rbac_model.conf 349 B

123456789101112131415161718
  1. [request_definition]
  2. r = sub, obj, act
  3. [policy_definition]
  4. p = sub, obj, act
  5. [role_definition]
  6. g = _, _
  7. [policy_effect]
  8. e = some(where (p.eft == allow))
  9. [matchers]
  10. m = g(r.sub, p.sub) == true \
  11. && keyMatch2(r.obj, p.obj) == true \
  12. && regexMatch(r.act, p.act) == true \
  13. || r.sub == "admin" \
  14. || keyMatch2(r.obj, "/auth") == true \