Cerbos is the open core, language-agnostic, scalable authorization solution that makes user permissions and authorization simple to implement and manage.

Cerbos Community

Screenshot 2023-08-08 at 10.42.33.png

Hello, :wave:
in a condition, can I evaluate a field in both `attr`? instead of using the ID of the principal?
I don’t really get why I am getting denied :thinking_face: I wanna check the principal belongs to the same organization as the principal
Resource:
```apiVersion: api.cerbos.dev/v1
resourcePolicy:
  version: "default"
  resource: "audience_definition"
  importDerivedRoles:
    - common_roles
  rules:
    - actions: ["*"]
      effect: EFFECT_ALLOW
      derivedRoles:
        - Tenant```
Edit: make sure the resource name in the YAML is the same in the playground resource :sweat_smile:

Hello, :wave:

Do you have a resource policy defined for the `audience` kind?

_“Hello darkness my old friend”_
Thanks haha didn’t spot the naming was different :slightly_smiling_face: