aserto-dev / topaz

0%

main: 0%

LAST BUILD ON BRANCH emit-default-values

branch: emit-default-values

CHANGE BRANCH

x

Reset

Sync Branches

• emit-default-values
• 0.21-upd
• OpenAPI-support
• PromptYesNoSignal
• access-svc
• action-search
• ad_subcommands
• add-decision-assertions
• add-test-cmd
• add-v2-cfg
• add_console_exp
• add_save_manifest
• add_v1_reflection
• andrew/12factor
• andrew/data_volume
• andrew/docker-compose
• andrew/example-assets
• andrew/manifest-todo
• andrew/uiredirect
• andrew/windows-docker
• api-auth
• api-auth-provider
• api-auth-template
• api-gateway
• api-gateway-2
• api-keys
• asertoheader
• assets-restructure
• auth-type
• authzen-cmds
• azm-0.1.15
• azm-0.1.16
• batchmode
• bufpool
• bugfix/ds-relations-with-objects
• bugfix/search-objects
• bugfix/self-logger
• builtin_relation
• builtins_trace
• bump-dir
• bump-runtime
• bump-runtime-v0.68.0
• bump-runtime-v0.69.0
• bump-runtime-v0.70.0
• bump-service-host
• bump/runtime-v0.45.0
• bump/runtime-v0.46.1
• bumpRuntime
• bump_deps
• bump_errors_v0.0.5
• bump_go.1.19
• bump_go_ci_version
• bump_go_topaz_ui
• bump_runtime
• bump_runtime_v0.60.2
• bump_runtime_v0.62.1
• bump_runtime_v0.67.0
• bump_runtime_v0.67.1
• bump_service_host
• bumpruntime-v0.46.3
• bumps
• bumpscerts
• ca-certs
• cache-jwkeys
• check
• check-permission
• check-reason
• check_running_fix
• checkports
• checks
• checks-result
• chore/cleanup-generics
• ci-test-templates
• ci/fix-test
• citadel-v2
• clean-assets-root
• clean-console
• cleanup
• cli_certs
• cli_certs_updates
• cli_fixes
• client-validate
• color
• config-doc
• config-info-get
• config-schema
• config_template_gateways
• config_v2
• console
• console-0.0.0-20231109070717.0.gaae6c0a2
• console-config
• console-update
• container-args
• container-platform
• controller-config
• custom-headers
• cwd-import-export
• datasync
• deadcode
• debug-service
• debug-service-close
• decisionlogv2
• decisionv2
• def-v3-only-config
• delete-manifest
• depfile
• deps
• deps-250123
• dir-resolver
• directory_config
• disable-msi-upload
• display_name
• docker-api
• dockerfile
• docs_update
• dont_fail_id_results_nil
• ds-relations
• ds-v3-only
• edge-0.20.3
• edge-health
• edge-sync-loopback
• edge-sync-v3
• edge-timeout
• edge_ds_init_fix
• edge_generator
• edgesync-fold
• editor
• editor-2
• eds-citadel
• eds-citadel-update
• evaluation-assertions
• exit-code
• expenses
• export
• expose-debug-port
• feat/sidecar-config
• feat/template-excl-steps
• feat/templates-verify
• feat/test-assets
• feature/demo-gif
• fix
• fix-assets
• fix-az-FullMethodName
• fix-built-ins
• fix-check-bug
• fix-checks-ctx
• fix-ci
• fix-ci-test
• fix-client-dup-code
• fix-config-loader
• fix-console
• fix-cors-spew
• fix-delete-object-with-relations
• fix-ds-load-format
• fix-edge-plugin
• fix-edge-sync
• fix-file-name-too-long
• fix-gdrive-assets
• fix-healthcheck
• fix-msi
• fix-template-install-custom
• fix-templates-install
• fix-test-check-decision
• fix-topaz-db
• fix-validation
• fix/auto-pull-image
• fix/builtin-not-found-err
• fix/builtins
• fix/citadel-data
• fix/citadel-data-v3
• fix/console
• fix/doc-fixes
• fix/edge-sync
• fix/edge-sync-enabled
• fix/edge-sync-run-now
• fix/edgesync-recv
• fix/enablev2
• fix/gdrive
• fix/gen-certs-log
• fix/isServiceUp-no-check
• fix/is_running
• fix/issue-386
• fix/load_save_cmds
• fix/locahost
• fix/local-bundles
• fix/misc
• fix/multi-tenant-manifest
• fix/quickstart-directions
• fix/readme-console
• fix/readme-docker-error
• fix/readme-feedback
• fix/readme-openssf
• fix/readme-release
• fix/readme-remove-seed
• fix/remove-extra-groups-relations
• fix/rob-close
• fix/set-manifest-help-string
• fix/simple-rbac-docs-url
• fix/simple-rbac-policy-name
• fix/start
• fix/sync-timestamp
• fix/templ-install-no-configure
• fix/template
• fix/test-harness-tmpdir
• fix/tests-temp-dir
• fix/topaz-269
• fix/topaz-270
• fix/use-version
• fix_auth
