mirror of
https://github.com/empayre/fleet.git
synced 2024-11-06 17:05:18 +00:00
40 lines
525 B
Rego
40 lines
525 B
Rego
|
package authz
|
||
|
|
|
||
|
|
team_user := {"teams": [
|
||
|
|
{
|
||
|
|
"id": 4,
|
||
|
|
"role": "observer",
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": 5,
|
||
|
|
"role": "maintainer",
|
||
|
|
},
|
||
|
|
]}
|
||
|
|
|
||
|
|
global_admin := {
|
||
|
|
"global_role": "admin",
|
||
|
|
"teams": [],
|
||
|
|
}
|
||
|
|
|
||
|
|
global_maintainer := {
|
||
|
|
"global_role": "maintainer",
|
||
|
|
"teams": [],
|
||
|
|
}
|
||
|
|
|
||
|
|
global_observer := {
|
||
|
|
"global_role": "observer",
|
||
|
|
"teams": [],
|
||
|
|
}
|
||
|
|
|
||
|
|
enroll_secret_team_4 := {
|
||
|
|
"type": "enroll_secret",
|
||
|
|
"team_id": 4,
|
||
|
|
}
|
||
|
|
|
||
|
|
test_team_role {
|
||
|
|
team_role(team_user, 4) == "observer"
|
||
|
|
team_role(team_user, 5) == "maintainer"
|
||
|
|
not team_role(team_user, 2)
|
||
|
|
}
|
||
|
|
|