{{ message }}
Repository navigation
implicit policies #1115
implicit policies
#1115
Replies: 3 comments 4 replies
|
ok so I figured out how to do it without groups but I'm not sure how to achieve this: to allow user group to all subjects |
0 replies
[request_definition]
r = sub, obj, act
[policy_definition]
p = sub, obj, act
[role_definition]
g = _, _
[policy_effect]
e = some(where (p.eft == allow))
[matchers]
m = (g(r.sub, p.sub) || p.sub == "everyone") && r.obj == p.obj && r.act == p.actp, everyone, resource1, read, allow
p, everyone, resource2, read, allow
p, everyone, resource3, read, allow |
3 replies
|
so if I want to apply polices for everyone I can't add those policies to a group and then apply that group to everyone that way? |
|
I'd like to group multiple policies together and apply that to everyone. This way I don't have to remove policies one by one, I can instead remove one line. |
|
@hsluoyz I think I found something that seems to work. Is there something I've missed? |
1 reply
Answer selected by
SirMetathyst
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
@hsluoyz I think I found something that seems to work. Is there something I've missed?