https://cerbos.dev logo
#help
Title
# help
f

Francois Le Pape

08/08/2023, 8:44 AM
Hello, 👋 in a condition, can I evaluate a field in both
attr
? instead of using the ID of the principal? I don’t really get why I am getting denied 🤔 I wanna check the principal belongs to the same organization as the principal Resource:
Copy code
apiVersion: api.cerbos.dev/v1
resourcePolicy:
  version: "default"
  resource: "audience_definition"
  importDerivedRoles:
    - common_roles
  rules:
    - actions: ["*"]
      effect: EFFECT_ALLOW
      derivedRoles:
        - Tenant
Edit: make sure the resource name in the YAML is the same in the playground resource 😅
1
o

oguzhan

08/08/2023, 8:48 AM
Hello, 👋 Do you have a resource policy defined for the
audience
kind?
f

Francois Le Pape

08/08/2023, 8:49 AM
🤦
“Hello darkness my old friend” Thanks haha didn’t spot the naming was different 🙂
5 Views