cedar-spec
Definitional implementation of Cedar language and utilities for DRT
File Explorer
Download Latest Version (.zip)- bug_report.yml
- config.yml
- feature_request.yml
- build_and_test_benchmarking_reusable.yml
- build_and_test_cli_reusable.yml
- build_and_test_drt_reusable.yml
- build_and_test_ffi_reusable.yml
- ci.yml
- corpus_generation_test_reusable.yml
- deploy_docs.yml
- run_integration_tests_reusable.yml
- dependabot.yml
- settings.json.default
- policies_10KB.cedar
- policies_1KB.cedar
- access_control.cedar
- access_control.cedarschema
- access_control.cedarschema.json
- access_control.entities.json
- api_gateway.cedar
- api_gateway.cedarschema
- api_gateway.cedarschema.json
- api_gateway.entities.json
- cdn_edge.cedar
- cdn_edge.cedarschema
- cdn_edge.cedarschema.json
- cdn_edge.entities.json
- cicd.cedar
- cicd.cedarschema
- cicd.cedarschema.json
- cicd.entities.json
- cloud_infra.cedar
- cloud_infra.cedarschema
- cloud_infra.cedarschema.json
- cloud_infra.entities.json
- data_platform.cedar
- data_platform.cedarschema
- data_platform.cedarschema.json
- data_platform.entities.json
- database_acl.cedar
- database_acl.cedarschema
- database_acl.cedarschema.json
- database_acl.entities.json
- decimal_simple.cedar
- decimal_simple.cedarschema
- decimal_simple.cedarschema.json
- decimal_simple.entities.json
- deeply_nested.cedar
- deeply_nested.cedarschema
- deeply_nested.cedarschema.json
- deeply_nested.entities.json
- duration_datetime.cedar
- duration_datetime.cedarschema
- duration_datetime.cedarschema.json
- duration_datetime.entities.json
- financial.cedar
- financial.cedarschema
- financial.cedarschema.json
- financial.entities.json
- gaming.cedar
- gaming.cedarschema
- gaming.cedarschema.json
- gaming.entities.json
- healthcare.cedar
- healthcare.cedarschema
- healthcare.cedarschema.json
- healthcare.entities.json
- iot_platform.cedar
- iot_platform.cedarschema
- iot_platform.cedarschema.json
- iot_platform.entities.json
- ip_complex.cedar
- ip_complex.cedarschema
- ip_complex.cedarschema.json
- ip_complex.entities.json
- ip_simple.cedar
- ip_simple.cedarschema
- ip_simple.cedarschema.json
- ip_simple.entities.json
- k8s_policies.cedar
- k8s_policies.cedarschema
- k8s_policies.cedarschema.json
- k8s_policies.entities.json
- many_policies.cedar
- many_policies.cedarschema
- many_policies.cedarschema.json
- many_policies.entities.json
- nested_attrs.cedar
- nested_attrs.cedarschema
- nested_attrs.cedarschema.json
- nested_attrs.entities.json
- rbac_deep.cedar
- rbac_deep.cedarschema
- rbac_deep.cedarschema.json
- rbac_deep.entities.json
- trading.cedar
- trading.cedarschema
- trading.cedarschema.json
- trading.entities.json
- warehouse.cedar
- warehouse.cedarschema
- warehouse.cedarschema.json
- warehouse.entities.json
- entities.json
- gdrive.cedarschema
- gdrive.cedarschema.json
- policies.cedar
- entities.json
- github.cedarschema
- github.cedarschema.json
- policies.cedar
- entities.json
- tinytodo.cedar
- tinytodo.cedarschema
- tinytodo.cedarschema.json
- tinytodo.cedar
