Cerbos is the open core, language-agnostic, scalable authorization solution that makes user permissions and authorization simple to implement and manage.

Cerbos Community

Next question: do you have a complete overview of all the variables that we could be using in policy and output definitions? Eighter documentation or runtime based?

I got a question like: can we output the name of the derived_roles that where in place during policy evaluation, as part of an output in the policy?

I found something in this PR:
runtime.effectiveDerivedRoles
<https://github.com/cerbos/cerbos/pull/1778>

image.png

Yup you can return that variable in the policy output - but also if you make a check against the PDP with `includeMeta: true` then its returned in the response also

so how are the 'meta' vars refernced? Are those under the 'runtime' hive?

metadata isnt exposed to policies.

If you want to get the effectiveDerivedRoles then you can refernece `runtime.effectiveDerivedRoles` in the conditions/outputs

OK; so would there be a var to output the 'actions' in a Output?

hi <@U0283CLRWG6>, is there a variable to reference the 'action'?