/*
 * Copyright 2020 ThoughtWorks, Inc.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

package com.thoughtworks.go.config.policy.elasticagents;

import com.thoughtworks.go.config.Validatable;
import com.thoughtworks.go.config.policy.AbstractDirective;
import com.thoughtworks.go.config.policy.DirectiveType;
import com.thoughtworks.go.config.policy.Result;

public class ClusterProfilesDenyDirective extends AbstractDirective {
    public ClusterProfilesDenyDirective(String action, String type, String resource) {
        super(DirectiveType.ALLOW, action, type, resource);
    }

    @Override
    public Result apply(String action, Class<? extends Validatable> aClass, String resource, String resourceToOperateWithin) {
        if (matchesAction(action) && matchesType(aClass) && matchesResource(resource)) {
            return Result.DENY;
        }

        if (isRequestForElasticAgentProfiles(aClass) && matchesAction(action) && matchesResource(resourceToOperateWithin)) {
            return Result.DENY;
        }

        return Result.SKIP;
    }
}

@@ -1056,13 +1056,12 @@
 ype.
-ALLOW
+DENY
 , ac

Fix directive type for ClusterProfilesDenyDirective * Change directive type from ALLOW to DENY