- tinytodo.cedarschema
- tasks.json
- compare.rs
- executor.rs
- main.rs
- output.rs
- request.rs
- tasks.rs
- Cargo.toml
- README.md
- protobuf-decode-bytes-entities.rs
- protobuf-decode-bytes-entity.rs
- protobuf-decode-bytes-expression.rs
- protobuf-decode-bytes-policyset.rs
- protobuf-decode-bytes-request.rs
- protobuf-decode-bytes-schema.rs
- protobuf-decode-bytes-template.rs
- protobuf-decode-gen-entities.rs
- protobuf-decode-gen-entity.rs
- protobuf-decode-gen-expression.rs
- protobuf-decode-gen-policyset.rs
- protobuf-decode-gen-request.rs
- protobuf-decode-gen-schema.rs
- protobuf-decode-gen-template.rs
- protobuf-encode-bytes-entities.rs
- protobuf-encode-bytes-entity.rs
- protobuf-encode-bytes-expression.rs
- protobuf-encode-bytes-policyset.rs
- protobuf-encode-bytes-schema.rs
- protobuf-encode-bytes-template.rs
- protobuf-encode-gen-entities.rs
- protobuf-encode-gen-entity.rs
- protobuf-encode-gen-expression.rs
- protobuf-encode-gen-policyset.rs
- protobuf-encode-gen-request.rs
- protobuf-encode-gen-schema.rs
- protobuf-encode-gen-template.rs
- abac-type-directed.rs
- abac.rs
- batched-evaluation-drt.rs
- batched-evaluation-pbt.rs
- common-type-resolution.rs
- concrete-entities-convert-partial-consistency-pbt.rs
- concrete-entities-parse-partial-consistency-pbt.rs
- concrete-request-convert-partial-consistency-pbt.rs
- convert-policy-cedar-to-json.rs
- convert-policy-json-to-cedar.rs
- convert-schema-cedar-to-json.rs
- convert-schema-json-to-cedar.rs
- entity-slicing-drt-type-directed.rs
- entity-validation.rs
- eval-type-directed.rs
- formatter-bytes.rs
- formatter.rs
- input-generation.rs
- json-schema-roundtrip.rs
- level-validation-drt.rs
- policy-set-roundtrip.rs
- protobuf-roundtrip.rs
- pst-ast-roundtrip.rs
- pst-est-roundtrip.rs
- pst-policyset-json-roundtrip.rs
- pst-policyset-text-roundtrip.rs
- rbac-authorizer.rs
- rbac.rs
- request-validation.rs
- roundtrip-entities-bytes.rs
- roundtrip-entities.rs
- roundtrip.rs
- schema-roundtrip.rs
- simple-parser.rs
- symcc-cex-drt.rs
- symcc-cex-pbt.rs
- symcc-check-always-allows-ok.rs
- symcc-check-always-denies-ok.rs
- symcc-check-disjoint-ok.rs
- symcc-check-equivalent-ok.rs
- symcc-check-implies-ok.rs
- symcc-check-never-errors-ok.rs
- symcc-smt-script-drt.rs
- symcc-term-drt-always-allows-multipolicy.rs
- symcc-term-drt-always-allows.rs
- symcc-term-drt-always-denies-multipolicy.rs
- symcc-term-drt-always-denies.rs
- symcc-term-drt-always-matches.rs
- symcc-term-drt-disjoint-multipolicy.rs
- symcc-term-drt-disjoint.rs
- symcc-term-drt-equivalent-multipolicy.rs
- symcc-term-drt-equivalent.rs
- symcc-term-drt-implies-multipolicy.rs
- symcc-term-drt-implies.rs
- symcc-term-drt-matches-disjoint.rs
- symcc-term-drt-matches-equivalent.rs
- symcc-term-drt-matches-implies.rs
- symcc-term-drt-never-errors.rs
- symcc-term-drt-never-matches.rs
- symcc-term-roundtrip-abac-type-directed.rs
- tc-repair-equivalence.rs
- tpe-is-authorized-abstract-drt.rs
- tpe-is-authorized-drt.rs
- tpe-pbt.rs
- tpe-query-action-pbt.rs
- tpe-query-principal-pbt.rs
