الثقات والوصول بين النطاقات

accepts = {("resources", "accounts")}
resource_readers = {"reader-17"}
def modeled_access(account_forest, resource_forest, identity):
    return (resource_forest, account_forest) in accepts and identity in resource_readers
print(modeled_access("accounts", "resources", "reader-17"))
print(modeled_access("resources", "accounts", "reader-17"))
print(modeled_access("accounts", "resources", "reader-99"))

True
False
False

النواتج True وFalse وFalse دون استعلام أو إنشاء ثقة أو محاولة وصول.

{"account_forest":"accounts.example.test","resource_forest":"resources.example.test","intent":"resource_side_accepts_account_side_identities","resource_action":"read-course-archive","reverse_access":"not_implied","state":"architecture_review"}

يعلن اتجاهًا وعملًا منفصلًا ولا ينشئ كائن ثقة أو سرًا أو إذنًا.