HashSet class contains policy

Checks whether the array associated with the resource contains the specified value.

Type: expression policy.

Syntax

contains {sid: Handle, entry: Entry}

In this case:

• Handle refers to the handle of the resource associated with the array.
• Entry refers to the value that should be checked.

Returned value

True if the array contains the value.

False if the array does not contain the value.

KSS_DENY in the following cases:

• The specified resource handle is not associated with an array within a HashSet class object.
• The specified resource handle is incorrect.

Example

...

/* For a Server entity query via the security interface, check

whether the array associated with the entity contains the value 42 */

security src=Server, method=Check {

assert(S.contains {sid: src_sid, entry: 42})

}

Page top