Guillaume Picard
03/10/2023, 11:55 AMpots.yml, pans.yml, knives.yml
and then define what the roles can do in each of the resource policies.
you would create cook.yml
and define what the role cook
can do inside that single file for all resources pots, pans, knives
?
I guess you could have resource policies named cook_pans.yml
, cook_knives.yml
, but just want to ask if there’s a good pattern.
ThanksAndrew Haines (Cerbos)
03/10/2023, 12:12 PMknives.yaml
handling all the roles, but internally that could be structured as a role-led policy so that the list of actions that can be performed by the cook
role are grouped together.