- tpe-query-resource-pbt.rs
- validation-drt-type-directed.rs
- validation-drt.rs
- validation-pbt-type-directed.rs
- validation-pbt.rs
- wildcard-matching.rs
- abac.rs
- lib.rs
- props.rs
- proto_gen.rs
- pst_equiv.rs
- pst_gen.rs
- roundtrip_entities.rs
- schemas.rs
- symcc.rs
- tpe.rs
- validation_drt.rs
- .gitignore
- Cargo.toml
- dump.rs
- lib.rs
- logger.rs
- parsing_utils.rs
- tests.rs
- benchmark.rs
- build_lean_lib.sh
- Cargo.toml
- create_corpus.sh
- fuzz_manager.py
- initialize_corpus.sh
- README.md
- set_env_vars.sh
- synthesize_tests.sh
- Int64.lean
- List.lean
- LT.lean
- Map.lean
- Set.lean
- SizeOf.lean
- PolicySlice.lean
- Datetime.lean
- Decimal.lean
- IPAddr.lean
- Util.lean
- Authorizer.lean
- Entities.lean
- Evaluator.lean
- Expr.lean
- Ext.lean
- ExtFun.lean
- Policy.lean
- Request.lean
- Response.lean
- Slice.lean
- Template.lean
- Value.lean
- Wildcard.lean
- Authorizer.lean
- Compiler.lean
- Concretizer.lean
- Data.lean
- Decoder.lean
- Encoder.lean
- Enforcer.lean
- Env.lean
- ExtFun.lean
- Extractor.lean
- Factory.lean
- Function.lean
- Interpretation.lean
- Op.lean
- Result.lean
- SatUnsat.lean
- Solver.lean
- Symbolizer.lean
- Tags.lean
- Term.lean
- TermType.lean
- Verifier.lean
- Authorizer.lean
- CompiledPolicies.lean
- Compiler.lean
- Enforcer.lean
- Extractor.lean
- SatUnsat.lean
- Verifier.lean
- Authorizer.lean
- Evaluator.lean
- PolicySlice.lean
- Authorize.lean
- Common.lean
- Evaluate.lean
- Basic.lean
- Canonical.lean
- Lemmas.lean
- Applicative.lean
- Control.lean
- List.lean
- LT.lean
- Map.lean
- MapUnion.lean
- Option.lean
- Set.lean
- Args.lean
- Attr.lean
- Basic.lean
- Binary.lean
- Call.lean
- Control.lean
- Invert.lean
- LitVar.lean
- Record.lean
- Set.lean
- Unary.lean
- WellTyped.lean
- WF.lean
- Lit.lean
- Same.lean
- Util.lean
- WF.lean
- WFValue.lean
- Basic.lean
- BitVec.lean
- Ext.lean
- Hierarchy.lean
- LT.lean
- UUF.lean
- Acyclicity.lean
- Asserts.lean
- Compile.lean
- Enforce.lean
- Extractor.lean
- Footprint.lean
- Transitivity.lean
- Util.lean
- Completeness.lean
- Interpret.lean
- ofEnv.lean
- Soundness.lean
- SWF.lean
- WF.lean
- AllowDeny.lean
- Asserts.lean
- Authorizer.lean
- CompiledPolicies.lean
- Compiler.lean
- Enforcer.lean
- Extractor.lean
- Verifier.lean
- Basic.lean
- Factory.lean
- Lit.lean
- WF.lean
- Interpret.lean
- Lit.lean
- ofType.lean
- PE.lean
- Same.lean
- TypeOf.lean
- UDF.lean
- WF.lean
- Same.lean
- VerifyEvaluate.lean
- VerifyEvaluatePair.lean
- VerifyEvaluatePairQueries.lean
- VerifyEvaluateQueries.lean
- VerifyIsAuthorized.lean
- VerifyIsAuthorizedQueries.lean
- WellTypedOk.lean
- Authorizer.lean
- Compiler.lean
- Concretizer.lean
- Data.lean
- Decoder.lean
- Enforcer.lean
- Interpretation.lean
- Opt.lean
- Symbolizer.lean
- Tactics.lean
- ValidRefs.lean
- Verifier.lean
- WellTyped.lean
- And.lean
- Basic.lean
- Binary.lean
- Call.lean
- GetAttr.lean
- HasAttr.lean
- IfThenElse.lean
- Or.lean
- Record.lean
- Set.lean
- Unary.lean
- Var.lean
- And.lean
- Basic.lean
- Binary.lean
- Call.lean
- GetAttr.lean
