coulomb/flex-auth
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Authorize scoped public registration applicants
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
Build and Publish Container Image / build-and-push (push) Successful in 32s
Details

Browse source
This commit is contained in:
tegwick 2026-08-14 09:26:12 +02:00
parent 693136edbc
commit b74756791a
3 changed files with 21 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
examples/user-engine/policy_fixtures.yaml
View file

@ -5,4 +5,7 @@
{"id":"cross-tenant-deny","request":{"id":"c4","tenant":"tenant:friendly:binky","subject":{"id":"admin","type":"human","tenant":"tenant:family:other","attributes":{"roles":["tenant-admin"]}},"action":"membership.write","resource":{"id":"m1","type":"user-engine:membership","system":"user-engine","tenant":"tenant:friendly:binky"},"context":{}},"expect":{"effect":"deny","reason":"cross_tenant"}},
{"id":"missing-role-deny","request":{"id":"c5","tenant":"tenant:friendly:binky","subject":{"id":"u1","type":"human","tenant":"tenant:friendly:binky","attributes":{"roles":[]}},"action":"membership.write","resource":{"id":"m1","type":"user-engine:membership","system":"user-engine","tenant":"tenant:friendly:binky"},"context":{}},"expect":{"effect":"deny","reason":"no_matching_role_or_context"}},
{"id":"wrong-system-deny","request":{"id":"c6","tenant":"tenant:friendly:binky","subject":{"id":"operator","type":"human","tenant":"platform:root","attributes":{"roles":["platform-operator"]}},"action":"outbox.replay","resource":{"id":"e1","type":"user-engine:outbox-event","system":"other","tenant":"tenant:friendly:binky"},"context":{}},"expect":{"effect":"deny","reason":"wrong_system"}}
,{"id":"registration-applicant-allow","request":{"id":"c7","tenant":"tenant:coulomb","subject":{"id":"applicant-1","type":"human","tenant":"tenant:coulomb","attributes":{"roles":["registration-applicant"],"issuer":"urn:netkingdom:public-registration"}},"action":"registration.start","resource":{"id":"new","type":"user-engine:registration","system":"user-engine","tenant":"tenant:coulomb"},"context":{}},"expect":{"effect":"allow","reason":"registration_applicant"}}
,{"id":"registration-applicant-membership-deny","request":{"id":"c8","tenant":"tenant:coulomb","subject":{"id":"applicant-1","type":"human","tenant":"tenant:coulomb","attributes":{"roles":["registration-applicant"]}},"action":"membership.write","resource":{"id":"m1","type":"user-engine:membership","system":"user-engine","tenant":"tenant:coulomb"},"context":{}},"expect":{"effect":"deny","reason":"no_matching_role_or_context"}}
,{"id":"registration-applicant-wrong-issuer-deny","request":{"id":"c9","tenant":"tenant:coulomb","subject":{"id":"applicant-1","type":"human","tenant":"tenant:coulomb","attributes":{"roles":["registration-applicant"],"issuer":"untrusted"}},"action":"registration.start","resource":{"id":"new","type":"user-engine:registration","system":"user-engine","tenant":"tenant:coulomb"},"context":{}},"expect":{"effect":"deny","reason":"no_matching_role_or_context"}}
]