Cerbos is the open core, language-agnostic, scalable authorization solution that makes user permissions and authorization simple to implement and manage.

Cerbos Community

Hello! I am writing a derived role where I want to store the parentRole (that the user is coming as) into a variable. This will help me simplify and templatize my conditional expressions. Is it currently supported in Cerbos CEL?

Example:

The annotated section is desired to be templatized.

There is support for variables in a policy

<https://docs.cerbos.dev/cerbos/latest/policies/conditions.html#_policy_variables|https://docs.cerbos.dev/cerbos/latest/policies/conditions.html#_policy_variables>

Does this do what you need?

Umm, the variable support in my use case is for derived roles actually :slightly_smiling_face:

Looking for a similar construct like that in policy.

You can access the set of roles using `request.principal.roles`

You can create variables in any type of file 

On the similar lines, like we define variables for fixed values,
Can we define expressions into variables for re-usability? :wink:

Yup! there is an example here <https://docs.cerbos.dev/cerbos/latest/policies/conditions.html#_policy_variables>