-
Notifications
You must be signed in to change notification settings - Fork 91
Closed
Labels
comp-jans-cedarlingTouching folder /jans-cedarlingTouching folder /jans-cedarlingkind-bugIssue or PR is a bug in existing functionalityIssue or PR is a bug in existing functionality
Description
Describe the bug
Role entities are not being created in the authorize_unsigned
interface causing policies like below:
permit(
principal in Jans::Role::"Admin",
action,
resource
);
With an entity attributes like:
{
"type": "Jans::User",
"role": ["Admin"]
}
to always result in a DENY.
To Reproduce
Steps to reproduce the behavior:
- Define a
User
entity with aRole
parent in the Cedar schema:
entity Role;
entity User in [Role] = { ... };
- Define a policy that checks for the role:
permit(
principal in Jans::Role::"Admin",
action,
resource
);
- Call
cedarling::authorize_unsigned
with a principal attributes that contains a Role
{
"type": "Jans::User",
"role": ["Admin"]
}
- Get a
DENY
result
Expected behavior
- The result should be
ALLOW
- The
Role
entity should be created
Metadata
Metadata
Assignees
Labels
comp-jans-cedarlingTouching folder /jans-cedarlingTouching folder /jans-cedarlingkind-bugIssue or PR is a bug in existing functionalityIssue or PR is a bug in existing functionality