• fix_defaults
• fix_dir
• fix_dir_paths
• fix_dir_paths_db
• fix_env_vars
• fix_gdrive
• fix_generator_certs_dir
• fix_identity_v2
• fix_notfound_buildins_error
• fix_opa_creds
• fix_policies_root
• fix_prompts_and_ci
• fix_relation
• fix_template_quotes
• fix_topaz_ui
• fix_version_check
• fix_wire
• fixes
• fqdn
• fqdn_doc
• gateway-errors
• gdrive-assertions
• gdrive-inv
• gdrive-subject-rels
• gdrive-template
• gdrive_template
• gdrive_templates
• gertd-patch-1
• gertd/GetPolicyList
• gertd/cleanup
• gertd/config-env
• gertd/counter
• gertd/decisiontree
• gertd/ds-relation-help
• gertd/fix-install
• gertd/is-panic
• gertd/load-manifest
• gertd/logger
• gertd/remote
• gertd/topaz_dir
• gertd/upd-deps-20230308
• gertd/update
• get-graph
• get-relation-directionality
• get-relation-with-objects
• getuserfromidentity
• gha-upd
• github_template
• go-1.23
• go-1.25.3
• go-aserto
• go-aserto-upd
• go-directory-cli
• go-edge-ds-0.33.14
• go-edge-ds-v0.21.5
• go-edge-ds-v0.21.6
• go-edge-ds-v0.33.21
• go-edge-ds@v0.21.7
• go-edge-ds@v0.33.18
• go-grpc-v1.67.1
• goreleaser_bump
• grpc-health-probe
• hosted-templates
• hosted_inv
• identity-context-manual
• identity-resolution-direction
• identityv2
• img-assets
• import-status
• importer-delete
• improve-docs
• instance-label
• instance_label_cleanup
• inv-identity
• inv-tmpl
• iot_template
• issue-618
• jnjudge1-testing-branch
• keepalive
• kin-openapi
• latest-console
• lint
• linter-fixes
• linter-v2
• local-bundles
• local-template
• local-templates
• localOCI
• log-sync-health
• logrus
• mage_dep
• main
• make-test-templates
• manager-relation
• manifest-metadata
• memoize
• merge-main
• metadata
• mig007
• missing-dep-upd
• model-migration
• model-v2
• model-v2-gdrive-fixes
• modelcache
• more-color
• mount-local-store
• mt-rbac
• multi-platform
• multi-tenant-exclusion
• multi-tenant-separator
• multitenant_teamplate
• mv-service-host
• named_configurations
• no-tls-test
• not-found
• object-with-relations
• opa-v0.70.0
• opa-v1.5.1
• openapi
• openapi-filter
• param-goreleaser
• plaintext
• policy_name_configs
• pool-checks
• prompter-esc
• rc2
• readme-use-template
• readme_update
• refactor-clui
• refactor-is
• refactor-main
• refactor-run-and-start
• refs/tags/v0.20.0
• refs/tags/v0.20.1
• refs/tags/v0.20.10
• refs/tags/v0.20.12
• refs/tags/v0.20.13
• refs/tags/v0.20.14
• refs/tags/v0.20.15
• refs/tags/v0.20.16
• refs/tags/v0.20.17
• refs/tags/v0.20.18
• refs/tags/v0.20.19
• refs/tags/v0.20.2
• refs/tags/v0.20.20
• refs/tags/v0.20.21
• refs/tags/v0.20.22
• refs/tags/v0.20.23
• refs/tags/v0.20.24
• refs/tags/v0.20.25
• refs/tags/v0.20.26
• refs/tags/v0.20.27
• refs/tags/v0.20.28
• refs/tags/v0.20.29
• refs/tags/v0.20.3
• refs/tags/v0.20.30
• refs/tags/v0.20.31
• refs/tags/v0.20.32
• refs/tags/v0.20.33
• refs/tags/v0.20.34
• refs/tags/v0.20.35
• refs/tags/v0.20.36
• refs/tags/v0.20.37
• refs/tags/v0.20.38
• refs/tags/v0.20.39
• refs/tags/v0.20.4
• refs/tags/v0.20.40
• refs/tags/v0.20.41
• refs/tags/v0.20.5
• refs/tags/v0.20.6
• refs/tags/v0.20.7
• refs/tags/v0.20.8
• refs/tags/v0.20.9
• refs/tags/v0.21.0
• refs/tags/v0.21.1
• refs/tags/v0.21.2
• refs/tags/v0.21.3
• refs/tags/v0.21.4
• refs/tags/v0.25.0
• refs/tags/v0.25.1
• refs/tags/v0.25.10
• refs/tags/v0.25.11
• refs/tags/v0.25.12
• refs/tags/v0.25.13
• refs/tags/v0.25.14
• refs/tags/v0.25.15
• refs/tags/v0.25.16
• refs/tags/v0.25.2
• refs/tags/v0.25.3
• refs/tags/v0.25.4
• refs/tags/v0.25.5
• refs/tags/v0.25.6
• refs/tags/v0.25.7
• refs/tags/v0.25.8
• refs/tags/v0.25.9
• refs/tags/v0.30.0
• refs/tags/v0.30.1
• refs/tags/v0.30.10
• refs/tags/v0.30.11
• refs/tags/v0.30.12
• refs/tags/v0.30.13
• refs/tags/v0.30.14
• refs/tags/v0.30.15
• refs/tags/v0.30.16
• refs/tags/v0.30.17
• refs/tags/v0.30.18
• refs/tags/v0.30.19
• refs/tags/v0.30.2
• refs/tags/v0.30.20
• refs/tags/v0.30.21
• refs/tags/v0.30.22
• refs/tags/v0.30.23
• refs/tags/v0.30.24
• refs/tags/v0.30.25
