Hierarchy
-
CedarInformation↳CedarReleaseDerivation
Constructors
constructor
• new CedarReleaseDerivation(program, tables)
Parameters
Overrides
CedarInformation.constructorProperties
model
•Protected Readonly model: AccessProgram
Inherited from
CedarInformation.modeltables
•Protected Readonly tables: Record<string, readonly Row[]>
Inherited from
CedarInformation.tablesMethods
step
▸Protected step(n?): void
Parameters
Returns
void
Inherited from
CedarInformation.steptype
▸Protected type(name): Object
Parameters
Returns
Object
Inherited from
CedarInformation.typeancestors
▸Protected ancestors(name): string[]
Parameters
Returns
string[]
Inherited from
CedarInformation.ancestorsrow
▸Protected row(table, key): Row | null
Parameters
Returns
Row | null
Inherited from
CedarInformation.rowresourceRow
▸Protected resourceRow(on): Row | null
Parameters
Returns
Row | null
Inherited from
CedarInformation.resourceRowchain
▸Protected chain(on): ResourceRef[] | null
Parameters
Returns
ResourceRef[] | null
Inherited from
CedarInformation.chainmarkingClauses
▸Protected markingClauses(type, keys): Clause[]
Parameters
Returns
Clause[]
Inherited from
CedarInformation.markingClausesmarkingRequirements
▸ markingRequirements(type, keys): Clause[]
Parameters
Returns
Clause[]
Inherited from
CedarInformation.markingRequirementsadd
▸Protected add(into, clauses): void
Parameters
Returns
void
Inherited from
CedarInformation.addself
▸Protected self(on): Clause[]
Parameters
Returns
Clause[]
Inherited from
CedarInformation.selfcarried
▸Protected carried(name, keys): Clause[]
Parameters
Returns
Clause[]
Inherited from
CedarInformation.carriedrestrictions
▸Protected restrictions(on, child?): Clause[] | null
Parameters
Returns
Clause[] | null
Inherited from
CedarInformation.restrictionsprotection
▸ protection(on): Clause[] | null
Neutral protection facts also used by placement and retained-grant checks.
Parameters
Returns
Clause[] | null
Inherited from
CedarInformation.protectionassignmentRestrictions
▸Protected assignmentRestrictions(on): Clause[] | null
Parameters
Returns
Clause[] | null
Inherited from
CedarInformation.assignmentRestrictionsrestrictingTypes
▸Protected restrictingTypes(name): Set<string>
Parameters
Returns
Set<string>
Inherited from
CedarInformation.restrictingTypesassignmentRestrictingTypes
▸Protected assignmentRestrictingTypes(resource?): Set<string>
Parameters
Returns
Set<string>
Inherited from
CedarInformation.assignmentRestrictingTypesreadPermissions
▸ readPermissions(subject): string[] | null
Parameters
Returns
string[] | null
Inherited from
CedarInformation.readPermissionsequalities
▸Protected equalities(subject): Map<string, unknown>
Parameters
Returns
Map<string, unknown>
Inherited from
CedarInformation.equalitiesscope
▸ scope(subject): ResourceRef | null
Parameters
Returns
ResourceRef | null
Inherited from
CedarInformation.scopesource
▸ source(subject): InformationSummary | null
Parameters
Returns
InformationSummary | null
Inherited from
CedarInformation.sourcedestinations
▸ destinations(destination): Clause[][] | null
Parameters
Returns
Clause[][] | null
Inherited from
CedarInformation.destinationsreleaseSource
▸ releaseSource(subject, declassify?): ReleaseInformation | null
Resolve a neutral population descriptor into explicit release demands.
Parameters
Returns
ReleaseInformation | null
ordinary
▸ ordinary(destination): boolean
Parameters
Returns
boolean
derive
▸ derive(subjects, suppliedDestination, suppliedContext): CedarReleasePlan
The native release owner’s complete route/source/carrier reduction.
The resulting permission, range, read and identity judgments
are deliberately retained as judgments; route selection supplies none of
their answers. No application predicate is evaluated during derivation.
Parameters
Returns
CedarReleasePlan