Luis Diaz
05/25/2023, 1:36 PMCharith (Cerbos)
05/25/2023, 1:46 PMLuis Diaz
05/25/2023, 1:49 PM- name: PolicyA
actions:
- ...
roles:
- 1
- name: PolicyB
actions:
- ...
roles:
- 2
role = 3
is equivalent to roles 1 and 2 without having to add it everywhere explicitlyCharith (Cerbos)
05/25/2023, 1:56 PMparentRoles
. So, you could create a derived role named 1
which has parentRoles: ["1"]
. Then, when you want to say that role 3
is equal to 1
, change your derived role definition to parentRoles: ["1", "3"]
.Luis Diaz
05/25/2023, 1:59 PM