Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- [request_definition]
- r = sub, obj, act
- [policy_definition]
- p = sub, obj, act
- [role_definition]
- g = _, _
- [policy_effect]
- e = some(where (p.eft == allow))
- [matchers]
- m = g(r.sub, p.sub) && keyMatch(r.obj, p.obj) && (r.act == p.act || p.act == "*")
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement