auth/opa/ad/update.rego

12 lines
118 B
Plaintext

package AD.UPDATE
default allow := false
allow {
input.userUuid == input.owner
}
allow {
input.role == "admin"
}