Class: Protege::Gateway::AccessControl

Inherits:
Object
  • Object
show all
Defined in:
lib/protege/gateway/access_control.rb

Overview

The inbound access guardrail: composes every access-policy layer that applies to an agent and answers the one question the Gateway asks — may this sender reach this agent? A gateway concern (inbound mail authorization), it lives beside the other Gateway protocol pieces and is called from the Gateway's inbound edge, AgentMailbox.

Composition is by intersection: a sender is permitted only when every layer permits it (logical AND). Because intersection is commutative there is no precedence to reason about — the order of layers never changes the outcome — and the security property falls out for free: a layer can only narrow the set of admitted senders, never widen it. So a per-agent rule can tighten who reaches that agent but can never punch through the committed org-wide ceiling.

Two layers exist today — the committed global policy (+Protege.configuration.inbound_access+) and the agent's runtime rules (+AccessRule.policy_for+). This composer is the single seam the rest of the engine calls; adding a layer later (e.g. a per-agent-class committed policy) is a one-line change to #policies, never a change at the call sites.

Examples:

Gate an inbound sender

Gateway::AccessControl.for(agent:).permits?(address: mail.from.first)

Instance Attribute Summary collapse

Class Method Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(agent:) ⇒ void

Parameters:



39
40
41
 
# File 'lib/protege/gateway/access_control.rb', line 39

def initialize(agent:)
  @agent = agent
end

Instance Attribute Details

#agent ⇒ Protege::Agent (readonly)

Returns the agent the inbound mail is addressed to.

Returns:



25
26
27
 
# File 'lib/protege/gateway/access_control.rb', line 25

def agent
  @agent
end

Class Method Details

.for(agent:) ⇒ Protege::Gateway::AccessControl

Build the access control for an agent. Factory mirror of .new reading as a lookup.

Parameters:

Returns:



32
33
34
 
# File 'lib/protege/gateway/access_control.rb', line 32

def for(agent:)
  new(agent:)
end

Instance Method Details

#permits?(address:) ⇒ Boolean

Decide whether a sender may reach this agent, intersecting all applicable layers.

Parameters:

  • address (String) —

    the raw sender address

Returns:

  • (Boolean) —

    true only when every layer permits the sender



47
48
49
 
# File 'lib/protege/gateway/access_control.rb', line 47

def permits?(address:)
  policies.all? { |policy| policy.permits?(address:) }
end