Merge "Update code to 4.6 official version"

9 files changed, 1019 insertions, 286 deletions

diff --git a/python_moondb/python_moondb/__init__.py b/python_moondb/python_moondb/__init__.py
index e2e16287..37c9a725 100644
--- a/python_moondb/python_moondb/__init__.py
+++ b/python_moondb/python_moondb/__init__.py
@@ -3,4 +3,4 @@
 # license which can be found in the file 'LICENSE' in this package distribution
 # or at 'http://www.apache.org/licenses/LICENSE-2.0'.
 
-__version__ = "1.2.16"
+__version__ = "1.2.20"
diff --git a/python_moondb/python_moondb/api/keystone.py b/python_moondb/python_moondb/api/keystone.py
index 582ae710..57521c36 100644
--- a/python_moondb/python_moondb/api/keystone.py
+++ b/python_moondb/python_moondb/api/keystone.py
@@ -103,4 +103,3 @@ class KeystoneManager(Managers):
                                _exception=exceptions.KeystoneUserError)
         except exceptions.KeystoneUserConflict:
             return True
-
diff --git a/python_moondb/python_moondb/api/managers.py b/python_moondb/python_moondb/api/managers.py
index f500d02e..414725f6 100644
--- a/python_moondb/python_moondb/api/managers.py
+++ b/python_moondb/python_moondb/api/managers.py
@@ -4,6 +4,7 @@
 # or at 'http://www.apache.org/licenses/LICENSE-2.0'.
 
 import logging
+
 logger = logging.getLogger("moon.db.api.managers")
 
 
diff --git a/python_moondb/python_moondb/api/model.py b/python_moondb/python_moondb/api/model.py
index c1603b83..4f6c34cb 100644
--- a/python_moondb/python_moondb/api/model.py
+++ b/python_moondb/python_moondb/api/model.py
@@ -8,6 +8,7 @@ import logging
 from python_moonutilities import exceptions
 from python_moonutilities.security_functions import filter_input, enforce
 from python_moondb.api.managers import Managers
+import copy
 
 logger = logging.getLogger("moon.db.api.model")
 
@@ -22,10 +23,31 @@ class ModelManager(Managers):
     def update_model(self, user_id, model_id, value):
         if model_id not in self.driver.get_models(model_id=model_id):
             raise exceptions.ModelUnknown
+
+        if not value['name'].strip():
+            raise exceptions.ModelContentError('Model name invalid')
+
+        if 'meta_rules' not in value:
+            raise exceptions.MetaRuleUnknown
+
+        if not value['name']:
+            raise exceptions.ModelContentError
+
+        model = self.get_models(user_id=user_id, model_id=model_id)
+        model = model[next(iter(model))]
+        if ((model['meta_rules'] and value['meta_rules'] and model['meta_rules'] != value[
+            'meta_rules']) \
+                or (model['meta_rules'] and not value['meta_rules'])):
+            policies = Managers.PolicyManager.get_policies(user_id=user_id)
+            for policy_id in policies:
+                if policies[policy_id]["model_id"] == model_id:
+                    raise exceptions.DeleteModelWithPolicy
+
         if value and 'meta_rules' in value:
             for meta_rule_id in value['meta_rules']:
                 if not self.driver.get_meta_rules(meta_rule_id=meta_rule_id):
                     raise exceptions.MetaRuleUnknown
+
         return self.driver.update_model(model_id=model_id, value=value)
 
     @enforce(("read", "write"), "models")
@@ -41,14 +63,44 @@ class ModelManager(Managers):
 
     @enforce(("read", "write"), "models")
     def add_model(self, user_id, model_id=None, value=None):
-        if model_id in self.driver.get_models(model_id=model_id):
+
+        if not value['name']:
+            raise exceptions.ModelContentError
+
+        if not value['name'].strip():
+            raise exceptions.ModelContentError('Model name invalid')
+
+        models = self.driver.get_models()
+        if model_id in models:
             raise exceptions.ModelExisting
+
+        for model in models:
+            if models[model]['name'] == value['name']:
+                raise exceptions.ModelExisting("Model Name Existed")
+            same_meta_rule_counter = 0
+            for meta_rule_id in models[model]['meta_rules']:
+                if meta_rule_id in value['meta_rules']:
+                    same_meta_rule_counter += 1
+            if same_meta_rule_counter == len(value['meta_rules']) and \
+                    len(models[model]['meta_rules']) == len(value['meta_rules']):
+                raise exceptions.ModelExisting("Meta Rules List Existed in another Model")
+
         if not model_id:
             model_id = uuid4().hex
         if value and 'meta_rules' in value:
             for meta_rule_id in value['meta_rules']:
-                if not self.driver.get_meta_rules(meta_rule_id=meta_rule_id):
+                if not meta_rule_id:
                     raise exceptions.MetaRuleUnknown
+                meta_rule = self.driver.get_meta_rules(meta_rule_id=meta_rule_id)
+                if not meta_rule:
+                    raise exceptions.MetaRuleUnknown
+
+                meta_rule_content = meta_rule[next(iter(meta_rule))]
+                if (not meta_rule_content['subject_categories']) or (
+                        not meta_rule_content['object_categories']) or (
+                        not meta_rule_content['action_categories']):
+                    raise exceptions.MetaRuleContentError
+
         return self.driver.add_model(model_id=model_id, value=value)
 
     @enforce("read", "models")
@@ -56,32 +108,64 @@ class ModelManager(Managers):
         return self.driver.get_models(model_id=model_id)
 
     @enforce(("read", "write"), "meta_rules")
-    def set_meta_rule(self, user_id, meta_rule_id, value):
-        if meta_rule_id not in self.driver.get_meta_rules(meta_rule_id=meta_rule_id):
+    def update_meta_rule(self, user_id, meta_rule_id, value):
+        meta_rules=self.driver.get_meta_rules()
+        if not meta_rule_id or meta_rule_id not in meta_rules:
             raise exceptions.MetaRuleUnknown
+        self.__check_meta_rule_dependencies(user_id=user_id, meta_rule_id=meta_rule_id)
         if value:
             if 'subject_categories' in value:
                 for subject_category_id in value['subject_categories']:
-                    if not self.driver.get_subject_categories(category_id=subject_category_id):
+                    if not subject_category_id or not self.driver.get_subject_categories(
+                            category_id=subject_category_id):
                         raise exceptions.SubjectCategoryUnknown
             if 'object_categories' in value:
                 for object_category_id in value['object_categories']:
-                    if not self.driver.get_object_categories(category_id=object_category_id):
+                    if not object_category_id or not self.driver.get_object_categories(
+                            category_id=object_category_id):
                         raise exceptions.ObjectCategoryUnknown
             if 'action_categories' in value:
                 for action_category_id in value['action_categories']:
-                    if not self.driver.get_action_categories(category_id=action_category_id):
+                    if not action_category_id or not self.driver.get_action_categories(
+                            category_id=action_category_id):
                         raise exceptions.ActionCategoryUnknown
+
+        for meta_rule_obj_id in meta_rules:
+            counter_matched_list = 0
+            counter_matched_list += self.check_combination(meta_rules[meta_rule_obj_id]['subject_categories'],
+                                                           value['subject_categories'])
+            counter_matched_list += self.check_combination(meta_rules[meta_rule_obj_id]['object_categories'],
+                                                           value['object_categories'])
+            counter_matched_list += self.check_combination(meta_rules[meta_rule_obj_id]['action_categories'],
+                                                           value['action_categories'])
+            if counter_matched_list == 3 and meta_rule_obj_id!=meta_rule_id:
+                raise exceptions.MetaRuleExisting("Same categories combination existed")
+
         return self.driver.set_meta_rule(meta_rule_id=meta_rule_id, value=value)
 
+    def __check_meta_rule_dependencies(self, user_id, meta_rule_id):
+        policies = Managers.PolicyManager.get_policies(user_id=user_id)
+        for policy_id in policies:
+            rules = Managers.PolicyManager.get_rules(user_id=user_id, policy_id=policy_id,
+                                                     meta_rule_id=meta_rule_id)
+            if len(rules['rules']):
+                raise exceptions.MetaRuleUpdateError
+
     @enforce("read", "meta_rules")
     def get_meta_rules(self, user_id, meta_rule_id=None):
         return self.driver.get_meta_rules(meta_rule_id=meta_rule_id)
 
     @enforce(("read", "write"), "meta_rules")
     def add_meta_rule(self, user_id, meta_rule_id=None, value=None):
-        if meta_rule_id in self.driver.get_meta_rules(meta_rule_id=meta_rule_id):
+
+        if not value['name']:
+            raise exceptions.MetaRuleContentError
+
+        meta_rules = self.driver.get_meta_rules()
+
+        if meta_rule_id in meta_rules:
             raise exceptions.MetaRuleExisting
+
         if value:
             if 'subject_categories' in value:
                 for subject_category_id in value['subject_categories']:
@@ -95,17 +179,43 @@ class ModelManager(Managers):
                 for action_category_id in value['action_categories']:
                     if not self.driver.get_action_categories(category_id=action_category_id):
                         raise exceptions.ActionCategoryUnknown
+
+        for meta_rule_obj_id in meta_rules:
+            counter_matched_list = 0
+            counter_matched_list += self.check_combination(meta_rules[meta_rule_obj_id]['subject_categories'],
+                                                           value['subject_categories'])
+            counter_matched_list += self.check_combination(meta_rules[meta_rule_obj_id]['object_categories'],
+                                                           value['object_categories'])
+            counter_matched_list += self.check_combination(meta_rules[meta_rule_obj_id]['action_categories'],
+                                                           value['action_categories'])
+            if counter_matched_list == 3:
+                raise exceptions.MetaRuleExisting("Same categories combination existed")
+
         return self.driver.set_meta_rule(meta_rule_id=meta_rule_id, value=value)
 
     @enforce(("read", "write"), "meta_rules")
+    def check_combination(self, list_one, list_two):
+        counter_removed_items = 0
+        temp_list_two = copy.deepcopy(list_two)
+        for item in list_one:
+            if item in temp_list_two:
+                temp_list_two.remove(item)
+                counter_removed_items += 1
+
+        if counter_removed_items == len(list_two) and len(list_two) == len(list_one) and len(list_two):
+            return 1
+        return 0
+
+    @enforce(("read", "write"), "meta_rules")
     def delete_meta_rule(self, user_id, meta_rule_id=None):
         if meta_rule_id not in self.driver.get_meta_rules(meta_rule_id=meta_rule_id):
             raise exceptions.MetaRuleUnknown
         # TODO (asteroide): check and/or delete data and assignments and rules linked to that meta_rule
         models = self.get_models(user_id=user_id)
         for model_id in models:
-            if models[model_id]['meta_rules'] == meta_rule_id:
-                raise exceptions.DeleteMetaRuleWithModel
+            for id in models[model_id]['meta_rules']:
+                if id == meta_rule_id:
+                    raise exceptions.DeleteMetaRuleWithModel
         return self.driver.delete_meta_rule(meta_rule_id=meta_rule_id)
 
     @enforce("read", "meta_data")
@@ -114,9 +224,16 @@ class ModelManager(Managers):
 
     @enforce(("read", "write"), "meta_data")
     def add_subject_category(self, user_id, category_id=None, value=None):
-        if category_id in self.driver.get_subject_categories(category_id=category_id):
+        subject_categories = self.driver.get_subject_categories(category_id=category_id)
+
+        if not value['name']:
+            raise exceptions.CategoryNameInvalid
+
+        if category_id in subject_categories:
             raise exceptions.SubjectCategoryExisting
-        return self.driver.add_subject_category(name=value["name"], description=value["description"], uuid=category_id)
+
+        return self.driver.add_subject_category(name=value["name"],
+                                                description=value["description"], uuid=category_id)
 
