[Question]casbin.NewEnforcer encountered Unforeseen results

[walterlife]

Hi, Team
First of all great library
I encountered a scenario, the same policy, the first check failed, and the check succeeded after 10ms. Have you encountered such a scenario?

2021-01-27 20:00:20.700 INFO model/policy.go:58 Policy:
2021-01-27 20:00:20.700 INFO model/policy.go:60 p: sub, tenant, obj, act, eft, group: [[team_admin 20882020120002 SAVE_SUBGROUP allow ] [team_admin 20882020120002 DELETE_SUBGROUP allow ] [team_admin 20882020120002 QUERY_SUBGROUP_LIST allow ] [team_admin 20882020120002 SAVE_MEMBER allow ] [team_admin 20882020120002 DELETE_MEMBER allow ] [team_admin 20882020120002 QUERY_TEAM_MEMBER_LIST allow ] [team_admin 20882020120002 AdminPermission allow ] [team_admin 20882020120002 WorkerPermission allow ]]
2021-01-27 20:00:20.700 INFO model/policy.go:64 g: , , _: [[1397 team_admin 20882020120002]]
2021-01-27 20:00:20.700 INFO model/assertion.go:86 Role links for: g
2021-01-27 20:00:20.700 INFO rolemanage/role_manager.go:234 1397 < team_admin
2021-01-27 20:00:20.701 INFO v2@v2.12.0/enforcer.go:570 Request: 1397, 20882020120002, WorkerPermission, , 8 ---> false

2021-01-27 20:00:20.722 INFO model/policy.go:58 Policy:
2021-01-27 20:00:20.722 INFO model/policy.go:60 p: sub, tenant, obj, act, eft, group: [[team_admin 20882020120002 SAVE_SUBGROUP allow ] [team_admin 20882020120002 DELETE_SUBGROUP allow ] [team_admin 20882020120002 QUERY_SUBGROUP_LIST allow ] [team_admin 20882020120002 SAVE_MEMBER allow ] [team_admin 20882020120002 DELETE_MEMBER allow ] [team_admin 20882020120002 QUERY_TEAM_MEMBER_LIST allow ] [team_admin 20882020120002 AdminPermission allow ] [team_admin 20882020120002 WorkerPermission allow ]] 
2021-01-27 20:00:20.722 INFO model/policy.go:64 g: , , _: [[1397 team_admin 20882020120002]]
2021-01-27 20:00:20.722 INFO model/assertion.go:86 Role links for: g
2021-01-27 20:00:20.722 INFO rolemanage/role_manager.go:234 1397 < team_admin
2021-01-27 20:00:20.722 INFO v2@v2.12.0/enforcer.go:570 Request: 1397, 20882020120002, WorkerPermission, , 8 ---> true

Above is the problematic data

[nodece]

Could you try casbin.NewSyncedEnforcer?

[hsluoyz]

@walterlife plz add the issue title.

[walterlife]

Could you try casbin.NewSyncedEnforcer?

I use NewEnforcer,Is there any difference between the two

[hsluoyz]

@walterlife can you provide:

1. Example model
2. Example policy
3. Example code

[walterlife]

@walterlife can you provide:

1. Example model

2. Example policy
3. Example code

[hsluoyz]

@walterlife any update?

[walterlife]

[request_definition]
r = sub, tenant, obj, act, group

[policy_definition]
p = sub, tenant, obj, act, eft, group

[role_definition]
g = _, _, _

[policy_effect]
e = some(where (p.eft == allow)) && !some(where (p.eft == deny))

[matchers]
m = (g(r.sub, p.sub, r.tenant) \
    && r.tenant == p.tenant \
    && (r.group == p.group || p.group == '*') \
    && keyMatch(r.obj, p.obj) \
    && regexMatch(r.act, p.act)) \
	|| (r.sub == p.sub && p.tenant == '*' && p.obj == '*') \
    || (r.sub == p.sub && r.tenant == p.tenant && p.obj == '*') \
    || (r.sub == p.sub && r.tenant == p.tenant && p.obj == '*' && r.group == p.group)

above is model config
I use it like this

ok, errs := enforcer.Enforce(rule.V0, rule.V1, res.Resource, action, rule.V5)

[hsluoyz]

@closetool plz take a look.

[kilosonc]

@walterlife may I have your policy file and source code

[walterlife]

@walterlife may I have your policy file and source code

Is it convenient to add WeChat?

[kilosonc]

@walterlife may I have your policy file and source code

Is it convenient to add WeChat?

Can you just paste some piece of pivotal file here

[hsluoyz]

@walterlife plz provide model, policy, request and true + expected response, like this issue: #693

Better tested in: https://casbin.org/en/editor

[hsluoyz]

@closetool

I think his log already contains the rules. We can roughly reproduce it for now.

2021-01-27 20:00:20.722 INFO model/policy.go:60 p: sub, tenant, obj, act, eft, group: [[team_admin 20882020120002 SAVE_SUBGROUP allow ] [team_admin 20882020120002 DELETE_SUBGROUP allow ] [team_admin 20882020120002 QUERY_SUBGROUP_LIST allow ] [team_admin 20882020120002 SAVE_MEMBER allow ] [team_admin 20882020120002 DELETE_MEMBER allow ] [team_admin 20882020120002 QUERY_TEAM_MEMBER_LIST allow ] [team_admin 20882020120002 AdminPermission allow ] [team_admin 20882020120002 WorkerPermission allow ]] 
2021-01-27 20:00:20.722 INFO model/policy.go:64 g: , , _: [[1397 team_admin 20882020120002]]

[kilosonc]

@walterlife I can not make it happen again, so perhaps you used casbin in concurrency, and should use SyncedEnforcer

[hsluoyz]

Closed as resolved.