Level validation does not check hasTag or getTag #1503
Description
Before opening, please confirm:
- I have searched for duplicate or closed issues.
- I have read the guide for submitting bug reports.
- I have done my best to include a minimal, self-contained set of instructions for consistently reproducing the issue.
Bug Category
Schemas and Validation
Describe the bug
This policy validates at level 0, but it required dereferencing principal, so it should only validate at a level greater than or equal to 1
permit(principal, action, resource) when { principal.hasTag("foo") };
Expected behavior
.
Reproduction steps
.
Code Snippet
// Put your code below this line.Log output
// Put your output below this line
Additional configuration
No response
Operating System
No response
Additional information and screenshots
No response