- HasAttr.lean
- IfThenElse.lean
- Or.lean
- Record.lean
- Set.lean
- Unary.lean
- Var.lean
- Authorizer.lean
- Conversion.lean
- ErrorFree.lean
- Input.lean
- Policy.lean
- PreservesTypeOf.lean
- Soundness.lean
- WellTyped.lean
- And.lean
- Basic.lean
- BinaryApp.lean
- Call.lean
- CheckLevel.lean
- GetAttr.lean
- HasAttr.lean
- IfThenElse.lean
- NoEntitiesError.lean
- Or.lean
- Record.lean
- Set.lean
- UnaryApp.lean
- Basic.lean
- BinaryApp.lean
- GetAttr.lean
- IfThenElse.lean
- Record.lean
- Var.lean
- Reachable.lean
- Arith.lean
- Cmp.lean
- Contains.lean
- ContainsAnyAll.lean
- Eq.lean
- GetTag.lean
- HasTag.lean
- Mem.lean
- And.lean
- Basic.lean
- BinaryApp.lean
- Call.lean
- GetAttr.lean
- HasAttr.lean
- IfThenElse.lean
- LitVar.lean
- LUB.lean
- Or.lean
- Record.lean
- Set.lean
- Types.lean
- UnaryApp.lean
- WF.lean
- EnvironmentValidation.lean
- Levels.lean
- RequestEntityValidation.lean
- Slice.lean
- SubstituteAction.lean
- Typechecker.lean
- Validator.lean
- Definition.lean
- Typechecking.lean
- TypeLifting.lean
- WF.lean
- Definition.lean
- Soundness.lean
- Expr.lean
- Residual.lean
- Authorization.lean
- BatchedEvaluator.lean
- Data.lean
- PolicySlice.lean
- SymbolicCompilation.lean
- Tactics.lean
- TPE.lean
- Typechecking.lean
- Validation.lean
- Verification.lean
- WellTyped.lean
- WellTypedVerification.lean
- Authorizer.lean
- BatchedEvaluator.lean
- Evaluator.lean
- Input.lean
- Residual.lean
- EnvironmentValidator.lean
- Levels.lean
- RequestEntityValidator.lean
- Subtyping.lean
- Typechecker.lean
- TypedExpr.lean
- Types.lean
- Validator.lean
- Data.lean
- Spec.lean
- SymCC.lean
- SymCCOpt.lean
- Thm.lean
- TPE.lean
- Validation.lean
- Main.lean
- ToJson.lean
- ActionConstraint.lean
- ActionDecl.lean
- AuthorizationRequest.lean
- Entities.lean
- Entity.lean
- EntityDecl.lean
- EntityReference.lean
- EntityUID.lean
- EntityValidationRequest.lean
- EvaluationRequest.lean
- Expr.lean
- LevelValidationRequest.lean
- Name.lean
- PartialInput.lean
- Policy.lean
- PolicySet.lean
- PrincipalOrResourceConstraint.lean
- Request.lean
- RequestEnv.lean
- RequestValidationRequest.lean
- Schema.lean
- SymCCRequest.lean
- TemplateBody.lean
- Term.lean
- TermType.lean
- TPERequest.lean
- Type.lean
- ValidationRequest.lean
- Value.lean
- Main.lean
- Main.lean
- BParsec.lean
- ByteArray.lean
- Enum.lean
- Field.lean
- Map.lean
- Message.lean
- Packed.lean
- Proofs.lean
- String.lean
- Structure.lean
- Structures.lean
- Varint.lean
- WireType.lean
- Arith.lean
- Datetime.lean
- Decimal.lean
- Decoder.lean
- Has.lean
- In.lean
- IPAddr.lean
- Like.lean
- Main.lean
- Solver.lean
- Tags.lean
- Util.lean
- Verifier.lean
- WellTyped.lean
- main.rs
- .gitignore
- Cargo.toml
- 345.protodata
- abac.protodata
- action.protodata
- app_widget_123.protodata
- complicated.protodata
- contains.protodata
- decimal.protodata
- emptyrecord.protodata
- emptyset.protodata
- emptystring.protodata
- entities.protodata
- entity.protodata
- false.protodata
- generate.sh
- has_and_get.protodata
- has_and_get_tags.protodata
