Title
m
Maggie Walker
09/15/2022, 1:44 PMIs it possible to do wildcard matching in CEL? e.g:
R.attr.account_id in P.attr.tenants.*.subaccount_idsP.attr.tenants.3.subaccount_ids
P.attr.tenants.5.subaccount_idsc
Charith (Cerbos)
09/15/2022, 1:48 PMNo, there's no wildcard operator. However, if
tenantsexistsm
Maggie Walker
09/15/2022, 1:49 PMunfortunately tenants is an object, with nested objects that may or may not have a
subaccounts_idGinger = Principal(
id="Ginger",
roles={"user"},
attr={
"type": "human",
"apps": ["Content"],
"tenants": {
"3": {
"account_id": "3",
"subaccount_ids": ["31", "32"],
"attachments": {
"Label_administrator": {
"role": "Label_administrator",
"content_types": ["digital_audio"]
}
}
}
}
}
)or
Colin = Principal(
id="Colin",
roles={"user"},
attr={
"type": "human",
"apps": ["Content"],
"tenants": {
"31": {
"account_id": "31",
"attachments": {
"Label_user": {
"role": "Label_user",
"content_types": ["digital_audio"]
}
}
}
}
}
)although we are playing with the shape of the data, so this may not be the final shape
c
Charith (Cerbos)
09/15/2022, 1:50 PMI think you could still use
existsm
Maggie Walker
09/15/2022, 1:54 PMsomething like this?
my_obj.tenants.exists(x, x.matches("subaccount_ids"))I think this won't work because it needs to go a level deeper
c
Charith (Cerbos)
09/15/2022, 1:56 PM:let tenants = {"3": {"subaccounts": [31, 32]}, "4": {"accounts": [4]}}
tenants.exists(t, 31 in tenants[t].subaccounts)
_ = truem
Maggie Walker
09/15/2022, 1:57 PMahhhh
c
Charith (Cerbos)
09/15/2022, 1:58 PMSo
my_obj.tenants.exists(x, my_obj.tenants[x].matches("subaccount_ids"))l
Luis Diaz
09/15/2022, 1:58 PM@Charith (Cerbos) can this continue to nest? If
tenants[x]c
Charith (Cerbos)
09/15/2022, 1:59 PMYes, I think you can. It would be quite difficult to read though 🙂
m
Maggie Walker
09/15/2022, 1:59 PMI like your solution- thanks!
l
Luis Diaz
09/15/2022, 2:00 PMIt would be quite difficult to read thoughThat’s what I’m known for! Presumably you could assign it to a variable though, then it becomes more manageable?
c
Charith (Cerbos)
09/15/2022, 2:00 PMIf you mean policy variables, absolutely.