Title
#help
m

Maggie Walker

08/31/2022, 3:48 PM
Another random question while I'm here - is there a way to see specifically why an action was denied (or, I guess, where it hit it's first deny)? I'm imagining an engineer creating a policy, getting an unexpected deny, and then having trouble parsing through all the policies to know where the action was blocked
Alex Olivier (Cerbos)

Alex Olivier (Cerbos)

08/31/2022, 3:49 PM
Yes! If you set the includeMeta flag in the request it will tell you which rule matched. You can also turn on the audit logging on the PDP instance to have it logged there also
m

Maggie Walker

08/31/2022, 3:54 PM
awesome, thanks!
Andrew Haines (Cerbos)

Andrew Haines (Cerbos)

08/31/2022, 3:54 PM
Also, when running tests you can use
--verbose
to get an execution trace that should help explain test failures
m

Maggie Walker

08/31/2022, 4:01 PM
is
includeMeta
in the docs somewhere?
Alex Olivier (Cerbos)

Alex Olivier (Cerbos)

08/31/2022, 4:02 PM