     @enforce(("read", "write"), "meta_data")
     def delete_subject_category(self, user_id, category_id):
@@ -127,13 +244,20 @@ class ModelManager(Managers):
         meta_rules = self.get_meta_rules(user_id=user_id)
         for meta_rule_id in meta_rules:
             for subject_category_id in meta_rules[meta_rule_id]['subject_categories']:
-                logger.info("delete_subject_category {} {}".format(subject_category_id, meta_rule_id))
+                logger.info(
+                    "delete_subject_category {} {}".format(subject_category_id, meta_rule_id))
                 logger.info("delete_subject_category {}".format(meta_rules[meta_rule_id]))
                 if subject_category_id == category_id:
-                    self.delete_meta_rule(user_id, meta_rule_id)
-                    # raise exceptions.DeleteCategoryWithMetaRule
+                    # has_rules = self.driver.is_meta_rule_has_rules(meta_rule_id)
+                    # if has_rules:
+                    raise exceptions.DeleteSubjectCategoryWithMetaRule
+
+        if self.driver.is_subject_category_has_assignment(category_id):
+            raise exceptions.DeleteCategoryWithAssignment
+
         if self.driver.is_subject_data_exist(category_id=category_id):
             raise exceptions.DeleteCategoryWithData
+
         return self.driver.delete_subject_category(category_id=category_id)
 
     @enforce("read", "meta_data")
@@ -142,9 +266,15 @@ class ModelManager(Managers):
 
     @enforce(("read", "write"), "meta_data")
     def add_object_category(self, user_id, category_id=None, value=None):
-        if category_id in self.driver.get_object_categories(category_id=category_id):
+        if not value['name']:
+            raise exceptions.CategoryNameInvalid
+
+        object_categories = self.driver.get_object_categories(category_id=category_id)
+        if category_id in object_categories:
             raise exceptions.ObjectCategoryExisting
-        return self.driver.add_object_category(name=value["name"], description=value["description"], uuid=category_id)
+
+        return self.driver.add_object_category(name=value["name"], description=value["description"],
+                                               uuid=category_id)
 
     @enforce(("read", "write"), "meta_data")
     def delete_object_category(self, user_id, category_id):
@@ -156,9 +286,16 @@ class ModelManager(Managers):
         for meta_rule_id in meta_rules:
             for object_category_id in meta_rules[meta_rule_id]['object_categories']:
                 if object_category_id == category_id:
-                    self.delete_meta_rule(user_id, meta_rule_id)
+                    # has_rules = self.driver.is_meta_rule_has_rules(meta_rule_id)
+                    # if has_rules:
+                    raise exceptions.DeleteObjectCategoryWithMetaRule
+
+        if self.driver.is_object_category_has_assignment(category_id):
+            raise exceptions.DeleteCategoryWithAssignment
+
         if self.driver.is_object_data_exist(category_id=category_id):
             raise exceptions.DeleteCategoryWithData
+
         return self.driver.delete_object_category(category_id=category_id)
 
     @enforce("read", "meta_data")
@@ -167,9 +304,16 @@ class ModelManager(Managers):
 
     @enforce(("read", "write"), "meta_data")
     def add_action_category(self, user_id, category_id=None, value=None):
-        if category_id in self.driver.get_action_categories(category_id=category_id):
+
+        if not value['name']:
+            raise exceptions.CategoryNameInvalid
+
+        action_categories = self.driver.get_action_categories(category_id=category_id)
+        if category_id in action_categories:
             raise exceptions.ActionCategoryExisting
-        return self.driver.add_action_category(name=value["name"], description=value["description"], uuid=category_id)
+
+        return self.driver.add_action_category(name=value["name"], description=value["description"],
+                                               uuid=category_id)
 
     @enforce(("read", "write"), "meta_data")
     def delete_action_category(self, user_id, category_id):
@@ -181,7 +325,14 @@ class ModelManager(Managers):
         for meta_rule_id in meta_rules:
             for action_category_id in meta_rules[meta_rule_id]['action_categories']:
                 if action_category_id == category_id:
-                    self.delete_meta_rule(user_id, meta_rule_id)
+                    # has_rules = self.driver.is_meta_rule_has_rules(meta_rule_id)
+                    # if has_rules:
+                    raise exceptions.DeleteActionCategoryWithMetaRule
+
+        if self.driver.is_action_category_has_assignment(category_id):
+            raise exceptions.DeleteCategoryWithAssignment
+
         if self.driver.is_action_data_exist(category_id=category_id):
             raise exceptions.DeleteCategoryWithData
+
         return self.driver.delete_action_category(category_id=category_id)
diff --git a/python_moondb/python_moondb/api/policy.py b/python_moondb/python_moondb/api/policy.py
index 05c2b7d5..03a93ff5 100644
--- a/python_moondb/python_moondb/api/policy.py
+++ b/python_moondb/python_moondb/api/policy.py
@@ -8,6 +8,7 @@ import logging
 from python_moonutilities.security_functions import enforce
 from python_moondb.api.managers import Managers
 from python_moonutilities import exceptions
+
 # from python_moondb.core import PDPManager
 
 logger = logging.getLogger("moon.db.api.policy")
@@ -38,11 +39,49 @@ class PolicyManager(Managers):
 
     @enforce(("read", "write"), "policies")
     def update_policy(self, user_id, policy_id, value):
-        if policy_id not in self.driver.get_policies(policy_id=policy_id):
+
+        if not value or not value['name']:
+            raise exceptions.PolicyContentError
+
+        policyList = self.driver.get_policies(policy_id=policy_id)
+        if not policy_id or policy_id not in policyList:
             raise exceptions.PolicyUnknown
-        if value and 'model_id' in value and value['model_id'] != "":
+
+        policies = self.driver.get_policies(policy_name=value['name'])
+        if len(policies) and not (policy_id in policies):
+            raise exceptions.PolicyExisting("Policy name Existed")
+
+        if 'model_id' in value and value['model_id']:
             if not Managers.ModelManager.get_models(user_id, model_id=value['model_id']):
                 raise exceptions.ModelUnknown
+
+        policy_obj = policyList[policy_id]
+        if (policy_obj["model_id"] and value["model_id"] != policy_obj["model_id"]):
+
+            subjects = self.driver.get_subjects(policy_id=policy_id)
+            if subjects:
+                raise exceptions.PolicyUpdateError("Policy is used in subject")
+            objects = self.driver.get_objects(policy_id=policy_id)
+            if objects:
+                raise exceptions.PolicyUpdateError("Policy is used in object")
+            actions = self.driver.get_actions(policy_id=policy_id)
+            if actions:
+                raise exceptions.PolicyUpdateError("Policy is used in action")
+
+            rules = self.driver.get_rules(policy_id=policy_id)["rules"]
+            if rules:
+                raise exceptions.PolicyUpdateError("Policy is used in rule")
+
+            subject_data = self.get_subject_data(user_id, policy_id=policy_id)
+            if subject_data and subject_data[0]["data"]:
+                raise exceptions.PolicyUpdateError("Policy is used in subject_data")
+            object_data = self.get_object_data(user_id, policy_id=policy_id)
+            if object_data and object_data[0]["data"]:
+                raise exceptions.PolicyUpdateError("Policy is used in object_data")
+            action_data = self.get_action_data(user_id, policy_id=policy_id)
+            if action_data and action_data[0]["data"]:
+                raise exceptions.PolicyUpdateError("Policy is used in action_data")
+
         return self.driver.update_policy(policy_id=policy_id, value=value)
 
     @enforce(("read", "write"), "policies")
@@ -55,15 +94,46 @@ class PolicyManager(Managers):
             for policy_id in pdps[pdp]['security_pipeline']:
                 if policy_id == policy_id:
                     raise exceptions.DeletePolicyWithPdp
+        subjects = self.driver.get_subjects(policy_id=policy_id)
+        if subjects:
+            raise exceptions.DeletePolicyWithPerimeter
+        objects = self.driver.get_objects(policy_id=policy_id)
+        if objects:
+            raise exceptions.DeletePolicyWithPerimeter
+        actions = self.driver.get_actions(policy_id=policy_id)
+        if actions:
+            raise exceptions.DeletePolicyWithPerimeter
+
+        rules = self.driver.get_rules(policy_id=policy_id)["rules"]
+        if rules:
+            raise exceptions.DeletePolicyWithRules
+
+        subject_data = self.get_subject_data(user_id, policy_id=policy_id)
+        if subject_data and subject_data[0]["data"]:
+            raise exceptions.DeletePolicyWithData
+        object_data = self.get_object_data(user_id, policy_id=policy_id)
+        if object_data and object_data[0]["data"]:
+            raise exceptions.DeletePolicyWithData
+        action_data = self.get_action_data(user_id, policy_id=policy_id)
+        if action_data and action_data[0]["data"]:
+            raise exceptions.DeletePolicyWithData
+
         return self.driver.delete_policy(policy_id=policy_id)
 
     @enforce(("read", "write"), "policies")
     def add_policy(self, user_id, policy_id=None, value=None):
+
+        if not value or not value['name']:
+            raise exceptions.PolicyContentError
         if policy_id in self.driver.get_policies(policy_id=policy_id):
             raise exceptions.PolicyExisting
+
+        if len(self.driver.get_policies(policy_name=value['name'])):
+            raise exceptions.PolicyExisting("Policy name Existed")
+
         if not policy_id:
             policy_id = uuid4().hex
-        if value and 'model_id' in value and value['model_id'] != "":
+        if 'model_id' in value and value['model_id'] != "":
             if not Managers.ModelManager.get_models(user_id, model_id=value['model_id']):
                 raise exceptions.ModelUnknown
         return self.driver.add_policy(policy_id=policy_id, value=value)
@@ -74,19 +144,31 @@ class PolicyManager(Managers):
 
     @enforce("read", "perimeter")
     def get_subjects(self, user_id, policy_id, perimeter_id=None):
-        if not policy_id:
-            pass
-        elif not (policy_id and self.get_policies(user_id=user_id, policy_id=policy_id)):
+        # if not policy_id:
+        #    raise exceptions.PolicyUnknown
+        if policy_id and (not self.get_policies(user_id=user_id, policy_id=policy_id)):
             raise exceptions.PolicyUnknown
         return self.driver.get_subjects(policy_id=policy_id, perimeter_id=perimeter_id)
 
     @enforce(("read", "write"), "perimeter")
     def add_subject(self, user_id, policy_id, perimeter_id=None, value=None):
+
         if not value or "name" not in value or not value["name"].strip():
-            raise exceptions.PerimeterNameInvalid
-        if value["name"] in map(lambda x: x['name'],
-                                self.get_subjects(user_id, policy_id, perimeter_id).values()):
-            raise exceptions.SubjectExisting
+            raise exceptions.PerimeterContentError('invalid name')
+
+        if not policy_id or (not self.get_policies(user_id=user_id, policy_id=policy_id)):
+            raise exceptions.PolicyUnknown
+
+        if perimeter_id:
+            subjects = self.driver.get_subjects(policy_id=None, perimeter_id=perimeter_id)
+            if subjects and subjects[perimeter_id]['name'] != value['name']:
+                raise exceptions.PerimeterContentError
+
+        if not perimeter_id:
+            subject_per = self.driver.get_subject_by_name(value['name'])
+            if len(subject_per):
+                perimeter_id = next(iter(subject_per))
+
         k_user = Managers.KeystoneManager.get_user_by_name(value.get('name'))
         if not k_user['users']:
             k_user = Managers.KeystoneManager.create_user(value)
@@ -102,59 +184,192 @@ class PolicyManager(Managers):
                 k_user = Managers.KeystoneManager.get_user_by_name(
                     value.get('name'))
                 perimeter_id = uuid4().hex
+
         value.update(k_user['users'][0])
-        if not self.get_policies(user_id=user_id, policy_id=policy_id):
-            raise exceptions.PolicyUnknown
+
         return self.driver.set_subject(policy_id=policy_id, perimeter_id=perimeter_id, value=value)
 