- ip.protodata
- is.protodata
- like.protodata
- nested_record.protodata
- nested_set.protodata
- not_and_neg.protodata
- plus_and_minus_and_times.protodata
- policyset.protodata
- policyset_just_templates.protodata
- policyset_one_static_policy.protodata
- principal_in_resource_owners.protodata
- rbac.protodata
- record.protodata
- request.protodata
- schema_attrs.protodata
- schema_basic.protodata
- schema_commontypes.protodata
- schema_tags.protodata
- set.protodata
- thisiscedar.protodata
- true.protodata
- type_bool.protodata
- type_false.protodata
- type_ip.protodata
- type_long.protodata
- type_record.protodata
- type_set_of_string.protodata
- type_string.protodata
- type_true.protodata
- user_alice.protodata
- BatchedEvaluator.lean
- CedarProto.lean
- Datetime.lean
- Decimal.lean
- IPAddr.lean
- Levels.lean
- Main.lean
- Proto.lean
- Run.lean
- TPE.lean
- Wildcard.lean
- .gitignore
- Cedar.lean
- CedarFFI.lean
- CedarProto.lean
- DiffTest.lean
- GUIDE.md
- lake-manifest.json
- lakefile.lean
- lean-toolchain
- Protobuf.lean
- README.md
- SymCC.lean
- SymTest.lean
- UnitTest.lean
- policies.cedarschema
- policies1.cedar
- policies10.cedar
- policies2.cedar
- policies3.cedar
- policies4.cedar
- policies5.cedar
- policies6.cedar
- policies7.cedar
- policies8.cedar
- policies9.cedar
- policies.cedarschema
- policies1.cedar
- policies2.cedar
- policies3.cedar
- policies4.cedar
- a_a_star.cedar
- a_star.cedar
- a_star_non_a.cedar
- a_star_star.cedar
- other.cedar
- policies.cedarschema
- star_a.cedar
- star_b.cedar
- policies1.cedarschema
- src1.cedar
- tgt1.cedar
- policies.cedar
- policies.cedarschema
- policies.cedarschema
- src1.cedar
- src2.cedar
- src3.cedar
- src4.cedar
- src5.cedar
- src6.cedar
- src7.cedar
- tgt1.cedar
- tgt2.cedar
- tgt3.cedar
- tgt4.cedar
- tgt5a.cedar
- tgt5b.cedar
- tgt5c.cedar
- tgt6.cedar
- tgt7a.cedar
- tgt7b.cedar
- empty.cedar
- policies.cedarschema
- policies1.cedar
- deny_all.cedar
- empty.cedar
- permit_all.cedar
- policies.cedarschema
- policies1.cedar
- policies10.cedar
- policies2.cedar
- policies3.cedar
- policies4.cedar
- policies5.cedar
- policies6.cedar
- policies7.cedar
- policies8.cedar
- policies9.cedar
- analysis.rs
- cli_enums.rs
- cli_exec.rs
- err.rs
- evaluation.rs
- lib.rs
- main.rs
- symcc.rs
- util.rs
- validation.rs
- integration_tests__analyze_compare_tabular_arithmetic_1_cmp_2.snap
- integration_tests__analyze_compare_tabular_arithmetic_3_cmp_4.snap
- integration_tests__analyze_compare_tabular_arithmetic_3_cmp_5.snap
- integration_tests__analyze_compare_tabular_arithmetic_4_cmp_5.snap
- integration_tests__analyze_compare_tabular_arithmetic_6_cmp_8.snap
- integration_tests__analyze_compare_tabular_arithmetic_7_cmp_10.snap
- integration_tests__analyze_compare_tabular_arithmetic_7_cmp_9.snap
- integration_tests__analyze_compare_tabular_demo_2_1.snap
- integration_tests__analyze_compare_tabular_demo_3_2.snap
- integration_tests__analyze_compare_tabular_demo_4_3.snap
- integration_tests__analyze_compare_tabular_globs_a_a_star_cmp_a_star_non_a.snap
