refactor context sent to opa

2026-01-02 19:02:40 +00:00 · 2023-01-18 15:50:42 +01:00
parent 7dc6e7795f
commit a578417d31
4 changed files with 37 additions and 13 deletions
--- a/opa/user/list.rego
+++ b/opa/user/list.rego
@@ -3,5 +3,5 @@ package user.list
 default allow := false

 allow := true {
-    input.uuid == "96d99d44-e0a6-458e-a656-de2a400d60a9"
+    input.role == "admin"
 }
--- a/opa/user/read.rego
+++ b/opa/user/read.rego
@@ -3,5 +3,9 @@ package user.read
 default allow := false

 allow := true {
-    input.uuid == "96d99d44-e0a6-458e-a656-de2a400d60a8"
+    input.uuid == input.owner
+}
+
+allow := true {
+    input.role == "admin"
 }