Files
auth/opa/ad/delete.rego
2023-05-04 14:46:40 +02:00

12 lines
118 B
Rego

package AD.DELETE
default allow := false
allow {
input.userUuid == input.owner
}
allow {
input.role == "admin"
}