raito.plugins.roles.constraint module

class raito.plugins.roles.constraint.RoleConstraint(filter)[source]

Bases: Filter

Wrapper around RoleFilter that supports logical OR composition.

Parameters:

filter (RoleFilter)

update_handler_flags(flags)[source]

Attach role metadata to handler flags.

This allows external tools to collect and display role-related constraints.

Parameters:

flags (dict[str, Any])

Return type:

None

class raito.plugins.roles.constraint.RoleGroupConstraint(*filters)[source]

Bases: Filter

Logical group of multiple RoleConstraints combined via OR.

Parameters:

filters (RoleConstraint)

update_handler_flags(flags)[source]

Attach role metadata to handler flags.

This allows external tools to collect and display role-related constraints.

Parameters:

flags (dict[str, Any])

Return type:

None