Модель хранилища

Unlike the policy, the model can only be loaded, it cannot be saved. We believe that the model is not a dynamic component and should not be modified at runtime, so we have not implemented an API to save the model into storage.

However, there is good news. We provide three equivalent ways to load a model, either statically or dynamically:

Загрузить модель из .CONF файла

Это самый распространенный способ использования Касбина. It is easy to understand for beginners and convenient for sharing when you need help from the Casbin team.

The content of the .CONF file examples/rbac_model.conf is as follows:

[request_definition]
r = sub, obj, act

[policy_definition]
p = sub, obj, act

[role_definition]
g = _, _

[policy_effect]
e = some(where (p.eft == allow))

[matchers]
m = g(r.sub, p.sub) && r.obj == p.obj && r.act == p.act

Then you can load the model file as follows:

e := casbin.NewEnforcer("examples/rbac_model.conf", "examples/rbac_policy.csv")

Загрузить модель из кода

The model can be initialized dynamically from code instead of using a .CONF file. Вот пример модели RBAC:

import (
    "github.com/casbin/casbin/casbin/v2"
    "github.com/casbin/casbin/v2/model"
    "github.com/casbin/casbin/v2/persist/file-adapter"
)

// Инициализация модели из кода Go.
m := model.NewModel()
m.AddDef("r", "r", "sub, obj, act")
m.AddDef("p", "p", "sub, obj, act")
m.AddDef("g", "_, _")
m.Def("e", "e", "где" (p. ft == allow))")
m.AddDef("m", "g(r.sub, p.sub) && r.obj == p. bj && r.act == p.act")

// Загрузить правила с адаптера файлов .CSV.
// Replace it with your adapter to avoid using files.
a := fileadapter.NewAdapter("examples/rbac_policy.csv")

// Создание ссылки.
e := casbin.NewEnforcer(m, a)

Загрузить модель из строки

Alternatively, you can load the entire model text from a multi-line string. The advantage of this approach is that you do not need to maintain a model file.

import (
    "github.com/casbin/casbin/v2"
    "github.com/casbin/casbin/v2/model"
)

// Инициализация модели из строки.
текст :=
`
[request_definition]
r = sub, obj, act

[policy_definition]
p = sub, obj, act

[role_definition]
g = _, _

[policy_effect]
e = как-то (стр. ft == допустить))

[matchers]
м = g(r.sub, p. ub) && r.obj == p.obj && r.act == p. ct
`
m, _ := model.NewModelFromString(text)

// Загрузить правила политики из CSV файла.
// Replace it with your adapter to avoid using files.
a := fileadapter.NewAdapter("examples/rbac_policy.csv")

// Создание ссылки.
e := casbin.NewEnforcer(m, a)