Willy Xiao
05/09/2023, 10:33 PMDennis (Cerbos)
05/10/2023, 12:08 AMbook:room
/ book:hotel
actions. Then your resource policy can have different rules for book:room
action and book:*
action. The latter rule will be checked for both actions.
2. Using scoped policies.Willy Xiao
05/10/2023, 12:46 PMbook:*
action work?Dennis (Cerbos)
05/10/2023, 9:49 PMbook:room:<room-id>:hotel:<hotel-id>
Then in the policies, you can have rules:
book:room:*:hotel:*
- booking any room in any hotel.
book:room:*:hotel:456
- booking any room in the specified hotel.
book:room:123:hotel:456
- booking the specified room in the specified hotel.
but only some principals can book hotel 456?If the number of these principals is small, you may consider principal policies instead.