[Bug]Node.js and Python Casbin Do Not Behave The Same with Glob Matching **

[minoic]

Want to prioritize this issue? Try:

---

Describe the bug

Same problem with casbin/casbin#1422 , Python Casbin does not support ** glob match.

To Reproduce
Steps to reproduce the behavior:

1. Go to casbin online editor https://casbin.org/editor/
2. Paste codes below:

Model

[request_definition]
r = sub, obj, act

[policy_definition]
p = sub, obj, act

[role_definition]
g = _, _

[policy_effect]
e = some(where (p.eft == allow))

[matchers]
m = g(r.sub, p.sub) && globMatch(r.obj, p.obj) && globMatch(r.act, p.act)

Policy

p, alice, /**, *

Request

alice, /alice_data/hello, GET

Expected behavior

true Reason: ["alice","/**","*"]

true expected in enforcement result, as Node-Casbin does

switch to PyCasbin:

false

Meanwhile, rust casbin, c# casbin raises an exception.

// 🟢 dotnet Engine Result

// ========================

// ⚪️ node Engine Result
true Reason: ["alice","/**","*"]
// ----------------------------------------

// ⚪️ java Engine Result
true Reason: ["alice","/**","*"]
// ----------------------------------------

// ⚪️ go Engine Result
true Reason: ["alice","/**","*"]
// ----------------------------------------

// ⚪️ rust Engine Result

// ----------------------------------------

// ⚪️ python Engine Result
false
// ----------------------------------------

Screenshots
If applicable, add screenshots to help explain your problem.

Desktop (please complete the following information):

• OS: Windows
• Browser: Edge
• Version 140.0.3485.81

Additional context

Versions in online editor

Node-Casbin (NodeJs)5.37.0
jCasbin (ava) v1.79.0|(CLl v1.17.0)
Casbin (Go) v2.116.0|(CLl v1.12.0)
Casbin-rs (Rust) v2.10.1|(CLl v1.3.0)
PyCasbin (Python) v1.17.0 |(CLl v1.0.0)
Casbin.NET (C#) v1.4.0.0|(CLI v1.0.0)

[hsluoyz]

@minoic you need to provide a shared link of the Casbin editor and provide:

1. What you expect
2. What you got

[minoic]

Casbin online editor reports 'Failed to copy link'

1. What you expect

With the model, policy, request above, i expect true Reason: ["alice","/**","*"] as node, java, go engine returns.

2. What you got

But under the same conditions, i got false from python engine, and exception from rust, c# engine. It seems python, rust, c# engine does not support ** match which glob pattern standard supports, see also casbin/casbin#1422 , same problem fixed for go engine but python, rust, c# seems not.

python: false

rust: thread 'main' panicked at src/main.rs:132:10:\nfailed to enforce: RhaiError(ErrorFunctionNotFound(\"globMatch (\u0026str | ImmutableString | String, \u0026str | ImmutableString | String)\", 1:20))\nnote: run with RUST_BACKTRACE=1 environment variable to display a backtrace\n, error: exit status 101

c#: Error during enforcement: Unknown identifier 'globMatch' (at index 19).\r\n{\"allow\":false,\"explain\":[]}\r

I can modify casbin model such as (globMatch(r.obj, p.obj) || p.obj=='/**') to realize my requirement, but ** pattern does not work for /alice_data/**, /anyone_data/** etc.

[hsluoyz]

I have made an editor share link: https://editor.casbin.org/#DZGCU4W2A

[hsluoyz]

@minoic Python result is fixed now, see: https://editor.casbin.org/#DZGCU4W2A

Use PyCasbin v2.3.0 and later: https://github.com/casbin/pycasbin/releases/tag/v2.3.0