Skip to main content
access/cedar.CedarReleaseDerivation

Hierarchy

  • CedarInformation ↳ CedarReleaseDerivation

Constructors

constructor

• new CedarReleaseDerivation(program, tables)

Parameters

Overrides

CedarInformation.constructor

Properties

model

• Protected Readonly model: AccessProgram

Inherited from

CedarInformation.model

tables

• Protected Readonly tables: Record<string, readonly Row[]>

Inherited from

CedarInformation.tables

Methods

step

▸ Protected step(n?): void

Parameters

Returns

void

Inherited from

CedarInformation.step

type

▸ Protected type(name): Object

Parameters

Returns

Object

Inherited from

CedarInformation.type

ancestors

▸ Protected ancestors(name): string[]

Parameters

Returns

string[]

Inherited from

CedarInformation.ancestors

row

▸ Protected row(table, key): Row | null

Parameters

Returns

Row | null

Inherited from

CedarInformation.row

resourceRow

▸ Protected resourceRow(on): Row | null

Parameters

Returns

Row | null

Inherited from

CedarInformation.resourceRow

chain

▸ Protected chain(on): ResourceRef[] | null

Parameters

Returns

ResourceRef[] | null

Inherited from

CedarInformation.chain

markingClauses

▸ Protected markingClauses(type, keys): Clause[]

Parameters

Returns

Clause[]

Inherited from

CedarInformation.markingClauses

markingRequirements

▸ markingRequirements(type, keys): Clause[]

Parameters

Returns

Clause[]

Inherited from

CedarInformation.markingRequirements

add

▸ Protected add(into, clauses): void

Parameters

Returns

void

Inherited from

CedarInformation.add

self

▸ Protected self(on): Clause[]

Parameters

Returns

Clause[]

Inherited from

CedarInformation.self

carried

▸ Protected carried(name, keys): Clause[]

Parameters

Returns

Clause[]

Inherited from

CedarInformation.carried

restrictions

▸ Protected restrictions(on, child?): Clause[] | null

Parameters

Returns

Clause[] | null

Inherited from

CedarInformation.restrictions

protection

▸ protection(on): Clause[] | null Neutral protection facts also used by placement and retained-grant checks.

Parameters

Returns

Clause[] | null

Inherited from

CedarInformation.protection

assignmentRestrictions

▸ Protected assignmentRestrictions(on): Clause[] | null

Parameters

Returns

Clause[] | null

Inherited from

CedarInformation.assignmentRestrictions

restrictingTypes

▸ Protected restrictingTypes(name): Set<string>

Parameters

Returns

Set<string>

Inherited from

CedarInformation.restrictingTypes

assignmentRestrictingTypes

▸ Protected assignmentRestrictingTypes(resource?): Set<string>

Parameters

Returns

Set<string>

Inherited from

CedarInformation.assignmentRestrictingTypes

readPermissions

▸ readPermissions(subject): string[] | null

Parameters

Returns

string[] | null

Inherited from

CedarInformation.readPermissions

equalities

▸ Protected equalities(subject): Map<string, unknown>

Parameters

Returns

Map<string, unknown>

Inherited from

CedarInformation.equalities

scope

▸ scope(subject): ResourceRef | null

Parameters

Returns

ResourceRef | null

Inherited from

CedarInformation.scope

source

▸ source(subject): InformationSummary | null

Parameters

Returns

InformationSummary | null

Inherited from

CedarInformation.source

destinations

▸ destinations(destination): Clause[][] | null

Parameters

Returns

Clause[][] | null

Inherited from

CedarInformation.destinations

releaseSource

▸ releaseSource(subject, declassify?): ReleaseInformation | null Resolve a neutral population descriptor into explicit release demands.

Parameters

Returns

ReleaseInformation | null

ordinary

▸ ordinary(destination): boolean

Parameters

Returns

boolean

derive

▸ derive(subjects, suppliedDestination, suppliedContext): CedarReleasePlan The native release owner’s complete route/source/carrier reduction. The resulting permission, range, read and identity judgments are deliberately retained as judgments; route selection supplies none of their answers. No application predicate is evaluated during derivation.

Parameters

Returns

CedarReleasePlan