11 lines
3.7 KiB
YAML
11 lines
3.7 KiB
YAML
[
|
|
{"id":"self-allow","request":{"id":"c1","tenant":"tenant:friendly:binky","subject":{"id":"u1","type":"human","tenant":"tenant:friendly:binky","attributes":{"roles":[]}},"action":"me.read","resource":{"id":"u1","type":"user-engine:me","system":"user-engine","tenant":"tenant:friendly:binky"},"context":{"self":true}},"expect":{"effect":"allow","reason":"self_service"}},
|
|
{"id":"tenant-admin-allow","request":{"id":"c2","tenant":"tenant:friendly:binky","subject":{"id":"admin","type":"human","tenant":"tenant:friendly:binky","attributes":{"roles":["tenant-admin"]}},"action":"family_member.invite","resource":{"id":"i1","type":"user-engine:family-invitation","system":"user-engine","tenant":"tenant:friendly:binky"},"context":{}},"expect":{"effect":"allow","reason":"tenant_admin"}},
|
|
{"id":"platform-allow","request":{"id":"c3","tenant":"tenant:friendly:binky","subject":{"id":"operator","type":"human","tenant":"platform:root","attributes":{"roles":["platform-operator"]}},"action":"tenant.diagnostics.read","resource":{"id":"tenant:friendly:binky","type":"user-engine:tenant","system":"user-engine","tenant":"tenant:friendly:binky"},"context":{}},"expect":{"effect":"allow","reason":"platform_operator"}},
|
|
{"id":"cross-tenant-deny","request":{"id":"c4","tenant":"tenant:friendly:binky","subject":{"id":"admin","type":"human","tenant":"tenant:family:other","attributes":{"roles":["tenant-admin"]}},"action":"membership.write","resource":{"id":"m1","type":"user-engine:membership","system":"user-engine","tenant":"tenant:friendly:binky"},"context":{}},"expect":{"effect":"deny","reason":"cross_tenant"}},
|
|
{"id":"missing-role-deny","request":{"id":"c5","tenant":"tenant:friendly:binky","subject":{"id":"u1","type":"human","tenant":"tenant:friendly:binky","attributes":{"roles":[]}},"action":"membership.write","resource":{"id":"m1","type":"user-engine:membership","system":"user-engine","tenant":"tenant:friendly:binky"},"context":{}},"expect":{"effect":"deny","reason":"no_matching_role_or_context"}},
|
|
{"id":"wrong-system-deny","request":{"id":"c6","tenant":"tenant:friendly:binky","subject":{"id":"operator","type":"human","tenant":"platform:root","attributes":{"roles":["platform-operator"]}},"action":"outbox.replay","resource":{"id":"e1","type":"user-engine:outbox-event","system":"other","tenant":"tenant:friendly:binky"},"context":{}},"expect":{"effect":"deny","reason":"wrong_system"}}
|
|
,{"id":"registration-applicant-allow","request":{"id":"c7","tenant":"tenant:coulomb","subject":{"id":"applicant-1","type":"human","tenant":"tenant:coulomb","attributes":{"roles":["registration-applicant"],"issuer":"urn:netkingdom:public-registration"}},"action":"registration.start","resource":{"id":"new","type":"user-engine:registration","system":"user-engine","tenant":"tenant:coulomb"},"context":{}},"expect":{"effect":"allow","reason":"registration_applicant"}}
|
|
,{"id":"registration-applicant-membership-deny","request":{"id":"c8","tenant":"tenant:coulomb","subject":{"id":"applicant-1","type":"human","tenant":"tenant:coulomb","attributes":{"roles":["registration-applicant"]}},"action":"membership.write","resource":{"id":"m1","type":"user-engine:membership","system":"user-engine","tenant":"tenant:coulomb"},"context":{}},"expect":{"effect":"deny","reason":"no_matching_role_or_context"}}
|
|
,{"id":"registration-applicant-wrong-issuer-deny","request":{"id":"c9","tenant":"tenant:coulomb","subject":{"id":"applicant-1","type":"human","tenant":"tenant:coulomb","attributes":{"roles":["registration-applicant"],"issuer":"untrusted"}},"action":"registration.start","resource":{"id":"new","type":"user-engine:registration","system":"user-engine","tenant":"tenant:coulomb"},"context":{}},"expect":{"effect":"deny","reason":"no_matching_role_or_context"}}
|
|
]
|