     @enforce(("read", "write"), "perimeter")
+    def update_subject(self, user_id, perimeter_id, value):
+        logger.debug("update_subject perimeter_id = {}".format(perimeter_id))
+
+        if not perimeter_id:
+            raise exceptions.SubjectUnknown
+
+        subjects = self.driver.get_subjects(policy_id=None, perimeter_id=perimeter_id)
+        if not subjects or not (perimeter_id in subjects):
+            raise exceptions.PerimeterContentError
+
+        if 'policy_list' in value or ('name' in value and not value['name']):
+            raise exceptions.PerimeterContentError
+
+        return self.driver.update_subject(perimeter_id=perimeter_id, value=value)
+
+    @enforce(("read", "write"), "perimeter")
     def delete_subject(self, user_id, policy_id, perimeter_id):
-        if policy_id and not self.get_policies(user_id=user_id, policy_id=policy_id):
+
+        if not perimeter_id:
+            raise exceptions.SubjectUnknown
+
+        if not policy_id:
+            raise exceptions.PolicyUnknown
+
+        if not self.get_subjects(user_id=user_id, policy_id=policy_id, perimeter_id=perimeter_id):
+            raise exceptions.SubjectUnknown
+
+        if not self.get_policies(user_id=user_id, policy_id=policy_id):
             raise exceptions.PolicyUnknown
+
+        subj_assig = self.driver.get_subject_assignments(policy_id=policy_id,
+                                                         subject_id=perimeter_id)
+        if subj_assig:
+            raise exceptions.DeletePerimeterWithAssignment
+
         return self.driver.delete_subject(policy_id=policy_id, perimeter_id=perimeter_id)
 
     @enforce("read", "perimeter")
     def get_objects(self, user_id, policy_id, perimeter_id=None):
-        if not policy_id:
-            pass
-        elif not (policy_id and self.get_policies(user_id=user_id, policy_id=policy_id)):
+        # if not policy_id:
+        #     pass
+        if policy_id and (not self.get_policies(user_id=user_id, policy_id=policy_id)):
             raise exceptions.PolicyUnknown
         return self.driver.get_objects(policy_id=policy_id, perimeter_id=perimeter_id)
 
     @enforce(("read", "write"), "perimeter")
     def add_object(self, user_id, policy_id, perimeter_id=None, value=None):
-        if not self.get_policies(user_id=user_id, policy_id=policy_id):
+        if not value or "name" not in value or not value["name"].strip():
+            raise exceptions.PerimeterContentError('invalid name')
+
+        if not policy_id or (not self.get_policies(user_id=user_id, policy_id=policy_id)):
             raise exceptions.PolicyUnknown
+
+        if perimeter_id:
+            object_perimeter = self.driver.get_objects(policy_id=None, perimeter_id=perimeter_id)
+            if not object_perimeter:
+                raise exceptions.PerimeterContentError
+
+        if not perimeter_id:
+            object_perimeter = self.driver.get_object_by_name(value['name'])
+            if len(object_perimeter):
+                perimeter_id = next(iter(object_perimeter))
+
+        if perimeter_id and object_perimeter[perimeter_id]['name'] != value['name']:
+            raise exceptions.PerimeterContentError
+
         if not perimeter_id:
             perimeter_id = uuid4().hex
         return self.driver.set_object(policy_id=policy_id, perimeter_id=perimeter_id, value=value)
 
     @enforce(("read", "write"), "perimeter")
+    def update_object(self, user_id, perimeter_id, value):
+        logger.debug("update_object perimeter_id = {}".format(perimeter_id))
+
+        if not perimeter_id:
+            raise exceptions.ObjectUnknown
+
+        objects = self.driver.get_objects(policy_id=None, perimeter_id=perimeter_id)
+        if not objects or not (perimeter_id in objects):
+            raise exceptions.PerimeterContentError
+
+        if 'policy_list' in value or ('name' in value and not value['name']):
+            raise exceptions.PerimeterContentError
+
+        return self.driver.update_object(perimeter_id=perimeter_id, value=value)
+
+    @enforce(("read", "write"), "perimeter")
     def delete_object(self, user_id, policy_id, perimeter_id):
-        if policy_id and not self.get_policies(user_id=user_id, policy_id=policy_id):
+
+        if not perimeter_id:
+            raise exceptions.ObjectUnknown
+
+        if not policy_id:
             raise exceptions.PolicyUnknown
+
+        if not self.get_objects(user_id=user_id, policy_id=policy_id, perimeter_id=perimeter_id):
+            raise exceptions.ObjectUnknown
+
+        if not self.get_policies(user_id=user_id, policy_id=policy_id):
+            raise exceptions.PolicyUnknown
+
+        obj_assig = self.driver.get_object_assignments(policy_id=policy_id, object_id=perimeter_id)
+        if obj_assig:
+            raise exceptions.DeletePerimeterWithAssignment
+
         return self.driver.delete_object(policy_id=policy_id, perimeter_id=perimeter_id)
 
     @enforce("read", "perimeter")
     def get_actions(self, user_id, policy_id, perimeter_id=None):
-        if not policy_id:
-            pass
-        elif not (policy_id and self.get_policies(user_id=user_id, policy_id=policy_id)):
+        # if not policy_id:
+        #     pass
+        if policy_id and (not self.get_policies(user_id=user_id, policy_id=policy_id)):
             raise exceptions.PolicyUnknown
         return self.driver.get_actions(policy_id=policy_id, perimeter_id=perimeter_id)
 
     @enforce(("read", "write"), "perimeter")
     def add_action(self, user_id, policy_id, perimeter_id=None, value=None):
         logger.debug("add_action {}".format(policy_id))
-        if not self.get_policies(user_id=user_id, policy_id=policy_id):
+
+        if not value or "name" not in value or not value["name"].strip():
+            raise exceptions.PerimeterContentError('invalid name')
+
+        if not policy_id or (not self.get_policies(user_id=user_id, policy_id=policy_id)):
             raise exceptions.PolicyUnknown
+
+        if perimeter_id:
+            action_perimeter = self.driver.get_actions(policy_id=None, perimeter_id=perimeter_id)
+            if not action_perimeter:
+                raise exceptions.PerimeterContentError
+
+        if not perimeter_id:
+            action_perimeter = self.driver.get_action_by_name(value['name'])
+            if len(action_perimeter):
+                perimeter_id = next(iter(action_perimeter))
+
+        if perimeter_id and action_perimeter[perimeter_id]['name'] != value['name']:
+            raise exceptions.PerimeterContentError
+
+        if not perimeter_id:
+            perimeter_id = uuid4().hex
+
         return self.driver.set_action(policy_id=policy_id, perimeter_id=perimeter_id, value=value)
 
     @enforce(("read", "write"), "perimeter")
+    def update_action(self, user_id, perimeter_id, value):
+        logger.debug("update_action perimeter_id = {}".format(perimeter_id))
+
+        if not perimeter_id:
+            raise exceptions.ActionUnknown
+
+        actions = self.driver.get_actions(policy_id=None, perimeter_id=perimeter_id)
+        if not actions or not (perimeter_id in actions):
+            raise exceptions.PerimeterContentError
+
+        if 'policy_list' in value or ('name' in value and not value['name']):
+            raise exceptions.PerimeterContentError
+
+        return self.driver.update_action(perimeter_id=perimeter_id, value=value)
+
+    @enforce(("read", "write"), "perimeter")
     def delete_action(self, user_id, policy_id, perimeter_id):
-        logger.debug("delete_action {} {} {}".format(policy_id, perimeter_id, self.get_policies(user_id=user_id, policy_id=policy_id)))
-        if policy_id and not self.get_policies(user_id=user_id, policy_id=policy_id):
+
+        if not perimeter_id:
+            raise exceptions.ActionUnknown
+
+        if not policy_id:
+            raise exceptions.PolicyUnknown
+
+        if not self.get_actions(user_id=user_id, policy_id=policy_id, perimeter_id=perimeter_id):
+            raise exceptions.ActionUnknown
+
+        logger.debug("delete_action {} {} {}".format(policy_id, perimeter_id,
+                                                     self.get_policies(user_id=user_id,
+                                                                       policy_id=policy_id)))
+        if not self.get_policies(user_id=user_id, policy_id=policy_id):
             raise exceptions.PolicyUnknown
+
+        act_assig = self.driver.get_action_assignments(policy_id=policy_id, action_id=perimeter_id)
+        if act_assig:
+            raise exceptions.DeletePerimeterWithAssignment
         return self.driver.delete_action(policy_id=policy_id, perimeter_id=perimeter_id)
 
     @enforce("read", "data")
@@ -172,23 +387,27 @@ class PolicyManager(Managers):
 
     @enforce(("read", "write"), "data")
     def set_subject_data(self, user_id, policy_id, data_id=None, category_id=None, value=None):
-        if not category_id:
-            raise Exception('Invalid category id')
-        if not Managers.ModelManager.get_subject_categories(user_id=user_id, category_id=category_id):
-            raise exceptions.MetaDataUnknown
-        if not self.get_policies(user_id=user_id, policy_id=policy_id):
-            raise exceptions.PolicyUnknown
+        if not category_id or (
+                not Managers.ModelManager.get_subject_categories(user_id=user_id,
+                                                                 category_id=category_id)):
+            raise exceptions.SubjectCategoryUnknown
+
+        self.__category_dependency_validation(user_id, policy_id, category_id, 'subject_categories')
+
         if not data_id:
             data_id = uuid4().hex
-        return self.driver.set_subject_data(policy_id=policy_id, data_id=data_id, category_id=category_id, value=value)
+        return self.driver.set_subject_data(policy_id=policy_id, data_id=data_id,
+                                            category_id=category_id, value=value)
 
     @enforce(("read", "write"), "data")
-    def delete_subject_data(self, user_id, policy_id, data_id):
+    def delete_subject_data(self, user_id, policy_id, data_id, category_id=None):
         # TODO (asteroide): check and/or delete assignments linked to that data
-        subject_assignments = self.get_subject_assignments(user_id=user_id, policy_id=policy_id, subject_id=data_id)
+        subject_assignments = self.get_subject_assignments(user_id=user_id, policy_id=policy_id,
+                                                           category_id=category_id)
         if subject_assignments:
             raise exceptions.DeleteData
-        return self.driver.delete_subject_data(policy_id=policy_id, data_id=data_id)
+        return self.driver.delete_subject_data(policy_id=policy_id, category_id=category_id,
+                                               data_id=data_id)
 
     @enforce("read", "data")
     def get_object_data(self, user_id, policy_id, data_id=None, category_id=None):
@@ -205,23 +424,28 @@ class PolicyManager(Managers):
 
     @enforce(("read", "write"), "data")
     def add_object_data(self, user_id, policy_id, data_id=None, category_id=None, value=None):
-        if not category_id:
-            raise Exception('Invalid category id')
-        if not Managers.ModelManager.get_object_categories(user_id=user_id, category_id=category_id):
-            raise exceptions.MetaDataUnknown
-        if not self.get_policies(user_id=user_id, policy_id=policy_id):
-            raise exceptions.PolicyUnknown
+
+        if not category_id or (
+                not Managers.ModelManager.get_object_categories(user_id=user_id,
+                                                                category_id=category_id)):
+            raise exceptions.ObjectCategoryUnknown
+
+        self.__category_dependency_validation(user_id, policy_id, category_id, 'object_categories')
+
         if not data_id:
             data_id = uuid4().hex
-        return self.driver.set_object_data(policy_id=policy_id, data_id=data_id, category_id=category_id, value=value)
+        return self.driver.set_object_data(policy_id=policy_id, data_id=data_id,
+                                           category_id=category_id, value=value)
 
     @enforce(("read", "write"), "data")
-    def delete_object_data(self, user_id, policy_id, data_id):
+    def delete_object_data(self, user_id, policy_id, data_id, category_id=None):
         # TODO (asteroide): check and/or delete assignments linked to that data
-        object_assignments = self.get_object_assignments(user_id=user_id, policy_id=policy_id, object_id=data_id)
+        object_assignments = self.get_object_assignments(user_id=user_id, policy_id=policy_id,
+                                                         category_id=category_id)
         if object_assignments:
             raise exceptions.DeleteData
-        return self.driver.delete_object_data(policy_id=policy_id, data_id=data_id)
+        return self.driver.delete_object_data(policy_id=policy_id, category_id=category_id,
+                                              data_id=data_id)
 
