Implement ACL Engine

[JavaSaBr]

Implement ACL Engine in EMQ style:

{allow, {user, "dashboard"}, subscribe, ["$SYS/#"]}.
{allow, all, publish, ["/smarthome/%c/temperature"]}.
{allow, {ipaddr, "10.211.55.10"}, pubsub, ["$SYS/#", "#"]}.
{deny, all, subscribe, ["$SYS/#", {eq, "#"}]}.

Introduction: https://www.emqx.com/en/blog/authorization-in-mqtt-using-acls-to-control-access-to-mqtt-messaging
Authorization: https://docs.emqx.com/en/emqx/latest/access-control/authz/file.html
Authentication: https://docs.emqx.com/en/emqx/latest/access-control/authn/acl.html

[Wagos]

New JSON-like acl format:
{users:["dashboard"], event:"subscribe", topics:["$SYS/#"]}
{users:["dashboard"], event:"subscribe", topics:["$SYS/#"]}
{event:"publish", topics:["/smarthome/%c/temperature"]}
{ipaddr:["10.211.55.10"], event:"pubsub", topics:["$SYS/#", "#"]}
{deny:true, event:"subscribe", topics:["$SYS/#", "#"]}

[JavaSaBr]

What about this option?

[
   {
      "type": "allow",
      "clients": {
         "users": [
            "dashboard"
         ]
      },
      "event": "sub",
      "topics": [
         "$SYS/#"
      ]
   },
   {
      "type": "allow",
      "clients": {
         "users": [
            "dashboard"
         ]
      },
      "event": "sub",
      "topics": [
         "$SYS/#"
      ]
   },
   {
      "type": "allow",
      "event": "pub",
      "topics": [
         "/smarthome/%c/temperature"
      ]
   },
   {
      "type": "allow",
      "clients": {
         "ipAddresses": [
            "10.211.55.10"
         ]
      },
      "event": "pubsub",
      "topics": [
         "$SYS/#",
         "#"
      ]
   },
   {
      "type": "deny",
      "event": "sub",
      "topics": [
         "$SYS/#",
         "#"
      ]
   }
]

[crazyrokr]

Let's consider HCL-format for ACL-config. The config above would be like

rule "allow_dashboard_sub_1" {
  type  = "allow"
  event = "sub"

  clients {
    users = ["dashboard"]
  }

  topics = ["$SYS/#"]
}

rule "allow_dashboard_sub_2" {
  type  = "allow"
  event = "sub"

  clients {
    users = ["dashboard"]
  }

  topics = ["$SYS/#"]
}

rule "allow_pub_temperature" {
  type  = "allow"
  event = "pub"

  topics = ["/smarthome/%c/temperature"]
}

rule "allow_ip_pubsub" {
  type  = "allow"
  event = "pubsub"

  clients {
    ipAddresses = ["10.211.55.10"]
  }

  topics = [
    "$SYS/#",
    "#",
  ]
}

rule "deny_sub_all" {
  type  = "deny"
  event = "sub"

  topics = [
    "$SYS/#",
    "#",
  ]
}

[crazyrokr]

Implemented within #59