GFunction doesn't work well on website editor

[wim-web]

I used the same model, policy, and request, but the results were different between the website editor and local code.

on website

on local code

model.conf

[request_definition]
r = sub, obj, act

[policy_definition]
p = sub, obj, act

[role_definition]
g = _, _
g2 = _, _

[policy_effect]
e = some(where (p.eft == allow))

[matchers]
m = g(r.sub, p.sub)

policy.csv

p, admin, data1, read

g2, alice, admin

main.go

package main

import (
    "fmt"

    "github.com/casbin/casbin/v2"
)

func main() {
    e, _ := casbin.NewEnforcer("./model.conf", "./policy.csv")
    res, _ := e.Enforce("alice", "data1", "read")
    fmt.Print(res) // display false
}

go.mod

module casbin

go 1.15

require github.com/casbin/casbin/v2 v2.28.2 // indirect

[hsluoyz]

@wim-web I think Casbin-editor may have bug.

@Zxilly plz fix it.

[Zxilly]

working on this

[Zxilly]

@hsluoyz I believe this is different default behavior between node-casbin and golang-casbin. Plz move this to node-casbin.

[nodece]

@hsluoyz this is Golang-casbin issue. the alice belong to admin role, so aclice, data1, read is true.

[Zxilly]

@nodece He didn't use g2(r.sub, p.sub) to build role link, so g2, alice, admin should be ignored.

[hsluoyz]

@nodece He didn't use g2(r.sub, p.sub) to build role link, so g2, alice, admin should be ignored.

Agreed with @Zxilly

So this is still a Node-Casbin issue..

[nodece]

@hsluoyz @Zxilly g and g2 uses same role manager, so g == g2 and returns true. I tried to use jcasbin and node-casbin to check this model and policy, which returns true. If golang-casbin is right, we should update all code.

[hsluoyz]

@nodece that's right.

@Zxilly plz update Node-Casbin

[Zxilly]

@nodece We have updated rm to rmMap, now every group has its own role manager. This is meant to use different match function on different role.

[nodece]

@hsluoyz I checkout go-casbin to check this issue, we need to update casbin of other program language.

@Zxilly thanks for your contribution :)

[hsluoyz]

@nodece plz update the editor version.