     @enforce("read", "data")
     def get_action_data(self, user_id, policy_id, data_id=None, category_id=None):
@@ -238,38 +462,53 @@ class PolicyManager(Managers):
 
     @enforce(("read", "write"), "data")
     def add_action_data(self, user_id, policy_id, data_id=None, category_id=None, value=None):
-        if not category_id:
-            raise Exception('Invalid category id')
-        if not Managers.ModelManager.get_action_categories(user_id=user_id, category_id=category_id):
-            raise exceptions.MetaDataUnknown
-        if not self.get_policies(user_id=user_id, policy_id=policy_id):
-            raise exceptions.PolicyUnknown
+        if not category_id or (
+                not Managers.ModelManager.get_action_categories(user_id=user_id,
+                                                                category_id=category_id)):
+            raise exceptions.ActionCategoryUnknown
+
+        self.__category_dependency_validation(user_id, policy_id, category_id, 'action_categories')
+
         if not data_id:
             data_id = uuid4().hex
-        return self.driver.set_action_data(policy_id=policy_id, data_id=data_id, category_id=category_id, value=value)
+        return self.driver.set_action_data(policy_id=policy_id, data_id=data_id,
+                                           category_id=category_id, value=value)
 
     @enforce(("read", "write"), "data")
-    def delete_action_data(self, user_id, policy_id, data_id):
+    def delete_action_data(self, user_id, policy_id, data_id, category_id=None):
         # TODO (asteroide): check and/or delete assignments linked to that data
-        action_assignments = self.get_action_assignments(user_id=user_id, policy_id=policy_id, action_id=data_id)
+        action_assignments = self.get_action_assignments(user_id=user_id, policy_id=policy_id,
+                                                         category_id=category_id)
         if action_assignments:
             raise exceptions.DeleteData
-        return self.driver.delete_action_data(policy_id=policy_id, data_id=data_id)
+        return self.driver.delete_action_data(policy_id=policy_id, category_id=category_id,
+                                              data_id=data_id)
 
     @enforce("read", "assignments")
     def get_subject_assignments(self, user_id, policy_id, subject_id=None, category_id=None):
-        return self.driver.get_subject_assignments(policy_id=policy_id, subject_id=subject_id, category_id=category_id)
+        return self.driver.get_subject_assignments(policy_id=policy_id, subject_id=subject_id,
+                                                   category_id=category_id)
 
     @enforce(("read", "write"), "assignments")
     def add_subject_assignment(self, user_id, policy_id, subject_id, category_id, data_id):
-        if not self.get_policies(user_id=user_id, policy_id=policy_id):
-            raise exceptions.PolicyUnknown
-        if not self.get_subjects(user_id=user_id, policy_id=policy_id, perimeter_id=subject_id):
+
+        if not category_id or (
+                not Managers.ModelManager.get_subject_categories(user_id=user_id,
+                                                                 category_id=category_id)):
+            raise exceptions.SubjectCategoryUnknown
+
+        self.__category_dependency_validation(user_id, policy_id, category_id, 'subject_categories')
+
+        if not subject_id or (
+                not self.get_subjects(user_id=user_id, policy_id=policy_id,
+                                      perimeter_id=subject_id)):
             raise exceptions.SubjectUnknown
-        if not Managers.ModelManager.get_subject_categories(user_id=user_id, category_id=category_id):
-            raise exceptions.MetaDataUnknown
-        if not self.get_subject_data(user_id=user_id, policy_id=policy_id, data_id=data_id):
+
+        if not data_id or (
+                not self.get_subject_data(user_id=user_id, policy_id=policy_id, data_id=data_id,
+                                          category_id=category_id)):
             raise exceptions.DataUnknown
+
         return self.driver.add_subject_assignment(policy_id=policy_id, subject_id=subject_id,
                                                   category_id=category_id, data_id=data_id)
 
@@ -280,18 +519,28 @@ class PolicyManager(Managers):
 
     @enforce("read", "assignments")
     def get_object_assignments(self, user_id, policy_id, object_id=None, category_id=None):
-        return self.driver.get_object_assignments(policy_id=policy_id, object_id=object_id, category_id=category_id)
+        return self.driver.get_object_assignments(policy_id=policy_id, object_id=object_id,
+                                                  category_id=category_id)
 
     @enforce(("read", "write"), "assignments")
     def add_object_assignment(self, user_id, policy_id, object_id, category_id, data_id):
-        if not self.get_policies(user_id=user_id, policy_id=policy_id):
-            raise exceptions.PolicyUnknown
-        if not self.get_objects(user_id=user_id, policy_id=policy_id, perimeter_id=object_id):
+
+        if not category_id or (
+                not Managers.ModelManager.get_object_categories(user_id=user_id,
+                                                                category_id=category_id)):
+            raise exceptions.ObjectCategoryUnknown
+
+        self.__category_dependency_validation(user_id, policy_id, category_id, 'object_categories')
+
+        if not object_id or (
+                not self.get_objects(user_id=user_id, policy_id=policy_id, perimeter_id=object_id)):
             raise exceptions.ObjectUnknown
-        if not Managers.ModelManager.get_object_categories(user_id=user_id, category_id=category_id):
-            raise exceptions.MetaDataUnknown
-        if not self.get_object_data(user_id=user_id, policy_id=policy_id, data_id=data_id):
+
+        if not data_id or (
+                not self.get_object_data(user_id=user_id, policy_id=policy_id, data_id=data_id,
+                                         category_id=category_id)):
             raise exceptions.DataUnknown
+
         return self.driver.add_object_assignment(policy_id=policy_id, object_id=object_id,
                                                  category_id=category_id, data_id=data_id)
 
@@ -302,18 +551,28 @@ class PolicyManager(Managers):
 
     @enforce("read", "assignments")
     def get_action_assignments(self, user_id, policy_id, action_id=None, category_id=None):
-        return self.driver.get_action_assignments(policy_id=policy_id, action_id=action_id, category_id=category_id)
+        return self.driver.get_action_assignments(policy_id=policy_id, action_id=action_id,
+                                                  category_id=category_id)
 
     @enforce(("read", "write"), "assignments")
     def add_action_assignment(self, user_id, policy_id, action_id, category_id, data_id):
-        if not self.get_policies(user_id=user_id, policy_id=policy_id):
-            raise exceptions.PolicyUnknown
-        if not self.get_actions(user_id=user_id, policy_id=policy_id, perimeter_id=action_id):
+
+        if not category_id or (
+                not Managers.ModelManager.get_action_categories(user_id=user_id,
+                                                                category_id=category_id)):
+            raise exceptions.ActionCategoryUnknown
+
+        self.__category_dependency_validation(user_id, policy_id, category_id, 'action_categories')
+
+        if not action_id or (
+                not self.get_actions(user_id=user_id, policy_id=policy_id, perimeter_id=action_id)):
             raise exceptions.ActionUnknown
-        if not Managers.ModelManager.get_action_categories(user_id=user_id, category_id=category_id):
-            raise exceptions.MetaDataUnknown
-        if not self.get_action_data(user_id=user_id, policy_id=policy_id, data_id=data_id):
+
+        if not data_id or (
+                not self.get_action_data(user_id=user_id, policy_id=policy_id, data_id=data_id,
+                                         category_id=category_id)):
             raise exceptions.DataUnknown
+
         return self.driver.add_action_assignment(policy_id=policy_id, action_id=action_id,
                                                  category_id=category_id, data_id=data_id)
 
@@ -324,17 +583,100 @@ class PolicyManager(Managers):
 
     @enforce("read", "rules")
     def get_rules(self, user_id, policy_id, meta_rule_id=None, rule_id=None):
-        return self.driver.get_rules(policy_id=policy_id, meta_rule_id=meta_rule_id, rule_id=rule_id)
-        logger.info("delete_subject_data: {} {}".format(policy_id, data_id))
+        return self.driver.get_rules(policy_id=policy_id, meta_rule_id=meta_rule_id,
+                                     rule_id=rule_id)
 
     @enforce(("read", "write"), "rules")
     def add_rule(self, user_id, policy_id, meta_rule_id, value):
-        if not self.get_policies(user_id=user_id, policy_id=policy_id):
-            raise exceptions.PolicyUnknown
-        if not self.ModelManager.get_meta_rules(user_id=user_id, meta_rule_id=meta_rule_id):
+        if not meta_rule_id or (
+                not self.ModelManager.get_meta_rules(user_id=user_id, meta_rule_id=meta_rule_id)):
             raise exceptions.MetaRuleUnknown
+
+        self.__check_existing_rule(policy_id=policy_id, meta_rule_id=meta_rule_id, user_id=user_id,
+                                   rule_value=value)
+        self.__dependencies_validation(user_id, policy_id, meta_rule_id)
+
         return self.driver.add_rule(policy_id=policy_id, meta_rule_id=meta_rule_id, value=value)
 
