package consul import ( "github.com/hashicorp/consul/acl" "github.com/hashicorp/consul/consul/structs" ) type dirEntFilter struct { acl acl.ACL ent structs.DirEntries } func (d *dirEntFilter) Len() int { return len(d.ent) } func (d *dirEntFilter) Filter(i int) bool { return !d.acl.KeyRead(d.ent[i].Key) } func (d *dirEntFilter) Move(dst, src, span int) { copy(d.ent[dst:dst+span], d.ent[src:src+span]) } // FilterDirEnt is used to filter a list of directory entries // by applying an ACL policy func FilterDirEnt(acl acl.ACL, ent structs.DirEntries) structs.DirEntries { df := dirEntFilter{acl: acl, ent: ent} return ent[:FilterEntries(&df)] } type keyFilter struct { acl acl.ACL keys []string } func (k *keyFilter) Len() int { return len(k.keys) } func (k *keyFilter) Filter(i int) bool { return !k.acl.KeyRead(k.keys[i]) } func (k *keyFilter) Move(dst, src, span int) { copy(k.keys[dst:dst+span], k.keys[src:src+span]) } // FilterKeys is used to filter a list of keys by // applying an ACL policy func FilterKeys(acl acl.ACL, keys []string) []string { kf := keyFilter{acl: acl, keys: keys} return keys[:FilterEntries(&kf)] } // Filter interfae is used with FilterEntries to do an // in-place filter of a slice. type Filter interface { Len() int Filter(int) bool Move(dst, src, span int) } // FilterEntries is used to do an inplace filter of // a slice. This has cost proportional to the list length. func FilterEntries(f Filter) int { // Compact the list dst := 0 src := 0 n := f.Len() for dst < n { for src < n && f.Filter(src) { src++ } if src == n { break } end := src + 1 for end < n && !f.Filter(end) { end++ } span := end - src if span > 0 { f.Move(dst, src, span) dst += span src += span } } // Return the size of the slice return dst }