跳转至主要内容

Policy Storage

Casbin implements policy storage through adapters.

从.CSV文件加载策略

Loading from a CSV file is the standard approach. This method is straightforward for beginners and convenient when seeking help from the Casbin team.

Here's an example CSV file examples/rbac_policy.csv:

p, alice, data1, read
p, bob, data2, write
p, data2_admin, data2, read
p, data2_admin, data2, write
g, alice, data2_admin
备注

When CSV fields contain commas, wrap them in double quotes:

p, alice, "data1,data2", read    --correct
p, alice, data1,data2, read --incorrect (the whole phrase "data1,data2" should be wrapped in double quotes)

When fields contain both commas and double quotes, wrap the field in double quotes and escape embedded quotes by doubling them:

p, alice, data, "r.act in (""get"", ""post"")"        --correct
p, alice, data, "r.act in ("get", "post")" --incorrect (you should use "" to escape "")

相关问题:casbin#886

适配器API

方法类型描述
LoadPolicy()基础从存储中加载所有策略规则
SavePolicy()基础将所有策略规则保存到存储中
AddPolicy()可选向存储中添加策略规则
RemovePolicy()可选从存储中移除策略规则
RemoveFilteredPolicy()可选从存储中移除与过滤器匹配的策略规则

数据库存储格式

你的策略文件

p, data2_admin, data2, read
p, data2_admin, data2, write
g, alice, admin

对应的数据库结构(如MySQL)

idptypev0v1v2v3v4v5
1pdata2_admindata2read
2pdata2_admindata2write
3galiceadmin

每列的含义

  • id: Database primary key, not part of the Casbin policy. Generation method depends on the adapter implementation.

  • ptype: Corresponds to p, g, g2, etc.

  • v0-v5: Generic column names that map to policy CSV values from left to right. The number of columns depends on your policy definition. Most adapters implement 6 columns, though theoretically unlimited columns are possible. Submit an issue to the adapter repository if you need more columns.

适配器详情

For more information about the adapter API and database structure design, see /docs/adapters.