+    def __check_existing_rule(self, user_id, policy_id, meta_rule_id, rule_value):
+
+        if not meta_rule_id:
+            raise exceptions.MetaRuleUnknown
+
+        meta_rule = self.ModelManager.get_meta_rules(user_id=user_id, meta_rule_id=meta_rule_id)
+        if not meta_rule:
+            raise exceptions.MetaRuleUnknown
+
+        if len(meta_rule[meta_rule_id]['subject_categories']) + len(
+                meta_rule[meta_rule_id]['object_categories']) \
+                + len(meta_rule[meta_rule_id]['action_categories']) > len(rule_value['rule']):
+            raise exceptions.RuleContentError(message="Missing Data")
+
+        if len(meta_rule[meta_rule_id]['subject_categories']) + len(
+                meta_rule[meta_rule_id]['object_categories']) \
+                + len(meta_rule[meta_rule_id]['action_categories']) < len(rule_value['rule']):
+            raise exceptions.MetaRuleContentError(message="Missing Data")
+
+        temp_rule_data = list(
+            rule_value['rule'][0:len(meta_rule[meta_rule_id]['subject_categories'])])
+        found_data_counter = 0
+        start_sub = len(meta_rule[meta_rule_id]['subject_categories'])
+
+        for sub_cat_id in meta_rule[meta_rule_id]['subject_categories']:
+            subjects_data = self.get_subject_data(user_id=user_id,
+                                                  category_id=sub_cat_id, policy_id=policy_id)
+            found_data_counter = self.__validate_data_id(sub_cat_id, subjects_data[0]['data'],
+                                                         temp_rule_data,
+                                                         "Missing Subject_category "
+                                                         , found_data_counter)
+
+        if found_data_counter != len(meta_rule[meta_rule_id]['subject_categories']):
+            raise exceptions.RuleContentError(message="Missing Data")
+
+        temp_rule_data = list(
+            rule_value['rule'][
+            start_sub:start_sub + len(meta_rule[meta_rule_id]['object_categories'])])
+        found_data_counter = 0
+        start_sub = start_sub + len(meta_rule[meta_rule_id]['object_categories'])
+
+        for ob_cat_id in meta_rule[meta_rule_id]['object_categories']:
+            object_data = self.get_object_data(user_id=user_id,
+                                               category_id=ob_cat_id, policy_id=policy_id)
+
+            found_data_counter = self.__validate_data_id(ob_cat_id, object_data[0]['data'],
+                                                         temp_rule_data,
+                                                         "Missing Object_category ",
+                                                         found_data_counter)
+
+        if found_data_counter != len(meta_rule[meta_rule_id]['object_categories']):
+            raise exceptions.RuleContentError(message="Missing Data")
+
+        temp_rule_data = list(
+            rule_value['rule'][
+            start_sub:start_sub + len(meta_rule[meta_rule_id]['action_categories'])])
+        found_data_counter = 0
+
+        for act_cat_id in meta_rule[meta_rule_id]['action_categories']:
+            action_data = self.get_action_data(user_id=user_id, category_id=act_cat_id,
+                                               policy_id=policy_id)
+            found_data_counter = self.__validate_data_id(act_cat_id, action_data[0]['data'],
+                                                         temp_rule_data,
+                                                         "Missing Action_category ",
+                                                         found_data_counter)
+
+        if found_data_counter != len(meta_rule[meta_rule_id]['action_categories']):
+            raise exceptions.RuleContentError(message="Missing Data")
+
+    def __validate_data_id(self, cat_id, data_ids, temp_rule_data, error_msg, found_data_counter):
+        for ID in data_ids:
+            if ID in temp_rule_data:
+                temp_rule_data.remove(ID)
+                found_data_counter += 1
+        # if no data id found in the rule, so rule not valid
+        if found_data_counter < 1:
+            raise exceptions.RuleContentError(message=error_msg + cat_id)
+        return found_data_counter
+
     @enforce(("read", "write"), "rules")
     def delete_rule(self, user_id, policy_id, rule_id):
         return self.driver.delete_rule(policy_id=policy_id, rule_id=rule_id)
@@ -354,9 +696,56 @@ class PolicyManager(Managers):
         try:
             meta_rule_list = model[model_id]["meta_rules"]
             for meta_rule_id in meta_rule_list:
-                meta_rule = Managers.ModelManager.get_meta_rules(user_id=user_id, meta_rule_id=meta_rule_id)
+                meta_rule = Managers.ModelManager.get_meta_rules(user_id=user_id,
+                                                                 meta_rule_id=meta_rule_id)
                 categories["subject"].extend(meta_rule[meta_rule_id]["subject_categories"])
                 categories["object"].extend(meta_rule[meta_rule_id]["object_categories"])
                 categories["action"].extend(meta_rule[meta_rule_id]["action_categories"])
         finally:
             return categories
+
+    def __dependencies_validation(self, user_id, policy_id, meta_rule_id=None):
+
+        policies = self.get_policies(user_id=user_id, policy_id=policy_id)
+        if not policy_id or (not policies):
+            raise exceptions.PolicyUnknown
+
+        policy_content = policies[next(iter(policies))]
+        model_id = policy_content['model_id']
+        models = Managers.ModelManager.get_models(user_id=user_id, model_id=model_id)
+        if not model_id or not models:
+            raise exceptions.ModelUnknown
+
+        model_content = models[next(iter(models))]
+        if meta_rule_id:
+            meta_rule_exists = False
+
+            for model_meta_rule_id in model_content['meta_rules']:
+                if model_meta_rule_id == meta_rule_id:
+                    meta_rule_exists = True
+                    break
+
+            if not meta_rule_exists:
+                raise exceptions.MetaRuleNotLinkedWithPolicyModel
+
+            meta_rule = self.ModelManager.get_meta_rules(user_id=user_id, meta_rule_id=meta_rule_id)
+            meta_rule_content = meta_rule[next(iter(meta_rule))]
+            if (not meta_rule_content['subject_categories']) or (
+                    not meta_rule_content['object_categories']) or (
+                    not meta_rule_content['action_categories']):
+                raise exceptions.MetaRuleContentError
+        return model_content
+
+    def __category_dependency_validation(self, user_id, policy_id, category_id, category_key):
+        model = self.__dependencies_validation(user_id=user_id, policy_id=policy_id)
+        category_found = False
+        for model_meta_rule_id in model['meta_rules']:
+            meta_rule = self.ModelManager.get_meta_rules(user_id=user_id,
+                                                         meta_rule_id=model_meta_rule_id)
+            meta_rule_content = meta_rule[next(iter(meta_rule))]
+            if meta_rule_content[category_key] and category_id in meta_rule_content[category_key]:
+                category_found = True
+                break
+
+        if not category_found:
+            raise exceptions.CategoryNotAssignedMetaRule
diff --git a/python_moondb/python_moondb/backends/__init__.py b/python_moondb/python_moondb/backends/__init__.py
index 237bdc3e..6f1cd3d5 100644
--- a/python_moondb/python_moondb/backends/__init__.py
+++ b/python_moondb/python_moondb/backends/__init__.py
@@ -1,4 +1,3 @@
-
 """
 intra_extensions = {
     intra_extension_id1: {
@@ -94,4 +93,4 @@ rules = {
         ...},
     sub_meta_rule_id2: { },
     ...}
-"""
\ No newline at end of file
+"""
diff --git a/python_moondb/python_moondb/backends/sql.py b/python_moondb/python_moondb/backends/sql.py
index 7310e7f3..d25586ba 100644
--- a/python_moondb/python_moondb/backends/sql.py
+++ b/python_moondb/python_moondb/backends/sql.py
@@ -20,7 +20,8 @@ import sqlalchemy
 
 logger = logging.getLogger("moon.db.driver.sql")
 Base = declarative_base()
-DEBUG = True if configuration.get_configuration("logging")['logging']['loggers']['moon']['level'] == "DEBUG" else False
+DEBUG = True if configuration.get_configuration("logging")['logging']['loggers']['moon'][
+                    'level'] == "DEBUG" else False
 
 
 class DictBase:
@@ -50,7 +51,6 @@ class DictBase:
 
 
 class JsonBlob(sql_types.TypeDecorator):
-
     impl = sql.Text
 
     def process_bind_param(self, value, dialect):
@@ -174,6 +174,7 @@ class PerimeterDataBase(DictBase):
     id = sql.Column(sql.String(64), primary_key=True)
     name = sql.Column(sql.String(256), nullable=False)
     value = sql.Column(JsonBlob(), nullable=True)
+
     @declared_attr
     def policy_id(cls):
         return sql.Column(sql.ForeignKey("policies.id"), nullable=False)
@@ -254,10 +255,11 @@ class ActionAssignment(Base, PerimeterAssignmentBase):
 
 class MetaRule(Base, DictBase):
     __tablename__ = 'meta_rules'
-    attributes = ['id', 'name', 'subject_categories', 'object_categories', 'action_categories', 'value']
+    attributes = ['id', 'name', 'subject_categories', 'object_categories', 'action_categories',
+                  'value']
     id = sql.Column(sql.String(64), primary_key=True)
     name = sql.Column(sql.String(256), nullable=False)
-    subject_categories =  sql.Column(JsonBlob(), nullable=True)
+    subject_categories = sql.Column(JsonBlob(), nullable=True)
     object_categories = sql.Column(JsonBlob(), nullable=True)
     action_categories = sql.Column(JsonBlob(), nullable=True)
     value = sql.Column(JsonBlob(), nullable=True)
@@ -353,8 +355,10 @@ class PDPConnector(BaseConnector, PDPDriver):
                     d.update(value_wo_name)
                     setattr(ref, "value", d)
                 return {ref.id: ref.to_dict()}
-        except sqlalchemy.exc.IntegrityError:
-            raise exceptions.PdpExisting
+        except sqlalchemy.exc.IntegrityError as error:
+            if 'UNIQUE constraint' in str(error):
+                raise exceptions.PdpExisting
+            raise error
 
     def delete_pdp(self, pdp_id):
         with self.get_session_for_write() as session:
@@ -375,8 +379,10 @@ class PDPConnector(BaseConnector, PDPDriver):
                 })
                 session.add(new)
                 return {new.id: new.to_dict()}
-        except sqlalchemy.exc.IntegrityError:
-            raise exceptions.PdpExisting
+        except sqlalchemy.exc.IntegrityError as error:
+            if 'UNIQUE constraint' in str(error):
+                raise exceptions.PdpExisting
+            raise error
 
     def get_pdp(self, pdp_id=None):
         with self.get_session_for_read() as session:
@@ -390,20 +396,27 @@ class PDPConnector(BaseConnector, PDPDriver):
 class PolicyConnector(BaseConnector, PolicyDriver):
 
     def update_policy(self, policy_id, value):
-        with self.get_session_for_write() as session:
-            query = session.query(Policy)
-            query = query.filter_by(id=policy_id)
-            ref = query.first()
-            if ref:
-                value_wo_other_info = copy.deepcopy(value)
-                value_wo_other_info.pop("name", None)
-                value_wo_other_info.pop("model_id", None)
-                ref.name = value["name"]
-                ref.model_id= value["model_id"]
-                d = dict(ref.value)
-                d.update(value_wo_other_info)
-                setattr(ref, "value", d)
-            return {ref.id: ref.to_dict()}
+        try:
+            with self.get_session_for_write() as session:
+                query = session.query(Policy)
+                query = query.filter_by(id=policy_id)
+                ref = query.first()
+
+                if ref:
+                    value_wo_other_info = copy.deepcopy(value)
+                    value_wo_other_info.pop("name", None)
+                    value_wo_other_info.pop("model_id", None)
+                    ref.name = value["name"]
+                    ref.model_id = value["model_id"]
+                    d = dict(ref.value)
+                    d.update(value_wo_other_info)
+                    setattr(ref, "value", d)
+                return {ref.id: ref.to_dict()}
+
+        except sqlalchemy.exc.IntegrityError as error:
+            if 'UNIQUE constraint' in str(error):
+                raise exceptions.PolicyExisting
+            raise error
 
     def delete_policy(self, policy_id):
         with self.get_session_for_write() as session:
@@ -411,40 +424,49 @@ class PolicyConnector(BaseConnector, PolicyDriver):
             session.delete(ref)
 
     def add_policy(self, policy_id=None, value=None):
-        with self.get_session_for_write() as session:
-            value_wo_other_info = copy.deepcopy(value)
-            value_wo_other_info.pop("name", None)
-            value_wo_other_info.pop("model_id", None)
-            new = Policy.from_dict({
-                "id": policy_id if policy_id else uuid4().hex,
-                "name": value["name"],
-                "model_id": value.get("model_id", ""),
-                "value": value_wo_other_info
-            })
-            session.add(new)
-            return {new.id: new.to_dict()}
+        try:
+            with self.get_session_for_write() as session:
+                value_wo_other_info = copy.deepcopy(value)
+                value_wo_other_info.pop("name", None)
+                value_wo_other_info.pop("model_id", None)
+                new = Policy.from_dict({
+                    "id": policy_id if policy_id else uuid4().hex,
+                    "name": value["name"],
+                    "model_id": value.get("model_id", ""),
+                    "value": value_wo_other_info
+                })
+                session.add(new)
+                return {new.id: new.to_dict()}
 
-    def get_policies(self, policy_id=None):
+        except sqlalchemy.exc.IntegrityError as error:
+            if 'UNIQUE constraint' in str(error):
+                raise exceptions.PolicyExisting
+            raise error
+
+    def get_policies(self, policy_id=None, policy_name=None):
         with self.get_session_for_read() as session:
             query = session.query(Policy)
             if policy_id:
                 query = query.filter_by(id=policy_id)
+            elif policy_name:
+                query = query.filter_by(name=policy_name)
+
             ref_list = query.all()
             return {_ref.id: _ref.to_dict() for _ref in ref_list}
 
     def __get_perimeters(self, ClassType, policy_id, perimeter_id=None):
+        # if not policy_id:
+        #     raise exceptions.PolicyUnknown
+
         with self.get_session_for_read() as session:
             query = session.query(ClassType)
-            ref_list = copy.deepcopy(query.all())
+
             if perimeter_id:
-                for _ref in ref_list:
-                    _ref_value = _ref.to_return()
-                    if perimeter_id == _ref.id:
-                        if policy_id and policy_id in _ref_value["policy_list"]:
-                            return {_ref.id: _ref_value}
-                        else:
-                            return {}
-            elif policy_id:
+                query = query.filter_by(id=perimeter_id)
+
+            ref_list = copy.deepcopy(query.all())
+
+            if policy_id:
                 results = []
                 for _ref in ref_list:
                     _ref_value = _ref.to_return()
@@ -453,9 +475,48 @@ class PolicyConnector(BaseConnector, PolicyDriver):
                 return {_ref.id: _ref.to_return() for _ref in results}
             return {_ref.id: _ref.to_return() for _ref in ref_list}
 
