && r.act == p.act

Your policy:

p, data1_user, data1, read
p, data2_admin, data2, read
p, data2_admin, data2, write

g, data1_user, data2_admin

Your request(s):

if Enforcer.AddRolesForUser("data2_admin","data1_user") pass ,policy will add "g,data2_admin,data1_user".Is it harmless？or i need check param before use function.i'm tried testing,it's look like harmless,but i wanna konw a true answer.

[casbin-bot]

@tangyang9464 @JalinWang

[hsluoyz]

@JalinWang

/cc @tangyang9464

[JalinWang]

@HimawariSunFlower Thanks for concerning.
I think it's okay. I don't see any problem till now.

[hsluoyz]

Closed as resolved