Hello, :wave: in a condition, can I evaluate a fie...
# help
f
Hello, 👋 in a condition, can I evaluate a field in both
attr
? instead of using the ID of the principal? I don’t really get why I am getting denied 🤔 I wanna check the principal belongs to the same organization as the principal Resource:
Copy code
apiVersion: api.cerbos.dev/v1
resourcePolicy:
  version: "default"
  resource: "audience_definition"
  importDerivedRoles:
    - common_roles
  rules:
    - actions: ["*"]
      effect: EFFECT_ALLOW
      derivedRoles:
        - Tenant
Edit: make sure the resource name in the YAML is the same in the playground resource 😅
1
o
Hello, 👋 Do you have a resource policy defined for the
audience
kind?
f
🤦
“Hello darkness my old friend” Thanks haha didn’t spot the naming was different 🙂