-    def __set_perimeter(self, ClassType, ClassTypeException, policy_id, perimeter_id=None, value=None):
+    def __get_perimeter_by_name(self, ClassType, perimeter_name):
+        # if not policy_id:
+        #     raise exceptions.PolicyUnknown
+        with self.get_session_for_read() as session:
+            query = session.query(ClassType)
+            if not perimeter_name or not perimeter_name.strip():
+                raise exceptions.PerimeterContentError('invalid name')
+            query = query.filter_by(name=perimeter_name)
+            ref_list = copy.deepcopy(query.all())
+            return {_ref.id: _ref.to_return() for _ref in ref_list}
+
+    def __update_perimeter(self, class_type, class_type_exception, perimeter_id, value):
+        if not perimeter_id:
+            return exceptions.PerimeterContentError
+        with self.get_session_for_write() as session:
+            query = session.query(class_type)
+            query = query.filter_by(id=perimeter_id)
+            _perimeter = query.first()
+            if not _perimeter:
+                raise class_type_exception
+            temp_perimeter = copy.deepcopy(_perimeter.to_dict())
+            if 'name' in value:
+                temp_perimeter['value']['name'] = value['name']
+            if 'description' in value:
+                temp_perimeter['value']['description'] = value['description']
+            if 'extra' in value:
+                temp_perimeter['value']['extra'] = value['extra']
+            name = temp_perimeter['value']['name']
+            temp_perimeter['value'].pop("name", None)
+            new_perimeter = class_type.from_dict({
+                "id": temp_perimeter["id"],
+                "name": name,
+                "value": temp_perimeter["value"]
+            })
+            _perimeter.value = new_perimeter.value
+            _perimeter.name = new_perimeter.name
+            return {_perimeter.id: _perimeter.to_return()}
+
+    def __set_perimeter(self, ClassType, ClassTypeException, policy_id, perimeter_id=None,
+                        value=None):
         if not value or "name" not in value or not value["name"].strip():
-            raise exceptions.PerimeterNameInvalid
+            raise exceptions.PerimeterContentError('invalid name')
         with self.get_session_for_write() as session:
             _perimeter = None
             if perimeter_id:
@@ -485,10 +546,16 @@ class PolicyConnector(BaseConnector, PolicyDriver):
                 return {new.id: new.to_return()}
             else:
                 _value = copy.deepcopy(_perimeter.to_dict())
-                if "policy_list" not in _value["value"] or type(_value["value"]["policy_list"]) is not list:
+                if "policy_list" not in _value["value"] or type(
+                        _value["value"]["policy_list"]) is not list:
                     _value["value"]["policy_list"] = []
                 if policy_id and policy_id not in _value["value"]["policy_list"]:
                     _value["value"]["policy_list"].append(policy_id)
+                else:
+                    if policy_id:
+                        raise exceptions.PolicyExisting
+                    raise exceptions.PerimeterContentError
+
                 _value["value"].update(value)
 
                 name = _value["value"]["name"]
@@ -513,7 +580,10 @@ class PolicyConnector(BaseConnector, PolicyDriver):
             try:
                 old_perimeter["value"]["policy_list"].remove(policy_id)
                 new_perimeter = ClassType.from_dict(old_perimeter)
-                setattr(_perimeter, "value", getattr(new_perimeter, "value"))
+                if not new_perimeter.value["policy_list"]:
+                    session.delete(_perimeter)
+                else:
+                    setattr(_perimeter, "value", getattr(new_perimeter, "value"))
             except ValueError:
                 if not _perimeter.value["policy_list"]:
                     session.delete(_perimeter)
@@ -521,11 +591,25 @@ class PolicyConnector(BaseConnector, PolicyDriver):
     def get_subjects(self, policy_id, perimeter_id=None):
         return self.__get_perimeters(Subject, policy_id, perimeter_id)
 
+    def get_subject_by_name(self, perimeter_name):
+        return self.__get_perimeter_by_name(Subject, perimeter_name)
+
     def set_subject(self, policy_id, perimeter_id=None, value=None):
         try:
-            return self.__set_perimeter(Subject, exceptions.SubjectExisting, policy_id, perimeter_id=perimeter_id, value=value)
-        except sqlalchemy.exc.IntegrityError:
-            raise exceptions.SubjectExisting
+            return self.__set_perimeter(Subject, exceptions.SubjectExisting, policy_id,
+                                        perimeter_id=perimeter_id, value=value)
+        except sqlalchemy.exc.IntegrityError as error:
+            if 'UNIQUE constraint' in str(error):
+                raise exceptions.SubjectExisting
+            raise error
+
+    def update_subject(self, perimeter_id, value):
+        try:
+            return self.__update_perimeter(Subject, exceptions.SubjectExisting, perimeter_id, value)
+        except sqlalchemy.exc.IntegrityError as error:
+            if 'UNIQUE constraint' in str(error):
+                raise exceptions.SubjectExisting
+            raise error
 
     def delete_subject(self, policy_id, perimeter_id):
         self.__delete_perimeter(Subject, exceptions.SubjectUnknown, policy_id, perimeter_id)
@@ -533,12 +617,26 @@ class PolicyConnector(BaseConnector, PolicyDriver):
     def get_objects(self, policy_id, perimeter_id=None):
         return self.__get_perimeters(Object, policy_id, perimeter_id)
 
+    def get_object_by_name(self, perimeter_name):
+        return self.__get_perimeter_by_name(Object, perimeter_name)
+
     def set_object(self, policy_id, perimeter_id=None, value=None):
         try:
-            return self.__set_perimeter(Object, exceptions.ObjectExisting, policy_id, perimeter_id=perimeter_id, value=value)
-        except sqlalchemy.exc.IntegrityError as e:
-            logger.exception("IntegrityError {}".format(e))
-            raise exceptions.ObjectExisting
+            return self.__set_perimeter(Object, exceptions.ObjectExisting, policy_id,
+                                        perimeter_id=perimeter_id, value=value)
+        except sqlalchemy.exc.IntegrityError as error:
+            logger.exception("IntegrityError {}".format(error))
+            if 'UNIQUE constraint' in str(error):
+                raise exceptions.ObjectExisting
+            raise error
+
+    def update_object(self, perimeter_id, value):
+        try:
+            return self.__update_perimeter(Object, exceptions.ObjectExisting, perimeter_id, value)
+        except sqlalchemy.exc.IntegrityError as error:
+            if 'UNIQUE constraint' in str(error):
+                raise exceptions.ObjectExisting
+            raise error
 
     def delete_object(self, policy_id, perimeter_id):
         self.__delete_perimeter(Object, exceptions.ObjectUnknown, policy_id, perimeter_id)
@@ -546,18 +644,31 @@ class PolicyConnector(BaseConnector, PolicyDriver):
     def get_actions(self, policy_id, perimeter_id=None):
         return self.__get_perimeters(Action, policy_id, perimeter_id)
 
+    def get_action_by_name(self, perimeter_name):
+        return self.__get_perimeter_by_name(Action, perimeter_name)
+
     def set_action(self, policy_id, perimeter_id=None, value=None):
         try:
-            return self.__set_perimeter(Action, exceptions.ActionExisting, policy_id, perimeter_id=perimeter_id, value=value)
-        except sqlalchemy.exc.IntegrityError:
-            raise exceptions.ActionExisting
+            return self.__set_perimeter(Action, exceptions.ActionExisting, policy_id,
+                                        perimeter_id=perimeter_id, value=value)
+        except sqlalchemy.exc.IntegrityError as error:
+            if 'UNIQUE constraint' in str(error):
+                raise exceptions.ActionExisting
+            raise error
+
+    def update_action(self, perimeter_id, value):
+        try:
+           return self.__update_perimeter(Action, exceptions.ActionExisting, perimeter_id, value)
+        except sqlalchemy.exc.IntegrityError as error:
+            if 'UNIQUE constraint' in str(error):
+                raise exceptions.ActionExisting
+            raise error
 
     def delete_action(self, policy_id, perimeter_id):
         self.__delete_perimeter(Action, exceptions.ActionUnknown, policy_id, perimeter_id)
 
-    def __is_data_exist(self, ClassType, data_id=None, category_id=None):
-        if not data_id:
-            return False
+    def __is_data_exist(self, ClassType, category_id=None):
+
         with self.get_session_for_read() as session:
             query = session.query(ClassType)
             query = query.filter_by(category_id=category_id)
@@ -573,8 +684,13 @@ class PolicyConnector(BaseConnector, PolicyDriver):
                 query = query.filter_by(policy_id=policy_id, id=data_id, category_id=category_id)
             elif policy_id and category_id:
                 query = query.filter_by(policy_id=policy_id, category_id=category_id)
-            else:
+            elif category_id:
                 query = query.filter_by(category_id=category_id)
+            elif policy_id:
+                query = query.filter_by(policy_id=policy_id)
+            else:
+                raise exceptions.PolicyUnknown
+
             ref_list = query.all()
             return {
                 "policy_id": policy_id,
@@ -582,7 +698,8 @@ class PolicyConnector(BaseConnector, PolicyDriver):
                 "data": {_ref.id: _ref.to_dict() for _ref in ref_list}
             }
 
-    def __set_data(self, ClassType, ClassTypeData, policy_id, data_id=None, category_id=None, value=None):
+    def __set_data(self, ClassType, ClassTypeData, policy_id, data_id=None, category_id=None,
+                   value=None):
         with self.get_session_for_write() as session:
             query = session.query(ClassTypeData)
             query = query.filter_by(policy_id=policy_id, id=data_id, category_id=category_id)
@@ -612,65 +729,81 @@ class PolicyConnector(BaseConnector, PolicyDriver):
                 "data": {ref.id: ref.to_dict()}
             }
 
-    def __delete_data(self, ClassType, policy_id, data_id):
+    def __delete_data(self, ClassType, policy_id, category_id, data_id):
+
+        if not data_id:
+            raise exceptions.DataUnknown
         with self.get_session_for_write() as session:
             query = session.query(ClassType)
-            query = query.filter_by(policy_id=policy_id, id=data_id)
+            if category_id:
+                query = query.filter_by(policy_id=policy_id, category_id=category_id, id=data_id)
+            else:
+                query = query.filter_by(policy_id=policy_id, id=data_id)
             ref = query.first()
             if ref:
                 session.delete(ref)
 
-    def is_subject_data_exist(self, data_id=None, category_id=None):
-        return self.__is_data_exist(SubjectData, data_id=data_id, category_id=category_id)
+    def is_subject_data_exist(self, category_id=None):
+        return self.__is_data_exist(SubjectData, category_id=category_id)
 
     def get_subject_data(self, policy_id, data_id=None, category_id=None):
         return self.__get_data(SubjectData, policy_id, data_id=data_id, category_id=category_id)
 
     def set_subject_data(self, policy_id, data_id=None, category_id=None, value=None):
         try:
-            return self.__set_data(Subject, SubjectData, policy_id, data_id=data_id, category_id=category_id, value=value)
-        except sqlalchemy.exc.IntegrityError:
-            raise exceptions.SubjectScopeExisting
+            return self.__set_data(Subject, SubjectData, policy_id, data_id=data_id,
+                                   category_id=category_id, value=value)
+        except sqlalchemy.exc.IntegrityError as error:
+            if 'UNIQUE constraint' in str(error):
+                raise exceptions.SubjectScopeExisting
+            raise error
 
-    def delete_subject_data(self, policy_id, data_id):
-        return self.__delete_data(SubjectData, policy_id, data_id)
+    def delete_subject_data(self, policy_id, category_id, data_id):
+        return self.__delete_data(SubjectData, policy_id, category_id, data_id)
 
