}

// SubjectAccessReviewStatus
type SubjectAccessReviewStatus struct {
	// Allowed is required. True if the action would be allowed, false otherwise.
	Allowed bool `json:"allowed" protobuf:"varint,1,opt,name=allowed"`
	// Denied is optional. True if the action would be denied, otherwise
	// false. If both allowed is false and denied is false, then the
	// authorizer has no opinion on whether to authorize the action. Denied

package aaa

import (
	_ "k8s.io/kubernetes/cmd/import-boss/testdata/inverse/allowed"
	_ "k8s.io/kubernetes/cmd/import-boss/testdata/inverse/allowed/a1"
	_ "k8s.io/kubernetes/cmd/import-boss/testdata/inverse/forbidden"
	_ "k8s.io/kubernetes/cmd/import-boss/testdata/inverse/forbidden/f1"
	_ "k8s.io/kubernetes/cmd/import-boss/testdata/inverse/neither"
	_ "k8s.io/kubernetes/cmd/import-boss/testdata/inverse/neither/n1"
)

package aaa

import (
	_ "k8s.io/kubernetes/cmd/import-boss/testdata/transitive/allowed"
	_ "k8s.io/kubernetes/cmd/import-boss/testdata/transitive/allowed/a1"
	_ "k8s.io/kubernetes/cmd/import-boss/testdata/transitive/forbidden"
	_ "k8s.io/kubernetes/cmd/import-boss/testdata/transitive/forbidden/f1"
	_ "k8s.io/kubernetes/cmd/import-boss/testdata/transitive/neither"
	_ "k8s.io/kubernetes/cmd/import-boss/testdata/transitive/neither/n1"
)

package aaa

import (
	_ "k8s.io/kubernetes/cmd/import-boss/testdata/simple-fwd/allowed"
	_ "k8s.io/kubernetes/cmd/import-boss/testdata/simple-fwd/allowed/a1"
	_ "k8s.io/kubernetes/cmd/import-boss/testdata/simple-fwd/forbidden"
	_ "k8s.io/kubernetes/cmd/import-boss/testdata/simple-fwd/forbidden/f1"
	_ "k8s.io/kubernetes/cmd/import-boss/testdata/simple-fwd/neither"
	_ "k8s.io/kubernetes/cmd/import-boss/testdata/simple-fwd/neither/n1"
)

rules:
  - selectorRegexp: k8s[.]io
    allowedPrefixes:
      - k8s.io/kubernetes/cmd/import-boss/testdata/nested-fwd/allowed-by-root
      - k8s.io/kubernetes/cmd/import-boss/testdata/nested-fwd/allowed-by-both
    forbiddenPrefixes:
      - k8s.io/kubernetes/cmd/import-boss/testdata/nested-fwd/forbidden-by-root

			validations: []ExpressionAccessor{
				&condition{
					Expression: "!authorizer.group('').resource('endpoints').check('create').allowed() && !authorizer.group('').resource('endpoints').check('create').allowed() && !authorizer.group('').resource('endpoints').check('create').allowed()",
				},
			},
			attributes:                  newValidAttribute(nil, false),
			hasParamKind:                true,

    }
    expectUnchanged();
  }

  @MapFeature.Require(absent = SUPPORTS_PUT)
  public void testReplaceEntry_unsupportedAbsentKey() {
    try {
      getMap().replace(k3(), v3(), v4());
    } catch (UnsupportedOperationException tolerated) {
      // the operation would be a no-op, so exceptions are allowed but not required
    }
    expectUnchanged();

 * <ul>
 * <li>Constructors are not allowed.</li>
 * <li>Inheritance hierarchies are not allowed (i.e. all rules sources must directly extend {@link RuleSource}).</li>
 * <li>Instance variables are not allowed.</li>
 * <li>Non-final static variables are not allowed (i.e. constants are allowed).</li>
 * <li>Methods cannot be overloaded.</li>

     */
    static AgentStatus allowed() {
        return new DefaultAgentStatus();
    }

    /**
     * Returns an AgentStatus instance that disables instrumentation regardless of the agent's availability.
     */
    static AgentStatus disabled() {
        return new DisabledAgentStatus();
    }

    /**

		return nil, errQueryDisabled
	}
	if allowed == nil {
		allowed = func(context.Context, module.Version) error { return nil }
	}

	if MainModules.Contains(path) && (query == "upgrade" || query == "patch") {
		m := module.Version{Path: path}
		if err := allowed(ctx, m); err != nil {
			return nil, fmt.Errorf("internal error: main module version is not allowed: %w", err)
		}