bend-kit-authz

Releases (1)

• 0.1.0.0 indexed

Definitions (20)

authz.bend

• type RequestWhat a policy may ask about one request.
• type TriA target answers Yes, No, or Unknown when it needs a missing field.
• type Target
• type DecisionAbstain means that no rule applies.
• type Policy
• def tri
• def has
• def subject.is
• def role.is
• def owner.is
• def owner.of
• def allKleene conjunction: No wins, then Unknown.
• def matches
• def permitA permit grants only on Yes.
• def forbidA forbid denies on Yes and on Unknown: it fails closed.
• def deny_overridesDeny wins, then Allow, then Abstain.
• def intersectAllow only when both allow.
• def decide
• def allowed
• def grantedDefault deny: only Allow grants.