-
Notifications
You must be signed in to change notification settings - Fork 2.1k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add example implementation of access control #11550
Add example implementation of access control #11550
Conversation
New interface (issue project-chip#10249) and new implementation (issue project-chip#10250). Implementation is all in-memory and uses only static storage and stack (no heap). Some details missing (e.g. CAT support) but most is here, though not yet hooked up to other code. Comes with unit tests.
check against CATs in subject descriptorconnectedhomeip/src/access/AccessControl.cpp Lines 116 to 126 in 4008c6b
This comment was generated by todo based on a
|
check against target.deviceType (requires lookup)connectedhomeip/src/access/AccessControl.cpp Lines 138 to 148 in 4008c6b
This comment was generated by todo based on a
|
implement extensionconnectedhomeip/src/access/AccessControl.h Lines 207 to 217 in 4008c6b
This comment was generated by todo based on a
|
implement extension iteratorconnectedhomeip/src/access/AccessControl.h Lines 212 to 222 in 4008c6b
This comment was generated by todo based on a
|
add entry/extension to listener interfaceconnectedhomeip/src/access/AccessControl.h Lines 220 to 230 in 4008c6b
This comment was generated by todo based on a
|
more capabilitiesconnectedhomeip/src/access/AccessControl.h Lines 242 to 252 in 4008c6b
This comment was generated by todo based on a
|
get from configconnectedhomeip/src/access/examples/ExampleAccessControlDelegate.cpp Lines 44 to 54 in 4008c6b
This comment was generated by todo based on a
|
PR #11550: Size comparison from 86511a1 to 4008c6b Full report (36 builds for efr32, k32w, linux, mbed, nrfconnect, p6, qpg, telink)
|
Was added at last minute, missed this spot.
PR #11550: Size comparison from 86511a1 to ba57c95 Increases above 0.2%:
Increases (27 builds for efr32, k32w, linux, nrfconnect, p6, qpg, telink)
Decreases (7 builds for nrfconnect)
Full report (31 builds for efr32, k32w, linux, nrfconnect, p6, qpg, telink)
|
- rewrite portions of the check loop to use boolean instead of goto - refactor privilege checking to make it clearer - ensure storage classes are POD types (with static_assert) - remove memsets on storage classes (for now, can re-add later) - clarify some comments - remove debug log statement
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
One set of changes. Will restyle, rebase, and do another pass.
PR #11550: Size comparison from 0fcdb28 to 06b8834 Full report (21 builds for efr32, k32w, linux, p6, qpg, telink)
|
PR #11550: Size comparison from 0fcdb28 to df20d99 Full report (21 builds for efr32, k32w, linux, p6, qpg, telink)
|
PR #11550: Size comparison from c7694b4 to 3cc4171 Full report (38 builds for efr32, esp32, k32w, linux, mbed, nrfconnect, p6, qpg, telink)
|
Fast track: change made by domain owner, had significant feedback that was addressed, has several checkmarks |
New interface (issue #10249) and new implementation (issue #10250).
Implementation is all in-memory and uses only static storage and stack
(no heap).
Some details missing (e.g. CAT support) but most is here, though not yet
hooked up to other code.
Comes with unit tests.