// Copyright (c) 2015-2021 MinIO, Inc. // // This file is part of MinIO Object Storage stack // // This program is free software: you can redistribute it and/or modify // it under the terms of the GNU Affero General Public License as published by // the Free Software Foundation, either version 3 of the License, or // (at your option) any later version. // // This program is distributed in the hope that it will be useful // but WITHOUT ANY WARRANTY; without even the implied warranty of // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the // GNU Affero General Public License for more details. // // You should have received a copy of the GNU Affero General Public License // along with this program. If not, see . package condition import ( "fmt" "net/http" "reflect" "strconv" ) // nullFunc - Null condition function. It checks whether Key is not present in given // values or not. // For example, // 1. if Key = S3XAmzCopySource and Value = true, at evaluate() it returns whether // S3XAmzCopySource is NOT in given value map or not. // 2. if Key = S3XAmzCopySource and Value = false, at evaluate() it returns whether // S3XAmzCopySource is in given value map or not. // https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_Null type nullFunc struct { k Key value bool } // evaluate() - evaluates to check whether Key is present in given values or not. // Depending on condition boolean value, this function returns true or false. func (f nullFunc) evaluate(values map[string][]string) bool { requestValue, ok := values[http.CanonicalHeaderKey(f.k.Name())] if !ok { requestValue = values[f.k.Name()] } if f.value { return len(requestValue) == 0 } return len(requestValue) != 0 } // key() - returns condition key which is used by this condition function. func (f nullFunc) key() Key { return f.k } // name() - returns "Null" condition name. func (f nullFunc) name() name { return null } func (f nullFunc) String() string { return fmt.Sprintf("%v:%v:%v", null, f.k, f.value) } // toMap - returns map representation of this function. func (f nullFunc) toMap() map[Key]ValueSet { if !f.k.IsValid() { return nil } return map[Key]ValueSet{ f.k: NewValueSet(NewBoolValue(f.value)), } } func newNullFunc(key Key, values ValueSet) (Function, error) { if len(values) != 1 { return nil, fmt.Errorf("only one value is allowed for Null condition") } var value bool for v := range values { switch v.GetType() { case reflect.Bool: value, _ = v.GetBool() case reflect.String: var err error s, _ := v.GetString() if value, err = strconv.ParseBool(s); err != nil { return nil, fmt.Errorf("value must be a boolean string for Null condition") } default: return nil, fmt.Errorf("value must be a boolean for Null condition") } } return &nullFunc{key, value}, nil } // NewNullFunc - returns new Null function. func NewNullFunc(key Key, value bool) (Function, error) { return &nullFunc{key, value}, nil }