• refs/tags/v0.30.26
• refs/tags/v0.30.27
• refs/tags/v0.30.28
• refs/tags/v0.30.29
• refs/tags/v0.30.30
• refs/tags/v0.30.31
• refs/tags/v0.30.32
• refs/tags/v0.30.4
• refs/tags/v0.30.5
• refs/tags/v0.30.6
• refs/tags/v0.30.7
• refs/tags/v0.30.8
• refs/tags/v0.30.9
• refs/tags/v0.31.0
• refs/tags/v0.31.1
• refs/tags/v0.31.10
• refs/tags/v0.31.11
• refs/tags/v0.31.2
• refs/tags/v0.31.3
• refs/tags/v0.31.4
• refs/tags/v0.31.5
• refs/tags/v0.31.6
• refs/tags/v0.31.7
• refs/tags/v0.31.8
• refs/tags/v0.31.9
• refs/tags/v0.32.0
• refs/tags/v0.32.1
• refs/tags/v0.32.10
• refs/tags/v0.32.11
• refs/tags/v0.32.12
• refs/tags/v0.32.13
• refs/tags/v0.32.14
• refs/tags/v0.32.15
• refs/tags/v0.32.16
• refs/tags/v0.32.17
• refs/tags/v0.32.18
• refs/tags/v0.32.19
• refs/tags/v0.32.2
• refs/tags/v0.32.20
• refs/tags/v0.32.21
• refs/tags/v0.32.22
• refs/tags/v0.32.23
• refs/tags/v0.32.24
• refs/tags/v0.32.25
• refs/tags/v0.32.26
• refs/tags/v0.32.27
• refs/tags/v0.32.28
• refs/tags/v0.32.29
• refs/tags/v0.32.3
• refs/tags/v0.32.30
• refs/tags/v0.32.31
• refs/tags/v0.32.32
• refs/tags/v0.32.33
• refs/tags/v0.32.34
• refs/tags/v0.32.35
• refs/tags/v0.32.36
• refs/tags/v0.32.37
• refs/tags/v0.32.38
• refs/tags/v0.32.39
• refs/tags/v0.32.4
• refs/tags/v0.32.40
• refs/tags/v0.32.41
• refs/tags/v0.32.42
• refs/tags/v0.32.44
• refs/tags/v0.32.45
• refs/tags/v0.32.46
• refs/tags/v0.32.47
• refs/tags/v0.32.48
• refs/tags/v0.32.49
• refs/tags/v0.32.5
• refs/tags/v0.32.50
• refs/tags/v0.32.51
• refs/tags/v0.32.52
• refs/tags/v0.32.53
• refs/tags/v0.32.54
• refs/tags/v0.32.55
• refs/tags/v0.32.56
• refs/tags/v0.32.57
• refs/tags/v0.32.58
• refs/tags/v0.32.59
• refs/tags/v0.32.6
• refs/tags/v0.32.60
• refs/tags/v0.32.61
• refs/tags/v0.32.62
• refs/tags/v0.32.63
• refs/tags/v0.32.64
• refs/tags/v0.32.65
• refs/tags/v0.32.67
• refs/tags/v0.32.68
• refs/tags/v0.32.7
• refs/tags/v0.32.8
• refs/tags/v0.32.9
• rel-0.32.39
• rel-0.32.43
• relpool
• relpool-rid
• remote_directory_fix
• remove-system-obj
• rename-assets
• resolve-by-key
• resolve-identity
• resolver-update
• resolver-update-2
• revert_runtime_to_0.58.0
• rework_with_citadel
• rewrite-parent
• rm-container
• rm-directory-v2
• rm-gcp-publish
• rm-ginko
• rm-pkg-dep
• rob-sync
• ronenh/optional-tenant-id
• ronenh/resolve-user-id
• runstart
• runtime-v0.47.3
• runtime-v0.70.0
• runtime-v1.1.1
• runtime-v1.3.0
• runtime-v1.4.2
• runtime-v1.6.0
• runtime-v1.8.0
• runtime-v1.9.0
• runtime_v0.58.1
• runtime_v0.60.1
• sbom-by-goos-goarch
• semver-v3
• session-id-middleware
• shutdown
• sidecar
• sidecar-deployment
• sidecar_deployment_docs
• simple-rbac-assets
• slack
• snapshot
• snyk-fix-1bf9a48d270fd10f6070328e49195c5a
• spin_up_validation
• stats
• subject-rels
• sync-start-delay
• template-data
• template-descriptions-docs-url
• template-perms
• template-test
• templates
• test-cmd
• test-improvements
• test-stability
• test-statuscode
• testdir
• tmpl-container
• tmpl-db
• tmpl-download-apply
• tmpl-plaintext
• todo-domain-data
• todo-rebac
• todo-rebac-policy-image-fixes
• topaz-backup
• topaz-cli
• topaz-cmd-refactor
• topaz-config-info
• topaz-controller
• topaz-format
• topaz-stop
• topaz-version
• topaz_cli_ports
• topazui
• type-casing
• ui_0.1.10
• ui_0.1.11
• ui_0.1.12
• ui_0.1.14
• ui_0.1.15
• ui_0.1.23
• ui_0.1.24
• ui_0.1.8
• uireidrect-proposal
• unmarshal
• upd-2025-03-23
• upd-250129
• upd-assets
• upd-console
• upd-console-0.0.0-20231106160622.0.g1447da28
• upd-deps
• upd-template-containers
• upd-tests
• upd-xdg
• upd/ci
• update-azm
• update-citadel-assets
• update-console
• update-deps
• update-edge-ds
• update-go-edge-ds
• update-templates-workflow
• update_examples
• update_go-topaz-ui
• update_openapi
• update_sh
• update_ui
• updates
• use-importer
• v0.20.0
• v0.32.33
• v3
• v3-only
• validate-relation
• validator
• versioned-templates
• viper-env-vars
• vite_bundle
• vnext
• win_fix
• workflow-dispatch
• xdg
• xdg-windows

