CubeToolPolicy class final

The spec.tools: section of a cube: the allow/deny command-word sets.

Constructors

CubeToolPolicy({Set<String> allow = const {}, Set<String> deny = const {}})

Creates a policy; both sets are matched as whole command-word strings (e.g. 'git push'), never shell-expressed.

const

CubeToolPolicy.fromYaml(Object? node)

Parses the spec.tools: section. null (section absent) yields the safe default: no allow entries, so everything is denied.

factory

Properties

allow → Set<String>

Command words the run may execute. Empty set = deny everything.

final

deny → Set<String>

Command words always refused, even when allow matches.

final

hashCode → int

The hash code for this object.

no setter, inherited

runtimeType → Type

A representation of the runtime type of the object.

no setter, inherited

Methods

noSuchMethod(Invocation invocation) → dynamic

Invoked when a nonexistent method or property is accessed.

inherited

permits(String commandWords) → bool

Whether the space-joined command portion commandWords (e.g. 'git push') may run: not denied, and allowed by at least one entry.

toString() → String

A string representation of this object.

inherited

Operators

operator ==(Object other) → bool

The equality operator.

inherited