Files
PandaX/resource/rbac_model.conf
2022-07-18 18:17:11 +08:00

11 lines
278 B
Plaintext

[request_definition]
r = dom, sub, obj, act
[policy_definition]
p = dom, sub, obj, act
[policy_effect]
e = some(where (p.eft == allow))
[matchers]
m = r.dom == p.dom && r.sub == p.sub && (keyMatch2(r.obj, p.obj) || keyMatch(r.obj, p.obj)) && ( r.act == p.act || p.act == '*')