-    def is_object_data_exist(self, data_id=None, category_id=None):
-        return self.__is_data_exist(ObjectData, data_id=data_id, category_id=category_id)
+    def is_object_data_exist(self, category_id=None):
+        return self.__is_data_exist(ObjectData, category_id=category_id)
 
     def get_object_data(self, policy_id, data_id=None, category_id=None):
         return self.__get_data(ObjectData, policy_id, data_id=data_id, category_id=category_id)
 
     def set_object_data(self, policy_id, data_id=None, category_id=None, value=None):
         try:
-            return self.__set_data(Object, ObjectData, policy_id, data_id=data_id, category_id=category_id, value=value)
-        except sqlalchemy.exc.IntegrityError:
-            raise exceptions.ObjectScopeExisting
+            return self.__set_data(Object, ObjectData, policy_id, data_id=data_id,
+                                   category_id=category_id, value=value)
+        except sqlalchemy.exc.IntegrityError as error:
+            if 'UNIQUE constraint' in str(error):
+                raise exceptions.ObjectScopeExisting
+            raise error
 
-    def delete_object_data(self, policy_id, data_id):
-        return self.__delete_data(ObjectData, policy_id, data_id)
+    def delete_object_data(self, policy_id, category_id, data_id):
+        return self.__delete_data(ObjectData, policy_id, category_id, data_id)
 
-    def is_action_data_exist(self, data_id=None,category_id=None):
-        return self.__is_data_exist(ActionData, data_id=data_id, category_id=category_id)
+    def is_action_data_exist(self, category_id=None):
+        return self.__is_data_exist(ActionData, category_id=category_id)
 
     def get_action_data(self, policy_id, data_id=None, category_id=None):
         return self.__get_data(ActionData, policy_id, data_id=data_id, category_id=category_id)
 
     def set_action_data(self, policy_id, data_id=None, category_id=None, value=None):
         try:
-            return self.__set_data(Action, ActionData, policy_id, data_id=data_id, category_id=category_id, value=value)
-        except sqlalchemy.exc.IntegrityError:
-            raise exceptions.ActionScopeExisting
+            return self.__set_data(Action, ActionData, policy_id, data_id=data_id,
+                                   category_id=category_id, value=value)
+        except sqlalchemy.exc.IntegrityError as error:
+            if 'UNIQUE constraint' in str(error):
+                raise exceptions.ActionScopeExisting
+            raise error
 
-    def delete_action_data(self, policy_id, data_id):
-        return self.__delete_data(ActionData, policy_id, data_id)
+    def delete_action_data(self, policy_id, category_id, data_id):
+        return self.__delete_data(ActionData, policy_id, category_id, data_id)
 
     def get_subject_assignments(self, policy_id, subject_id=None, category_id=None):
         with self.get_session_for_write() as session:
             query = session.query(SubjectAssignment)
             if subject_id and category_id:
-                #TODO change the subject_id to perimeter_id to allow code refactoring
-                query = query.filter_by(policy_id=policy_id, subject_id=subject_id, category_id=category_id)
+                # TODO change the subject_id to perimeter_id to allow code refactoring
+                query = query.filter_by(policy_id=policy_id, subject_id=subject_id,
+                                        category_id=category_id)
             elif subject_id:
                 query = query.filter_by(policy_id=policy_id, subject_id=subject_id)
             else:
@@ -681,7 +814,8 @@ class PolicyConnector(BaseConnector, PolicyDriver):
     def add_subject_assignment(self, policy_id, subject_id, category_id, data_id):
         with self.get_session_for_write() as session:
             query = session.query(SubjectAssignment)
-            query = query.filter_by(policy_id=policy_id, subject_id=subject_id, category_id=category_id)
+            query = query.filter_by(policy_id=policy_id, subject_id=subject_id,
+                                    category_id=category_id)
             ref = query.first()
             if ref:
                 old_ref = copy.deepcopy(ref.to_dict())
@@ -704,10 +838,27 @@ class PolicyConnector(BaseConnector, PolicyDriver):
                 session.add(ref)
             return {ref.id: ref.to_dict()}
 
+    def is_subject_category_has_assignment(self, category_id):
+        return self.__is_category_has_assignment(SubjectAssignment, category_id)
+
+    def is_object_category_has_assignment(self, category_id):
+        return self.__is_category_has_assignment(ObjectAssignment, category_id)
+
+    def is_action_category_has_assignment(self, category_id):
+        return self.__is_category_has_assignment(ActionAssignment, category_id)
+
+    def __is_category_has_assignment(self, ClassType, category_id):
+        with self.get_session_for_write() as session:
+            query = session.query(ClassType)
+            query = query.filter_by(category_id=category_id)
+            count = query.count()
+            return count > 0
+
     def delete_subject_assignment(self, policy_id, subject_id, category_id, data_id):
         with self.get_session_for_write() as session:
             query = session.query(SubjectAssignment)
-            query = query.filter_by(policy_id=policy_id, subject_id=subject_id, category_id=category_id)
+            query = query.filter_by(policy_id=policy_id, subject_id=subject_id,
+                                    category_id=category_id)
             ref = query.first()
             if ref:
                 old_ref = copy.deepcopy(ref.to_dict())
@@ -724,8 +875,9 @@ class PolicyConnector(BaseConnector, PolicyDriver):
         with self.get_session_for_write() as session:
             query = session.query(ObjectAssignment)
             if object_id and category_id:
-                #TODO change the object_id to perimeter_id to allow code refactoring
-                query = query.filter_by(policy_id=policy_id, object_id=object_id, category_id=category_id)
+                # TODO change the object_id to perimeter_id to allow code refactoring
+                query = query.filter_by(policy_id=policy_id, object_id=object_id,
+                                        category_id=category_id)
             elif object_id:
                 query = query.filter_by(policy_id=policy_id, object_id=object_id)
             else:
@@ -736,7 +888,8 @@ class PolicyConnector(BaseConnector, PolicyDriver):
     def add_object_assignment(self, policy_id, object_id, category_id, data_id):
         with self.get_session_for_write() as session:
             query = session.query(ObjectAssignment)
-            query = query.filter_by(policy_id=policy_id, object_id=object_id, category_id=category_id)
+            query = query.filter_by(policy_id=policy_id, object_id=object_id,
+                                    category_id=category_id)
             ref = query.first()
             if ref:
                 old_ref = copy.deepcopy(ref.to_dict())
@@ -762,7 +915,8 @@ class PolicyConnector(BaseConnector, PolicyDriver):
     def delete_object_assignment(self, policy_id, object_id, category_id, data_id):
         with self.get_session_for_write() as session:
             query = session.query(ObjectAssignment)
-            query = query.filter_by(policy_id=policy_id, object_id=object_id, category_id=category_id)
+            query = query.filter_by(policy_id=policy_id, object_id=object_id,
+                                    category_id=category_id)
             ref = query.first()
             if ref:
                 old_ref = copy.deepcopy(ref.to_dict())
@@ -777,12 +931,17 @@ class PolicyConnector(BaseConnector, PolicyDriver):
 
     def get_action_assignments(self, policy_id, action_id=None, category_id=None):
         with self.get_session_for_write() as session:
+            if not policy_id:
+                return exceptions.PolicyUnknown
             query = session.query(ActionAssignment)
             if action_id and category_id:
                 # TODO change the action_id to perimeter_id to allow code refactoring
-                query = query.filter_by(policy_id=policy_id, action_id=action_id, category_id=category_id)
+                query = query.filter_by(policy_id=policy_id, action_id=action_id,
+                                        category_id=category_id)
             elif action_id:
                 query = query.filter_by(policy_id=policy_id, action_id=action_id)
+            elif category_id:
+                query = query.filter_by(policy_id=policy_id, category_id=category_id)
             else:
                 query = query.filter_by(policy_id=policy_id)
             ref_list = query.all()
@@ -791,7 +950,8 @@ class PolicyConnector(BaseConnector, PolicyDriver):
     def add_action_assignment(self, policy_id, action_id, category_id, data_id):
         with self.get_session_for_write() as session:
             query = session.query(ActionAssignment)
-            query = query.filter_by(policy_id=policy_id, action_id=action_id, category_id=category_id)
+            query = query.filter_by(policy_id=policy_id, action_id=action_id,
+                                    category_id=category_id)
             ref = query.first()
             if ref:
                 old_ref = copy.deepcopy(ref.to_dict())
@@ -817,7 +977,8 @@ class PolicyConnector(BaseConnector, PolicyDriver):
     def delete_action_assignment(self, policy_id, action_id, category_id, data_id):
         with self.get_session_for_write() as session:
             query = session.query(ActionAssignment)
-            query = query.filter_by(policy_id=policy_id, action_id=action_id, category_id=category_id)
+            query = query.filter_by(policy_id=policy_id, action_id=action_id,
+                                    category_id=category_id)
             ref = query.first()
             if ref:
                 old_ref = copy.deepcopy(ref.to_dict())
@@ -837,7 +998,7 @@ class PolicyConnector(BaseConnector, PolicyDriver):
                 query = query.filter_by(policy_id=policy_id, rule_id=rule_id)
                 ref = query.first()
                 return {ref.id: ref.to_dict()}
-            elif meta_rule_id:
+            elif meta_rule_id and policy_id:
                 query = query.filter_by(policy_id=policy_id, meta_rule_id=meta_rule_id)
                 ref_list = query.all()
                 return {
@@ -853,6 +1014,14 @@ class PolicyConnector(BaseConnector, PolicyDriver):
                     "rules": list(map(lambda x: x.to_dict(), ref_list))
                 }
 
+    def is_meta_rule_has_rules(self, meta_rule_id):
+        with self.get_session_for_read() as session:
+            query = session.query(Rule)
+
+            query = query.filter_by(meta_rule_id=meta_rule_id)
+            count = query.count()
+            return count > 0
+
     def add_rule(self, policy_id, meta_rule_id, value):
         try:
             rules = self.get_rules(policy_id, meta_rule_id=meta_rule_id)
@@ -870,8 +1039,10 @@ class PolicyConnector(BaseConnector, PolicyDriver):
                 )
                 session.add(ref)
                 return {ref.id: ref.to_dict()}
-        except sqlalchemy.exc.IntegrityError:
-            raise exceptions.RuleExisting
+        except sqlalchemy.exc.IntegrityError as error:
+            if 'UNIQUE constraint' in str(error):
+                raise exceptions.RuleExisting
+            raise error
 
     def delete_rule(self, policy_id, rule_id):
         with self.get_session_for_write() as session:
@@ -885,19 +1056,24 @@ class PolicyConnector(BaseConnector, PolicyDriver):
 class ModelConnector(BaseConnector, ModelDriver):
 
     def update_model(self, model_id, value):
-        with self.get_session_for_write() as session:
-            query = session.query(Model)
-            if model_id:
-                query = query.filter_by(id=model_id)
-            ref = query.first()
-            if ref:
-                value_wo_name = copy.deepcopy(value)
-                value_wo_name.pop("name", None)
-                setattr(ref, "name", value["name"])
-                d = dict(ref.value)
-                d.update(value_wo_name)
-                setattr(ref, "value", d)
-            return {ref.id: ref.to_dict()}
+        try:
+            with self.get_session_for_write() as session:
+                query = session.query(Model)
+                if model_id:
+                    query = query.filter_by(id=model_id)
+                ref = query.first()
+                if ref:
+                    value_wo_name = copy.deepcopy(value)
+                    value_wo_name.pop("name", None)
+                    setattr(ref, "name", value["name"])
+                    d = dict(ref.value)
+                    d.update(value_wo_name)
+                    setattr(ref, "value", d)
+                return {ref.id: ref.to_dict()}
+        except sqlalchemy.exc.IntegrityError as error:
+            if 'UNIQUE constraint' in str(error):
+                raise exceptions.ModelExisting
+            raise error
 
     def delete_model(self, model_id):
         with self.get_session_for_write() as session:
@@ -916,8 +1092,9 @@ class ModelConnector(BaseConnector, ModelDriver):
                 })
                 session.add(new)
                 return {new.id: new.to_dict()}
-        except sqlalchemy.exc.IntegrityError as e:
-            raise exceptions.ModelExisting
+        except sqlalchemy.exc.IntegrityError as error:
+            if 'UNIQUE constraint' in str(error):
+                raise exceptions.ModelExisting
 
