graph-acl-sandbox

This is a basis for learning to work with access rights stored in the graphs using the Mu Query Rewriter.

How to

Setup

Clone this project, initialize the submodules, and build the sample application (requires Node.js, Bower, and ember-cli):

cd ./rewriter-sandbox-application
nmp install
ember build

Boot up the system

Boot your microservices-enabled system using docker-compose.

cd /path/to/graph-acl-basics
docker-compose up

You can shut down using docker-compose stop and remove everything using docker-compose rm.

Use the Sandbox and Sample Application

The sandbox is available at http://localhost:9000 and allows interactive testing of rewriting logic.

Click "Apply Constraint" to apply the current constraint system-wide, for testing in the sample application.

The sample application is available at http://localhost:9001 and allows you to generate and browse random data, according to the currently applied constraint.

It is based on a simple school model, as described in config/resource/domain.lisp.

Annotations

Annotations, prefixed by @access, are parsed as quads-level statements. There are two types of annotations:

@access Label
@access Label(?var)

Annotations are calculated both at rewrite-time and in the database.

CONSTRUCT {
  ?a ?b ?c
}
WHERE {
  @access All
  GRAPH ?graph { 
    @access Graph(?graph)
    ?a ?b ?c .
    ?a a ?type
  }
  VALUES (?graph ?type) {
    (g:classes school:Class) 
    (g:people foaf:Person) 
  }
}

Logging

The Docker logs the rewriter are extremely verbose, to allow for debugging.

sudo docker-compose logs -f as