- integration_tests__analyze_compare_tabular_globs_a_cmp_star_other.snap
- integration_tests__analyze_compare_tabular_globs_a_star_cmp_a_a_star.snap
- integration_tests__analyze_compare_tabular_globs_a_star_cmp_a_star_non_a.snap
- integration_tests__analyze_compare_tabular_globs_a_star_cmp_a_star_star.snap
- integration_tests__analyze_compare_tabular_globs_a_star_star_a.snap
- integration_tests__analyze_compare_tabular_globs_star_a_cmp_star_b.snap
- integration_tests__analyze_compare_tabular_misc1.snap
- integration_tests__analyze_compare_tabular_sets1.snap
- integration_tests__analyze_compare_tabular_sets2.snap
- integration_tests__analyze_compare_tabular_sets3.snap
- integration_tests__analyze_compare_tabular_sets4.snap
- integration_tests__analyze_compare_tabular_sets5a.snap
- integration_tests__analyze_compare_tabular_sets5b.snap
- integration_tests__analyze_compare_tabular_sets5c.snap
- integration_tests__analyze_compare_tabular_sets6.snap
- integration_tests__analyze_compare_tabular_sets7a.snap
- integration_tests__analyze_compare_tabular_sets7b.snap
- integration_tests__analyze_compare_tabular_tags_bool.snap
- integration_tests__analyze_compare_tabular_view_box_basic_6_cmp_10.snap
- integration_tests__analyze_compare_tabular_view_box_basic_6_cmp_7.snap
- integration_tests__analyze_compare_tabular_view_box_basic_6_cmp_8.snap
- integration_tests__analyze_compare_tabular_view_box_basic_6_cmp_9.snap
- integration_tests__analyze_compare_tabular_view_box_trivial1.snap
- integration_tests__analyze_compare_tabular_view_box_trivial2.snap
- integration_tests__analyze_compare_tabular_view_box_trivial3.snap
- integration_tests__analyze_compare_tabular_view_box_trivial4.snap
- integration_tests__analyze_policies_tabular_demo1.snap
- integration_tests__analyze_policies_tabular_demo2.snap
- integration_tests__analyze_policies_tabular_demo3.snap
- integration_tests__analyze_policies_tabular_demo4.snap
- integration_tests__analyze_policies_tabular_online_docs.snap
- integration_tests__analyze_policies_tabular_view_box_p1.snap
- integration_tests__analyze_policies_tabular_view_box_p2.snap
- integration_tests__analyze_policies_tabular_view_box_p3.snap
- integration_tests__analyze_policies_tabular_view_box_p4.snap
- integration_tests__analyze_policies_tabular_view_box_p5.snap
- integration_tests.rs
- Cargo.toml
- Dockerfile
- README.md
- Messages.proto
- tpe.rs
- test_implementation.rs
- tpe.rs
- datatypes.rs
- err.rs
- lean_ffi.rs
- lean_object.rs
- lib.rs
- messages.rs
- integration_tests.rs
- build.rs
- build_lean_lib.sh
- Cargo.toml
- README.md
- set_env_vars.sh
- abac.rs
- err.rs
- expr.rs
- gen.rs
- hierarchy.rs
- lib.rs
- policy.rs
- policy_set.rs
- pst.rs
- rbac.rs
- request.rs
- schema.rs
- schema_gen.rs
- settings.rs
- size_hint_utils.rs
- types.rs
- .gitignore
- Cargo.toml
- README.md
- .dockerignore
- .gitignore
- CODE_OF_CONDUCT.md
- CONTRIBUTING.md
- Dockerfile
- lean-toolchain
- LICENSE
- NOTICE
- rcfile
- README.md
- SECURITY.md
// repository documentation
Was this content helpful?
(0 ratings)