Build # 12144607274

Build Type

Pull #507

github

Committed by ronenh

Commit Message

Builtins emit default values in JSON results

The `ds.checks` builtin returns an array of `CheckResponse` messages.
Each element has a boolean `check` field indicating the outcome of one check.
However, because `false` is the default value for `bool` the marshaled JSON
object doesn't include the `check` field at all when it is false.

Dealing with missing fields is difficult in Rego (I couldn't figure it out).
The code below takes a resource context of the form:
```json
{
  "object_type": "",
  "checks": [
    {"object_id": "", "relation": ""}
  ]
}
```

It computes an array of results of the form:
```json
[
  {"object_id": "", "relation": "", "allowed": true/false}
]
```

If default values are omitted from the returned results, the array
will only include checks that evaluated to true.

```rego
raw := ds.checks({
  "default": {
    "object_type": input.resource.object_type,
    "subject_type": "user",
    "subject_id": input.user.id
  },
  "checks": checks
})

results := x {
  x := [
    {"object_id": check.object_id, "relation": check.relation, "allowed": result.check } |
    check := checks[i]
    result = raw[i]
  ]
}
```

This commit adds `EmitDefaultValues: true` to the `protojson.MarshalOptions` used by the
builtins to marshal rpc responses to JSON.

Pull Request Pull Request #507: Builtins emit default values in JSON results

Run Details

0 of 0 relevant lines covered (NaN%)

0.0 hits per line