This project aims to implement a domain specific language to define access policies. Considering actors (A) and resources (R), we want to be able to ensure:

• Totality: either A accesses R or it does not
• Uniqueness: R cannot be both accessible and forbidden to A

By hierarchical, we mean that policies specified for an actor can be projected into another actor, and extended in this new setting.

Suppose you have a Hapi project under the folder <project_dir> and then you want to run the file <project_dir>/<file>.hp:

• With Docker

docker build -t hapi_image .
docker run -v <project_dir>:/data --rm hapi_image "/data/<file>.hp"

• Without Docker

gradle run --args="<project_dir>/<file>.hp"

In both ways the YAML translation will be generated at <project_dir>/<file>.yaml.

@TODO

This project is licensed under the GPLv3 license.