Function BenchmarkRBACValueAllocation

coderd/rbac/roles_internal_test.go:22–66

BenchmarkRBACValueAllocation benchmarks the cost of allocating a rego input value. By default, `ast.InterfaceToValue` is used to convert the input, which uses json marshaling under the hood. Currently ast.Object.insert() is the slowest part of the process and allocates the most amount of bytes. Thi

(b *testing.B)

// data and uses a lot of extra memory for handling things like sort order.
// A possible large improvement would be to implement the ast.Value interface directly.
func BenchmarkRBACValueAllocation(b *testing.B) {
	actor := Subject{
		Roles:  RoleIdentifiers{ScopedRoleOrgMember(uuid.New()), ScopedRoleOrgAdmin(uuid.New()), RoleMember()},
		ID:     uuid.NewString(),
		Scope:  ScopeAll,
		Groups: []string{uuid.NewString(), uuid.NewString(), uuid.NewString()},
	}
	obj := ResourceTemplate.
		WithID(uuid.New()).
		InOrg(uuid.New()).
		WithOwner(uuid.NewString()).
		WithGroupACL(map[string][]policy.Action{
			uuid.NewString(): {policy.ActionRead, policy.ActionCreate},
			uuid.NewString(): {policy.ActionRead, policy.ActionCreate},
			uuid.NewString(): {policy.ActionRead, policy.ActionCreate},
		}).
		WithACLUserList(map[string][]policy.Action{
			uuid.NewString(): {policy.ActionRead, policy.ActionCreate},
			uuid.NewString(): {policy.ActionRead, policy.ActionCreate},
		})

	jsonSubject := authSubject{
		ID:     actor.ID,
		Roles:  must(actor.Roles.Expand()),
		Groups: actor.Groups,
		Scope:  must(actor.Scope.Expand()),
	}

	b.Run("ManualRegoValue", func(b *testing.B) {
		for i := 0; i < b.N; i++ {
			_, err := regoInputValue(actor, policy.ActionRead, obj)
			require.NoError(b, err)
		}
	})
	b.Run("JSONRegoValue", func(b *testing.B) {
		for i := 0; i < b.N; i++ {
			_, err := ast.InterfaceToValue(map[string]interface{}{
				"subject": jsonSubject,
				"action":  policy.ActionRead,
				"object":  obj,
			})
			require.NoError(b, err)
		}
	})
}

// TestRegoInputValue ensures the custom rego input parser returns the
// same value as the default json parser. The json parser is always correct,