Can someone help me understand what benefits/funct...
# help
m
Can someone help me understand what benefits/functionality I would get by making a hierarchical resource name in a policy? https://docs.cerbos.dev/cerbos/latest/policies/authoring_tips#_policy_structure
I can't seem to find that information in the documentation.
a
Hey. We often get asked about whether it is best to have a single policy repo or separate ones for each application. A single repo is easier to manage and means you can share derived roles, variables, schema etc across your different applications. Then using the structured resource names keeps things tidy and obvious which application is responsible for each resource policy.
Specifically for the action names of you structure names then you can also setup wildcard rules.
m
Thank you for your reply @Alex Olivier (Cerbos). So, the only benefit is being able to match on wildcards since wildcards respect the
:
structure as well?
a
Yes it’s a convention
m
Thank you