     def get_models(self, model_id=None):
         with self.get_session_for_read() as session:
@@ -931,37 +1108,44 @@ class ModelConnector(BaseConnector, ModelDriver):
             return r
 
     def set_meta_rule(self, meta_rule_id, value):
-        with self.get_session_for_write() as session:
-            value_wo_other_data = copy.deepcopy(value)
-            value_wo_other_data.pop("name", None)
-            value_wo_other_data.pop("subject_categories", None)
-            value_wo_other_data.pop("object_categories", None)
-            value_wo_other_data.pop("action_categories", None)
-            if meta_rule_id is None:
-                try:
-                    ref = MetaRule.from_dict(
-                        {
-                            "id": uuid4().hex,
-                            "name": value["name"],
-                            "subject_categories": value["subject_categories"],
-                            "object_categories": value["object_categories"],
-                            "action_categories": value["action_categories"],
-                            "value": value_wo_other_data
-                        }
-                    )
-                    session.add(ref)
-                except sqlalchemy.exc.IntegrityError as e:
-                    raise exceptions.MetaRuleExisting
-            else:
-                query = session.query(MetaRule)
-                query = query.filter_by(id=meta_rule_id)
-                ref = query.first()
-                setattr(ref, "name", value["name"])
-                setattr(ref, "subject_categories", value["subject_categories"])
-                setattr(ref, "object_categories", value["object_categories"])
-                setattr(ref, "action_categories", value["action_categories"])
-                setattr(ref, "value", value_wo_other_data)
-            return {ref.id: ref.to_dict()}
+        try:
+            with self.get_session_for_write() as session:
+                value_wo_other_data = copy.deepcopy(value)
+                value_wo_other_data.pop("name", None)
+                value_wo_other_data.pop("subject_categories", None)
+                value_wo_other_data.pop("object_categories", None)
+                value_wo_other_data.pop("action_categories", None)
+                if meta_rule_id is None:
+                    try:
+                        ref = MetaRule.from_dict(
+                            {
+                                "id": uuid4().hex,
+                                "name": value["name"],
+                                "subject_categories": value["subject_categories"],
+                                "object_categories": value["object_categories"],
+                                "action_categories": value["action_categories"],
+                                "value": value_wo_other_data
+                            }
+                        )
+                        session.add(ref)
+                    except sqlalchemy.exc.IntegrityError as error:
+                        if 'UNIQUE constraint' in str(error):
+                            raise exceptions.MetaRuleExisting
+                        raise error
+                else:
+                    query = session.query(MetaRule)
+                    query = query.filter_by(id=meta_rule_id)
+                    ref = query.first()
+                    setattr(ref, "name", value["name"])
+                    setattr(ref, "subject_categories", value["subject_categories"])
+                    setattr(ref, "object_categories", value["object_categories"])
+                    setattr(ref, "action_categories", value["action_categories"])
+                    setattr(ref, "value", value_wo_other_data)
+                return {ref.id: ref.to_dict()}
+        except sqlalchemy.exc.IntegrityError as error:
+            if 'UNIQUE constraint' in str(error):
+                raise exceptions.MetaRuleExisting
+            raise error
 
     def get_meta_rules(self, meta_rule_id=None):
         with self.get_session_for_read() as session:
@@ -988,7 +1172,7 @@ class ModelConnector(BaseConnector, ModelDriver):
             return {_ref.id: _ref.to_dict() for _ref in ref_list}
 
     def __add_perimeter_category(self, ClassType, name, description, uuid=None):
-        if not name.strip():
+        if not name or not name.strip():
             raise exceptions.CategoryNameInvalid
         with self.get_session_for_write() as session:
             ref = ClassType.from_dict(
@@ -1015,8 +1199,10 @@ class ModelConnector(BaseConnector, ModelDriver):
     def add_subject_category(self, name, description, uuid=None):
         try:
             return self.__add_perimeter_category(SubjectCategory, name, description, uuid=uuid)
-        except sql.exc.IntegrityError as e:
-            raise exceptions.SubjectCategoryExisting()
+        except sql.exc.IntegrityError as error:
+            if 'UNIQUE constraint' in str(error):
+                raise exceptions.SubjectCategoryExisting
+            raise error
 
     def delete_subject_category(self, category_id):
         self.__delete_perimeter_category(SubjectCategory, category_id)
@@ -1027,8 +1213,10 @@ class ModelConnector(BaseConnector, ModelDriver):
     def add_object_category(self, name, description, uuid=None):
         try:
             return self.__add_perimeter_category(ObjectCategory, name, description, uuid=uuid)
-        except sql.exc.IntegrityError as e:
-            raise exceptions.ObjectCategoryExisting()
+        except sql.exc.IntegrityError as error:
+            if 'UNIQUE constraint' in str(error):
+                raise exceptions.ObjectCategoryExisting
+            raise error
 
     def delete_object_category(self, category_id):
         self.__delete_perimeter_category(ObjectCategory, category_id)
@@ -1040,8 +1228,10 @@ class ModelConnector(BaseConnector, ModelDriver):
     def add_action_category(self, name, description, uuid=None):
         try:
             return self.__add_perimeter_category(ActionCategory, name, description, uuid=uuid)
-        except sql.exc.IntegrityError as e:
-            raise exceptions.ActionCategoryExisting()
+        except sql.exc.IntegrityError as error:
+            if 'UNIQUE constraint' in str(error):
+                raise exceptions.ActionCategoryExisting
+            raise error
 
     def delete_action_category(self, category_id):
         self.__delete_perimeter_category(ActionCategory, category_id)
diff --git a/python_moondb/python_moondb/core.py b/python_moondb/python_moondb/core.py
index 984b81a7..3fee146b 100644
--- a/python_moondb/python_moondb/core.py
+++ b/python_moondb/python_moondb/core.py
@@ -19,7 +19,7 @@ class Driver(DriverManager):
             namespace='moon_db.driver',
             name=driver_name,
             invoke_on_load=True,
-            invoke_args=(engine_name, ),
+            invoke_args=(engine_name,),
         )
 
 
diff --git a/python_moondb/python_moondb/migrate_repo/versions/001_moon.py b/python_moondb/python_moondb/migrate_repo/versions/001_moon.py
index 1bfb2ffa..13670b91 100644
--- a/python_moondb/python_moondb/migrate_repo/versions/001_moon.py
+++ b/python_moondb/python_moondb/migrate_repo/versions/001_moon.py
@@ -7,8 +7,8 @@ import json
 import sqlalchemy as sql
 from sqlalchemy import types as sql_types
 
-class JsonBlob(sql_types.TypeDecorator):
 
+class JsonBlob(sql_types.TypeDecorator):
     impl = sql.Text
 
     def process_bind_param(self, value, dialect):
@@ -134,7 +134,8 @@ def upgrade(migrate_engine):
         sql.Column('value', JsonBlob(), nullable=True),
         sql.Column('category_id', sql.ForeignKey("subject_categories.id"), nullable=False),
         sql.Column('policy_id', sql.ForeignKey("policies.id"), nullable=False),
-        sql.UniqueConstraint('name', 'category_id', 'policy_id', name='unique_constraint_subject_data'),
+        sql.UniqueConstraint('name', 'category_id', 'policy_id',
+                             name='unique_constraint_subject_data'),
         mysql_engine='InnoDB',
         mysql_charset='utf8')
     subject_data_table.create(migrate_engine, checkfirst=True)
@@ -147,7 +148,8 @@ def upgrade(migrate_engine):
         sql.Column('value', JsonBlob(), nullable=True),
         sql.Column('category_id', sql.ForeignKey("object_categories.id"), nullable=False),
         sql.Column('policy_id', sql.ForeignKey("policies.id"), nullable=False),
-        sql.UniqueConstraint('name', 'category_id', 'policy_id', name='unique_constraint_object_data'),
+        sql.UniqueConstraint('name', 'category_id', 'policy_id',
+                             name='unique_constraint_object_data'),
         mysql_engine='InnoDB',
         mysql_charset='utf8')
     object_data_table.create(migrate_engine, checkfirst=True)
@@ -160,7 +162,8 @@ def upgrade(migrate_engine):
         sql.Column('value', JsonBlob(), nullable=True),
         sql.Column('category_id', sql.ForeignKey("action_categories.id"), nullable=False),
         sql.Column('policy_id', sql.ForeignKey("policies.id"), nullable=False),
-        sql.UniqueConstraint('name', 'category_id', 'policy_id', name='unique_constraint_action_data'),
+        sql.UniqueConstraint('name', 'category_id', 'policy_id',
+                             name='unique_constraint_action_data'),
         mysql_engine='InnoDB',
         mysql_charset='utf8')
     action_data_table.create(migrate_engine, checkfirst=True)
@@ -173,7 +176,8 @@ def upgrade(migrate_engine):
         sql.Column('policy_id', sql.ForeignKey("policies.id"), nullable=False),
         sql.Column('subject_id', sql.ForeignKey("subjects.id"), nullable=False),
         sql.Column('category_id', sql.ForeignKey("subject_categories.id"), nullable=False),
-        sql.UniqueConstraint('policy_id', 'subject_id', 'category_id', name='unique_constraint_subject_assignment'),
+        sql.UniqueConstraint('policy_id', 'subject_id', 'category_id',
+                             name='unique_constraint_subject_assignment'),
         mysql_engine='InnoDB',
         mysql_charset='utf8')
     subject_assignments_table.create(migrate_engine, checkfirst=True)
@@ -186,7 +190,8 @@ def upgrade(migrate_engine):
         sql.Column('policy_id', sql.ForeignKey("policies.id"), nullable=False),
         sql.Column('object_id', sql.ForeignKey("objects.id"), nullable=False),
         sql.Column('category_id', sql.ForeignKey("object_categories.id"), nullable=False),
-        sql.UniqueConstraint('policy_id', 'object_id', 'category_id', name='unique_constraint_object_assignment'),
+        sql.UniqueConstraint('policy_id', 'object_id', 'category_id',
+                             name='unique_constraint_object_assignment'),
         mysql_engine='InnoDB',
         mysql_charset='utf8')
     object_assignments_table.create(migrate_engine, checkfirst=True)
@@ -199,7 +204,8 @@ def upgrade(migrate_engine):
         sql.Column('policy_id', sql.ForeignKey("policies.id"), nullable=False),
         sql.Column('action_id', sql.ForeignKey("actions.id"), nullable=False),
         sql.Column('category_id', sql.ForeignKey("action_categories.id"), nullable=False),
-        sql.UniqueConstraint('policy_id', 'action_id', 'category_id', name='unique_constraint_action_assignment'),
+        sql.UniqueConstraint('policy_id', 'action_id', 'category_id',
+                             name='unique_constraint_action_assignment'),
         mysql_engine='InnoDB',
         mysql_charset='utf8')
     action_assignments_table.create(migrate_engine, checkfirst=True)
@@ -236,28 +242,26 @@ def downgrade(migrate_engine):
     meta.bind = migrate_engine
 
     for _table in (
-        'rules',
-        'meta_rules',
-        'action_assignments',
-        'object_assignments',
-        'subject_assignments',
-        'action_data',
-        'object_data',
-        'subject_data',
-        'actions',
-        'objects',
-        'subjects',
-        'action_categories',
-        'object_categories',
-        'subject_categories',
-        'models',
-        'policies',
-        'pdp'
+            'rules',
+            'meta_rules',
+            'action_assignments',
+            'object_assignments',
+            'subject_assignments',
+            'action_data',
+            'object_data',
+            'subject_data',
+            'actions',
+            'objects',
+            'subjects',
+            'action_categories',
+            'object_categories',
+            'subject_categories',
+            'models',
+            'policies',
+            'pdp'
     ):
         try:
             table = sql.Table(_table, meta, autoload=True)
             table.drop(migrate_engine, checkfirst=True)
         except Exception as e:
             print(e)
-
-