func (p policy) matches(a authorizer.Attributes) bool { if p.subjectMatches(a) { if p.Readonly == false || (p.Readonly == a.IsReadOnly()) { if p.Kind == "" || (p.Kind == a.GetKind()) { if p.Namespace == "" || (p.Namespace == a.GetNamespace()) { return true } } } } return false }