add user update/delete policy

2023-01-19 16:27:14 +01:00 · 2023-01-19 16:27:14 +01:00 · 02eae16665
parent d75ab7f82a
commit 02eae16665
2 changed files with 22 additions and 0 deletions
--- a/opa/user/delete.rego
+++ b/opa/user/delete.rego
@ -0,0 +1,11 @@
+package user.delete
+
+default allow := false
+
+allow := true {
+    input.uuid == input.owner
+}
+
+allow := true {
+    input.role == "admin"
+}
--- a/opa/user/update.rego
+++ b/opa/user/update.rego
@ -0,0 +1,11 @@
+package user.update
+
+default allow := false
+
+allow := true {
+    input.uuid == input.owner
+}
+
+allow := true {
+    input.role == "admin"
+}